Rethinking Demonstration Unlearning in Imitation Learning for Robotics
On the map: Offline RL and imitation learning from data → Imitation learning methods
also in 1 more
Abstract (arXiv)
Imitation learning for robotics depends on human demonstrations, some of which people may later ask to remove. Retraining without them is the natural reference, but its cost grows with policy and dataset scale, motivating cheaper operators that edit a trained policy. Metrics inherited from machine unlearning, such as forgetting loss or a single membership attack, do not establish what an edit removed from a policy acting in closed loop. We therefore introduce a retrain-calibrated audit that reads demonstration unlearning along two axes: behavior, whether the edited policy acts like one retrained without the removed demonstrations, and evidence, whether an auditor can still detect it was trained on them. The behavior axis measures action divergence to that retrain at matched states, calibrated by a floor built from independent retrains, so a policy at the floor is as close to a retrain as retrains are to each other. The evidence axis applies a per-demonstration membership attack against a retrain null, reporting both its rank and its absolute member-loss level, since rank alone accepts operators that inflate member losses past the null. A conformal test then combines both axes into one hypothesis of joint retrain consistency, against a fleet of independent retrains large enough to reject at conventional significance. Across five preregistered conditions on three real-robot policy classes and two simulation suites, the axes dissociate in both directions on one checkpoint, as an edit may repair task behavior while leaving evidence unchanged, or reduce evidence while moving behavior away from retraining. On the ACT arm, a redirect edit restores blind-scored robot success to 18 of 20 trials.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Imitation learning methods, one of 13 directions in Offline RL and imitation learning from data. Builds on 35 of its 40 references that are in the map. First posted on arXiv 21 Aug 2026.
Builds on
35 of 40 references.
References · 35
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2024OpenVLA: An Open-Source Vision-Language-Action Modelcited by 2,777
- 2023Diffusion Policy: Visuomotor Policy Learning via Action Diffusioncited by 2,730
- 2024π0: A Vision-Language-Action Flow Model for General Robot Controlcited by 2,297
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
- 2025π0.5: a Vision-Language-Action Model with Open-World Generalizationcited by 1,653
- 2019Machine Unlearningcited by 1,020
- 2021Membership Inference Attacks From First Principlescited by 839
- 2021What Matters in Learning from Offline Human Demonstrations for Robot Manipulationcited by 699
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
23 more
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 507
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 484
- 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 475
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2024Universal Manipulation Interface: In-The-Wild Robot Teaching Without In-The-Wild Robotscited by 373
- 2023Who's Harry Potter? Approximate Unlearning in LLMscited by 366
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2025A Careful Examination of Large Behavior Models for Multitask Dexterous Manipulationcited by 125
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearningcited by 82
- 2022Deep Regression Unlearningcited by 32
- 2025DataMIL: Selecting Data for Robot Imitation Learning with Datamodelscited by 25
- 2025CUPID: Curating Data your Robot Loves with Influence Functionscited by 21
- 2024Graph Unlearning with Efficient Partial Retrainingcited by 20
- 2025Is Your Imitation Learning Policy Better than Mine? Policy Comparison with Near-Optimal Stoppingcited by 14
- 2026VLA-Forget: Vision-Language-Action Unlearning for Embodied Foundation Modelscited by 9
- 2024TrajDeleter: Enabling Trajectory Forgetting in Offline Reinforcement Learning Agentscited by 7
- 2025Unlearning Inversion Attacks for Graph Neural Networkscited by 4
- 2026RedFlow: Redirect Failure into Action-Level Corrections for Flow-matching VLA Policycited by 3
- 2026Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networkscited by 1
- 2026Behavior Uncloning: Distilling Mode Redirection into Policy Weights without Inference-Time Steeringcited by 1
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025Learning What to Do and What Not To Do: Offline Imitation from Expert and Undesirable Demonstrations
- 2026Learning When to Stop: Selective Imitation Learning Under Arbitrary Dynamics Shift
- 2025A Smooth Sea Never Made a Skilled SAILOR: Robust Imitation via Learning to Search
- 2026Difference-Aware Retrieval Policies for Imitation Learning
- 2025Counterfactual Behavior Cloning: Offline Imitation Learning from Imperfect Human Demonstrations
- 2022Imitation Learning by Estimating Expertise of Demonstrators
- 2025Action Chunking and Exploratory Data Collection Yield Exponential Improvements in Behavior Cloning for Continuous Control
- 2020Concurrent Training Improves the Performance of Behavioral Cloning from Observation