Divergence Decoding: Inference-Time Unlearning via Auxiliary Models
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Large Language Models (LLMs) frequently memorize sensitive training data thereby creating significant privacy and copyright risks. Addressing these risks, i.e., removing such knowledge from an existing model checkpoint, has proven challenging as many unlearning methods lead to catastrophic utility loss or are ineffective for complex queries. We introduce Divergence Decoding (DD), a mechanism that uses small auxiliary models to steer the logits of the LLM away from specific data during inference. Training these models is straight forward, i.e., we use standard pre-training and fine-tuning setups. We find the method decisively outperforms state-of-the-art (SOTA) baselines on unlearning benchmarks across a variety of model and training dataset scales consistent with DD being an effective and inexpensive solution to unlearning. We then demonstrate that this steered distribution can be trivially distilled back into the base model. Since the method is generally applicable to any probabilistic model, we explore its efficacy outside of text generation and find evidence of generalization to the domain of images.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 35 of its 46 references that are in the map. First posted on arXiv 29 May 2026.
Builds on
35 of 46 references.
Closest ancestors · 16
Same direction, newest first
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loop5 Feb
- 2026DUET: Distilled LLM Unlearning from an Efficiently Contextualized Teacher29 Jan
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decoding7 Nov
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun
- 2025UCD: Unlearning in LLMs via Contrastive Decoding12 Jun
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection19 May
- 2025LLM Unlearning via Neural Activation Redirection11 Feb
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
- 2024Offset Unlearning for Large Language Models17 Apr
4 more
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024UNDIAL: Self-Distillation with Adjusted Logits for Robust Unlearning in Large Language Models15 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
Other references · 19
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2020Scaling Laws for Neural Language Modelscited by 6,586
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,787
- 2020Taming Transformers for High-Resolution Image Synthesiscited by 3,253
- 2019The Curious Case of Neural Text Degenerationcited by 2,916
- 2022Locating and Editing Factual Associations in GPTcited by 2,691
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2018Hierarchical Neural Story Generationcited by 1,193
- 2022Editing Models with Task Arithmeticcited by 1,120
- 2019Improved Knowledge Distillation via Teacher Assistantcited by 573
- 2024Evaluating Text-to-Visual Generation with Image-to-Text Generationcited by 474
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
7 more
- 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 441
- 2023Sheared LLaMA: Accelerating Language Model Pre-training via Structured Pruningcited by 415
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
- 2024Programming Refusal with Conditional Activation Steeringcited by 206
- 2024A Closer Look at the Limitations of Instruction Tuningcited by 77
- 2025Overtrained Language Models Are Harder to Fine-Tunecited by 58
- 2025A Fast and Effective Solution to the Problem of Look-ahead Bias in LLMscited by 8
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges
- 2026Inference-Time Machine Unlearning via Gated Activation Redirection
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners
- 2026KUDA: Knowledge Unlearning by Deviating Representation for Large Language Models
- 2025Scalable and Robust LLM Unlearning by Correcting Responses with Retrieved Exclusions
- 2026Nullify: Null-Space Activation Steering for Training-Free LLM Unlearning
- 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data
- 2025DP2Unlearning: An Efficient and Guaranteed Unlearning Framework for LLMs