Association Restoration Test: Revealing Restorable Shortcuts after Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Association unlearning aims to disable learned label-attribute shortcuts while preserving task performance. Existing evaluations mainly measure output-level robustness or probe whether shortcut attributes remain readable in frozen features, but neither test determines whether a retained association remains functionally usable by the original classifier. We propose the Association Restoration Test (ART), a post-hoc diagnostic for functional shortcut restorability. ART estimates class-conditional association directions, amplifies residual components, and evaluates the modified features with the original classifier head. Across Waterbirds, CelebA, SpuCoDogs, and an ISIC timestamp-artifact extension, we show that output metrics, representation probes, and ART characterize distinct aspects of shortcut mitigation. These findings motivate restoration-aware evaluation for unlearning and shortcut-mitigation methods that target learned associations rather than individual classes or concepts.
Key facts. No citing papers in the map yet (data through 13 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 23 of its 29 references that are in the map. First posted on arXiv 7 Jul 2026.
Builds on
23 of 29 references.
Closest ancestors · 8
Same direction, newest first
- 2026An Illusion of Unlearning? Assessing Machine Unlearning Through Internal Representations9 Apr
- 2026Suppression or Deletion: A Restoration-Based Representation-Level Analysis of Machine Unlearning18 Feb
- 2025CLEAR: Unlearning Spurious Style-Content Associations with Contrastive LEarning with Anti-contrastive Regularization24 Jul
- 2025Unlearning's Blind Spots: Over-Unlearning and Prototypical Relearning Attack2 Jun
- 2024UnLearning from Experience to Avoid Spurious Correlations4 Sep
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
- 2023Towards Unbounded Machine Unlearning20 Feb
Other references · 15
- 2014Deep Learning Face Attributes in the Wildcited by 3,686
- 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,371
- 2016Understanding intermediate layers using linear classifier probescited by 1,313
- 2019Distributionally Robust Neural Networks for Group Shifts: On the Importance of Regularization for Worst-Case Generalizationcited by 1,242
- 2019Machine Unlearningcited by 1,056
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 617
- 2017Skin Lesion Analysis Toward Melanoma Detection: A Challenge at the 2017 International Symposium on Biomedical Imaging (ISBI), Hosted by the International Skin Imaging Collaboration (ISIC)cited by 549
- 2021Just Train Twice: Improving Group Robustness without Training Group Informationcited by 523
- 2022Last Layer Re-Training is Sufficient for Robustness to Spurious Correlationscited by 380
- 2020Environment Inference for Invariant Learningcited by 306
- 2019BCN20000: Dermoscopic Lesions in the Wildcited by 225
- 2022Correct-N-Contrast: A Contrastive Approach for Improving Robustness to Spurious Correlationscited by 171
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026SALMUBench: A Benchmark for Sensitive Association-Level Multimodal Unlearning
- 2026Source-Free Class Relearning: Diagnosing Forgetting in Class Unlearning
- 2024CLIPErase: Efficient Unlearning of Visual-Textual Associations in CLIP
- 2026ICON decomposition: Multivariate concept auditing reveals shortcuts that neural networks rely on
- 2025Redirection for Erasing Memory (REM): Towards a universal unlearning method for corrupted data
- 2026Forgetting Similar Samples: Can Machine Unlearning Do it Better?
- 2025From Dormant to Deleted: Tamper-Resistant Unlearning Through Weight-Space Regularization
- 2025CAF'E: Causal Black-Box Testing of Machine Unlearning