mlsanityData to 14 Oct 2026

Retain-Neutral Surrogates for Min-Max Unlearning

arXiv 2605.05871 ↗First posted 7 May 2026cs.LGcited by 0

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning seeks to remove the influence of designated training data while preserving performance on the remaining data. Approximate unlearning can be viewed as a local editing problem; in min-max unlearning, the key local object is the surrogate point at which the retain objective is evaluated. When forget and retain gradients are strongly aligned, an unconstrained forget-maximizing perturbation can move to a surrogate point that increases retain loss. We propose Retain-Orthogonal Surrogate Unlearning (ROSU), which constrains the inner surrogate construction by maximizing first-order forget gain subject to zero first-order retain change under a fixed perturbation budget. This yields a closed-form retain-orthogonal perturbation, a lightweight transported outer update, and amplification along the retain-neutral direction. Our analysis establishes (i) a curvature-controlled second-order bound on retain damage, (ii) a positive-alignment regime in which ROSU strictly reduces surrogate retain loss relative to standard min-max perturbations, and (iii) near-equivalence when the two gradients are nearly orthogonal. Across vision and language benchmarks (CIFAR-10/100, Tiny-ImageNet, TOFU, WMDP), the empirical pattern follows this geometry: ROSU gives its clearest gains in high-coupling regimes while remaining competitive elsewhere.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 53 of its 63 references that are in the map. First posted on arXiv 7 May 2026.

Builds on

53 of 63 references.

Closest ancestors · 34

Same direction, newest first

  1. 2025Geometric-disentangelment Unlearning21 Nov
  2. 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun
  3. 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearning8 Mar
  4. 2025Go Beyond Your Means: Unlearning with Per-Sample Gradient Orthogonalization4 Mar
  5. 2025ReLearn: Unlearning via Learning for Large Language Models16 Feb
  6. 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond7 Feb
  7. 2024Unified Parameter-Efficient Unlearning for LLMs30 Nov
  8. 2024LLM Unlearning via Loss Adjustment with Only Forget Data14 Oct
  9. 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
  10. 2024Alternate Preference Optimization for Unlearning Factual Knowledge in Large Language Models20 Sep
  11. 2024Learning to Unlearn for Robust Machine Unlearning15 Jul
  12. 2024On Large Language Model Continual Unlearning14 Jul
22 more
  1. 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
  2. 2024Textual Unlearning Gives a False Sense of Unlearning19 Jun
  3. 2024Opt-Out: Investigating Entity-Level Unlearning for Large Language Models via Optimal Transport18 Jun
  4. 2024Soft Prompting for Unlearning in Large Language Models17 Jun
  5. 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models16 Jun
  6. 2024What makes unlearning hard and what to do about it3 Jun
  7. 2024Reconstruction Attacks on Machine Unlearning: Simple Models are Vulnerable30 May
  8. 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
  9. 2024Machine Unlearning via Null Space Calibration21 Apr
  10. 2024Is Retain Set All You Need in Machine Unlearning? Restoring Performance of Unlearned Models with Out-Of-Distribution Images19 Apr
  11. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
  12. 2024UNDIAL: Self-Distillation with Adjusted Logits for Robust Unlearning in Large Language Models15 Feb
  13. 2024Rethinking Machine Unlearning for Large Language Models13 Feb
  14. 2024Fast Exact Unlearning for In-Context Learning Data for LLMs1 Feb
  15. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  16. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  17. 2023Large Language Model Unlearning14 Oct
  18. 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
  19. 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
  20. 2023Learning to Unlearn: Instance-wise Unlearning for Pre-trained Classifiers27 Jan
  21. 2022A Survey of Machine Unlearning6 Sep
  22. 2021Machine Unlearning of Features and Labels26 Aug

Other references · 19

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
  3. 2024The Llama 3 Herd of Modelscited by 14,715
  4. 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
  5. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  6. 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,417
  7. 2018Continual Lifelong Learning with Neural Networks: A Reviewcited by 1,330
  8. 2020Gradient Surgery for Multi-Task Learningcited by 1,256
  9. 2019Machine Unlearningcited by 1,061
  10. 2022Quantifying Memorization Across Neural Language Modelscited by 763
  11. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
  12. 2019Certified Data Removal from Machine Learning Modelscited by 535
7 more
  1. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
  2. 2021ASAM: Adaptive Sharpness-Aware Minimization for Scale-Invariant Learning of Deep Neural Networkscited by 293
  3. 2020Approximate Data Deletion from Machine Learning Modelscited by 255
  4. 2020Mixed-Privacy Forgetting in Deep Networkscited by 163
  5. 2019Privacy Risks of Securing Machine Learning Models against Adversarial Examplescited by 141
  6. 2023Copyright Violations and Large Language Modelscited by 108
  7. 2025The European Union general data protection regulation: what it is and what it meanscited by 31

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025Machine Unlearning under Overparameterization
  2. 2024nabla τ: Gradient-based and Task-Agnostic machine Unlearning
  3. 2026BLADE: Bilevel Low-rank Augmented-Lagrangian Erasure for LLM Unlearning
  4. 2026GRACE:Gradient-guided Coreset Selection for LLM Unlearning
  5. 2026SAGE: Retain-Aware Post-Hoc Sanitization of Final Unlearning Vector
  6. 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic
  7. 2026Multi-Objective Reference-Aligned Machine Unlearning
  8. 2025Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgery