mlsanityData to 14 Oct 2026

GRACE: Adaptive Concept Erasure with Geometry-Guided Retention in Diffusion Models

arXiv 2609.12731 ↗First posted 11 Sep 2026cs.CVcited by 0

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Text-to-image (T2I) diffusion models inevitably internalize sensitive or non-compliant concepts from large-scale pretraining data, necessitating post-hoc concept erasure. However, existing erasure methods often lack explicit constraints on parameter updates, leading to over-intervention and unintended semantic drift. In addition, many methods rely on manually crafted counterfactual supervision, such as surrogate prompts, which incurs substantial data construction costs that limit scalability to new concepts. To address these limitations, we propose GRACE, a structured concept erasure framework designed to enable localized and selective intervention. Specifically, we introduce a semantically weighted sensitive subspace estimation to precisely lock intervention directions, and employ lightweight subspace-constrained adapters to prevent global semantic disturbance. To eliminate the dependency on manual prompt engineering, we design an automatically decoupled safe-anchor mechanism. To mitigate semantic drift induced by excessive intervention, we introduce an energy-driven dynamic gating mechanism that adaptively controls the timing and strength of intervention at inference. Extensive experiments demonstrate that our method achieves a superior balance between erasure effectiveness and generation fidelity. Compared with the average performance of five state-of-the-art (SOTA) concept erasure methods, our method improves the fine-grained NSFW reduction rate by 17.86%, while reducing the macro-averaged target CLIP Score and preservation-oriented Fr'echet Inception Distance (FID) by 4.75% and 50.58%, respectively, indicating stronger concept suppression with substantially improved preservation of the original model's generative utility.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 0 of its 37 references that are in the map. First posted on arXiv 11 Sep 2026.

Builds on

0 of 37 references.

No references here yet.

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
  2. 2025SPEED: Scalable, Precise, and Efficient Concept Erasure for Diffusion Models
  3. 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Models
  4. 2025DyME: Dynamic Multi-Concept Erasure in Diffusion Models with Bi-Level Orthogonal LoRA Adaptation
  5. 2024Precise, Fast, and Low-cost Concept Erasure in Value Space: Orthogonal Complement Matters
  6. 2026To Erase, or Not to Erase: Robust Training-Free Concept Erasure with Preservation aware Adaptive Ranked Subspace Expansion
  7. 2026Orthogonal Concept Erasure for Diffusion Models
  8. 2025Erased or Dormant? Rethinking Concept Erasure Through Reversibility