mlsanityData to 14 Oct 2026

Source-Free Class Relearning: Diagnosing Forgetting in Class Unlearning

arXiv 2609.02018 ↗First posted 2 Sep 2026cs.LG cs.CVcited by 0

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Class unlearning aims to remove a model's ability to recognize designated forget classes while preserving performance on retain classes. However, low forget accuracy after unlearning does not necessarily mean the class structure has been erased. Approximate unlearning methods can alter classifier decision boundaries while leaving recoverable structure in the representation. Prior work has shown that forget classes can be recovered, but existing approaches require real forget or retain samples, auxiliary data, or reference checkpoints. We study class relearning in a strictly source-free setting, asking whether a forget class can be recovered through a classifier-head update using only the unlearned model. Our approach rests on a theoretical analysis establishing a sufficient alignment condition under which a single gradient step on a synthetic probe set increases the expected logit margin of the forget class. Building on this, we propose a white-box Source-Free Relearning Audit (SFRA), which generates candidate embeddings in representation space and uses model-guided confidence filtering to construct high-confidence retain probes and low-confidence boundary-adjacent probes that are relabelled as the forget class. Gaussian sampling and Softmax confidence are used by default, while ablations with alternative proposal distributions and uncertainty criteria show that recoverability is not specific to these choices. To quantify recoverability, we introduce the Relearning Score (RS), which jointly measures forget-class recovery and retain-accuracy preservation, and report class-matched DeltaRS relative to a retrained reference. Experiments on CIFAR-10, CIFAR-100, and TinyImageNet with ResNet-18, ViT-B/16, and Swin-T show that several unlearning methods exhibit substantial source-free recoverability, and that for a subset of methods this recoverability exceeds the matched retrained reference.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 10 of its 62 references that are in the map. First posted on arXiv 2 Sep 2026.

Builds on

10 of 62 references.

Closest ancestors · 8

Same direction, newest first

  1. 2026RULER: Representation-Level Verification of Machine Unlearning26 May
  2. 2026Do Vision Models Truly Forget? New Findings from Representation-Level Certification of Visual Unlearning in Vertical Federated Learning19 May
  3. 2026Revisiting Privacy Leakage in Machine Unlearning: Membership Inference Beyond the Forgotten Set1 May
  4. 2026Erase at the Core: Representation Unlearning for Machine Unlearning5 Feb
  5. 2024Do Unlearning Methods Remove Information from Language Model Weights?11 Oct
  6. 2024UnUnlearning: Unlearning is not sufficient for content regulation in advanced generative AI27 Jun
  7. 2024Are we making progress in unlearning? Findings from the first NeurIPS unlearning competition13 Jun
  8. 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb

Other references · 2

  1. 2023LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70Bcited by 195
  2. 2020Selective Forgetting of Deep Networks at a Finer Level than Samplescited by 13

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directions
  2. 2024Decoupling the Class Label and the Target Concept in Machine Unlearning
  3. 2026An Illusion of Unlearning? Assessing Machine Unlearning Through Internal Representations
  4. 2025Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Tasks
  5. 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting
  6. 2026Classification-Head Bias in Class-Level Machine Unlearning: Diagnosis, Mitigation, and Evaluation
  7. 2026PURGE: Projected Unlearning via Retain-Guided Erasure
  8. 2025One-Point Contraction: Erasing Representational Separability toward Irreversible Deep Forgetting