TRACER: Token ReAssignment for Concept ERasure in Generative Recommendation
On the map: LLM safety and security → Membership inference attacks
Abstract (arXiv)
Generative recommendation formulates next-item prediction as autoregressive generation over semantic ID (SID) sequences derived from users' historical interactions, making modern recommender systems structurally similar to large language models (LLMs). As privacy and safety concerns grow, these systems increasingly require concept unlearning to remove sensitive or harmful concepts associated with items. However, existing LLM unlearning methods cannot be directly applied to generative recommendation. Unlike word tokens with explicit semantics, SIDs are abstract identifiers that are often shared by both forget and retain items, leading to severe conflicts between concept removal and recommendation utility preservation. To address this challenge, we propose TRACER, an end-to-end concept unlearning framework based on token reassignment. Rather than directly suppressing shared SIDs, TRACER reassigns concept-related items to alternative tokens that better facilitate forgetting while minimizing side effects on retained items. We further introduce a coherence regularizer to preserve semantic consistency among retain items during unlearning. Experiments on real-world recommendation datasets demonstrate that TRACER effectively removes target concepts while substantially better preserving recommendation utility than existing unlearning baselines.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Membership inference attacks, one of 12 directions in LLM safety and security. Builds on 42 of its 52 references that are in the map. First posted on arXiv 5 Jun 2026.
Builds on
42 of 52 references.
Closest ancestors · 1
Same direction, newest first
Other references · 41
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2025Qwen3 Technical Reportcited by 8,195
- 2019Machine Unlearningcited by 1,020
- 2022Autoregressive Image Generation using Residual Quantizationcited by 706
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 424
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2023Who's Harry Potter? Approximate Unlearning in LLMscited by 366
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 274
- 2024Knowledge Conflicts for LLMs: A Surveycited by 274
29 more
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 251
- 2025OneRec: Unifying Retrieve and Rank with Generative Recommender and Iterative Preference Alignmentcited by 167
- 2024Learnable Item Tokenization for Generative Recommendationcited by 106
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2024Representation Noising: A Defence Mechanism Against Harmful Finetuningcited by 93
- 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyondcited by 76
- 2024LLM Unlearning via Loss Adjustment with Only Forget Datacited by 71
- 2025MTGR: Industrial-Scale Generative Recommendation Framework in Meituancited by 47
- 2025OneRec-Think: In-Text Reasoning for Generative Recommendationcited by 47
- 2019FOCUS: Flexible Optimizable Counterfactual Explanations for Tree Ensemblescited by 43
- 2024Erasing Conceptual Knowledge from Language Modelscited by 34
- 2024Generative Recommender with End-to-End Learnable Item Tokenizationcited by 32
- 2025MedEyes: Learning Dynamic Visual Focus for Medical Progressive Diagnosiscited by 32
- 2025BLUR: A Bi-Level Optimization Approach for LLM Unlearningcited by 23
- 2025Pathology-Aware Prototype Evolution via LLM-Driven Semantic Disambiguation for Multicenter Diabetic Retinopathy Diagnosiscited by 22
- 2023MultiDelete for Multimodal Machine Unlearningcited by 20
- 2025Tool Unlearning for Tool-Augmented LLMscited by 17
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearningcited by 16
- 2025MiniOneRec: An Open-Source Framework for Scaling Generative Recommendationcited by 16
- 2022Optical Flow Training under Limited Label Budget via Active Learningcited by 14
- 2026Reflect-Guard: Enhancing LLM Safeguards against Adversarial Prompts via Logical Self-Reflectioncited by 12
- 2025Speech Unlearningcited by 7
- 2026Improving the Completeness and Comparability of Segment Disclosures: A Large Language Model Approachcited by 6
- 2026Investigating Tool-Memory Conflicts in Tool-Augmented LLMscited by 5
- 2025FUTURE: Flexible Unlearning for Tree Ensemblecited by 3
- 2026Carbon-Aware Compute--Power Scheduling for AI Data Centers with Microgrid Prosumer Operationscited by 3
- 2026A Mechanistic Perspective and Circuit-Guided Difficulty Metric for Unlearningcited by 2
- 2022Kadabra: Adapting Kademlia for the Decentralized Webcited by 1
- 2024Honeybee: Byzantine Tolerant Decentralized Peer Sampling with Verifiable Random Walkscited by 1
Built on by
Citing papers per year: 2026: 2.
2 papers.