Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning for large language models (LLMs) often assumes that a pre-defined forget set matches what the model has memorized, but this frequently breaks in realistic privacy settings where the original training data is inaccessible. We term this gap forget-set misalignment and identify two cases. In Under Unlearning, the forget set omits memorized information and leakage persists. In Out-of-Knowledge Unlearning, the algorithm is driven to "forget" knowledge the model never learned, perturbing parameters and degrading utility. Using gradient-level analysis, we show these behaviors arise from misaligned unlearning targets rather than specific optimization choices. We then propose CONfession-to-Forget-Set (CONFS), a data-blind framework that constructs model-aligned forget sets by eliciting and formalizing the model's memorized knowledge. Across synthetic, multimodal, and real-world benchmarks, CONFS approaches Gold-standard performance on several metrics and achieves a competitive forgetting-utility balance, while preserving utility better than other data-blind forget-set constructions.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 23 of its 36 references that are in the map. First posted on arXiv 1 Sep 2026.
Builds on
23 of 36 references.
Closest ancestors · 13
Same direction, newest first
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning17 May
- 2025Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond26 Feb
- 2025A Comprehensive Survey of Machine Unlearning Techniques for Large Language Models22 Feb
- 2024Protecting Privacy in Multimodal Large Language Models with MLLMU-Bench29 Oct
- 2024CLEAR: Character Unlearning in Textual and Visual Modalities23 Oct
- 2024Unlearn and Burn: Adversarial Machine Unlearning Requests Destroy Model Accuracy12 Oct
- 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement29 Sep
- 2024What makes unlearning hard and what to do about it3 Jun
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
- 2023A Duty to Forget, a Right to be Assured? Exposing Vulnerabilities in Machine Unlearning Services15 Sep
Other references · 10
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,418
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2021DeBERTaV3: Improving DeBERTa using ELECTRA-Style Pre-Training with Gradient-Disentangled Embedding Sharingcited by 1,254
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data
- 2026SHRED: Retain-Set-Free Unlearning via Self-Distillation with Logit Demotion
- 2025BLUR: A Benchmark for LLM Unlearning Robust to Forget-Retain Overlap
- 2024LLM Unlearning via Loss Adjustment with Only Forget Data
- 2026Forgetting Only What Matters: Layer-Selective Unlearning toward Robust LLMs
- 2026Learning What to Forget: Improving LLM Unlearning via Learned Token-Level Importance
- 2026What to Forget in Unlearning? Forget Set Curation for Language Models
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decoding