Natively Unlearnable Large Language Models
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Unlearning aims to remove the influence of specific training data sources, but this has proved challenging because the contributions of different sources are entangled within the model. Isolating source contributions to disjoint parameters makes removal easier, though it obstructs joint learning across sources. We propose NULLs (Natively Unlearnable LLMs), a model class that satisfies the two opposing goals of isolating source-specific contributions and learning jointly across sources, by training a set of shared backbone neurons alongside a pool of sparsely activated sinks. During training, information specific to a source naturally concentrates in its sinks while information shared across sources accumulates in the backbone. A source is then unlearned at deployment by disabling its corresponding sinks, with no gradient updates and no access to the retained data. We show that NULLs scales to Wikipedia's ~6M articles, isolating each as an independent source. Unlearning a single article removes knowledge specific to it while preserving facts shared with semantically related articles, closely matching retraining from scratch. We note that unlearning with NULLs is also robust: in a case study of unlearning the Harry Potter books, NULLs resists both adversarial extraction and relearning that reverses post-hoc unlearning. Finally, NULLs preserves general language capabilities, matching a standard transformer on downstream benchmarks. Together, these results suggest that source-level unlearning need not be an afterthought. It can be built natively into LLM training while retaining the benefits of shared representation learning.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 20 of its 23 references that are in the map. First posted on arXiv 11 Jun 2026.
Builds on
20 of 23 references.
Closest ancestors · 9
Same direction, newest first
- 2025Beyond Data Filtering: Knowledge Localization for Capability Removal in LLMs5 Dec
- 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond7 Feb
- 2024Catastrophic Failure of LLM Unlearning via Quantization21 Oct
- 2024Rethinking LLM Memorization through the Lens of Adversarial Compression23 Apr
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Large Language Model Unlearning14 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
Other references · 11
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2022Locating and Editing Factual Associations in GPTcited by 2,691
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2020Transformer Feed-Forward Layers Are Key-Value Memoriescited by 1,336
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 158
- 2021DEMix Layers: Disentangling Domains for Modular Language Modelingcited by 132
- 2023A Survey of Large Language Models Attributioncited by 71
- 2023Can Neural Network Memorization Be Localized?cited by 69
- 2024Gradient Routing: Masking Gradients to Localize Computation in Neural Networkscited by 34
- 2023Do Localization Methods Actually Localize Memorized Data in LLMs? A Tale of Two Benchmarkscited by 29
- 2025Memorization Sinks: Isolating Memorization during LLM Trainingcited by 7
Built on by
Citing papers per year: 2026: 2.
2 papers.
- 2026Modular Pretraining Enables Access Controlcited by 3
- 2026Prototype Language Modelscited by 2
- 2026Modular Pretraining Enables Access Control9 Jul 2026
- 2026Prototype Language Models1 Jul 2026
Similar, not cited
Close in wording, no citation either way
- 2026KUDA: Knowledge Unlearning by Deviating Representation for Large Language Models
- 2025Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs
- 2025Erase or Hide? Suppressing Spurious Unlearning Neurons for Robust Unlearning
- 2024Offset Unlearning for Large Language Models
- 2024Towards Robust and Parameter-Efficient Knowledge Unlearning for LLMs
- 2026Multilingual Unlearning in LLMs: Transfer, Dynamics, and Reversibility
- 2025Constrained Entropic Unlearning: A Primal-Dual Framework for Large Language Models
- 2026Null-Space Constrained Low-Rank Adaptation for Response-Specified Large Language Model Unlearning