Graph-Guided Selective Unlearning for Language Models: Controlling Support Routes Beyond Forget Seeds
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Enterprises fine-tune language models on proprietary data that may later require removal due to privacy, contractual, or compliance obligations. Selective unlearning removes requested knowledge while preserving model utility, offering a practical alternative to full retraining, but existing methods treat the explicitly identified forget examples as the complete deletion scope. This is insufficient when target knowledge remains recoverable through paraphrases, aliases, or neighboring training examples. We propose GRAPHSU, a graph-guided controller that expands the deletion scope beyond forget seeds by constructing a weighted support-route graph, propagating deletion pressure through it, and applying graded forgetting strengths to high-risk neighbors. On the Task of Fictitious Unlearning (TOFU), a synthetic author-profile question-answering benchmark, and PISTOL, a structural-unlearning benchmark built around interconnected factual samples, with GPT-2 Medium and Llama-3.2-3B-Instruct, GRAPHSU achieves the lowest utility-feasible soft leakage across all deletion settings, reducing leakage by up to 49.5 percentage points over a matched seed-only baseline, demonstrating that effective enterprise unlearning requires controlling support routes, not just forget seeds.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 15 of its 27 references that are in the map. First posted on arXiv 27 Aug 2026.
Builds on
15 of 27 references.
Closest ancestors · 7
Same direction, newest first
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decoding7 Nov
- 2025Do LLMs Really Forget? Evaluating Unlearning with Knowledge Correlation and Confidence Awareness6 Jun
- 2025UIPE: Enhancing LLM Unlearning by Removing Knowledge Related to Forgetting Targets6 Mar
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024How Data Inter-connectivity Shapes LLMs Unlearning: A Structural Unlearning Perspective24 Jun
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
Other references · 8
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2022Locating and Editing Factual Associations in GPTcited by 2,691
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
- 2020Estimating Training Data Influence by Tracing Gradient Descentcited by 580
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2023MQuAKE: Assessing Knowledge Editing in Language Models via Multi-Hop Questionscited by 300
- 2023Evaluating the Ripple Effects of Knowledge Editing in Language Modelscited by 242
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026From Anchors to Supervision: Memory-Graph Guided Corpus-Free Unlearning for Large Language Models
- 2025Not Every Token Needs Forgetting: Selective Unlearning to Limit Change in Utility in Large Language Model Unlearning
- 2026Making LLMs Truly Forget: Deep Unlearning by Searching, Selecting, and Severing Knowledge Paths
- 2025Concept Unlearning in Large Language Models via Self-Constructed Knowledge Triplets
- 2024TOFU: A Task of Fictitious Unlearning for LLMs
- 2024A Closer Look at Machine Unlearning for Large Language Models
- 2026Decouple to Forget: Semantic Mediation for Sensitive Unlearning in Large Language Models
- 2026What to Forget in Unlearning? Forget Set Curation for Language Models