mlsanityData to 14 Oct 2026

Unmerge: Efficient Machine Unlearning via Task Arithmetic

arXiv 2609.38895 ↗First posted 30 Sep 2026cs.LG cs.AIcited by 0

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Approximate machine unlearning seeks to remove the influence of a forget set from a trained model without full retraining. Existing gradient-based methods require data-dependent hyperparameter search, struggle when forget and retain knowledge are entangled, and offer little insight into where unlearning actually happens inside the network. We recast unlearning through the lens of task arithmetic: if finetuning produces a merged task vector τm that combines learning on forget and retain sets, unlearning is the inverse operation that subtracts a learned forget component τF to recover the retain task vector τR. The forget signal is concentrated: at every layer, forget activations lie in a subspace spanned by a handful of dominant directions, so we factorize τF in a low-rank forget basis, which is faithful up to a small tail-eigenvalue residual and limits how far the correction can perturb retain. We then optimize three intuitive goals (match the merged vector inside the forget span, suppress leakage into the retain span, and bound the correction size) that provably bound forget leakage and retain damage in activation space. The resulting algorithm, Unmerge, is fast and powerful: on class-level unlearning with ResNet-50 on CIFAR-100 and Tiny ImageNet, it improves Tug-of-War by up to ~24% over a baseline of comparable runtime and by up to ~18% over stronger baselines that run ~5x slower, keeps membership-inference exposure at the level of retraining, and shrinks the feature-distribution gap to the retrained model, where relabeling methods leave forget features cleanly separable. Further studies show that Unmerge also applies to ViT-S/16 and scales to Llama-3.2-3B. The per-layer basis geometry that drives the algorithm also serves as a layerwise diagnostic for when and where unlearning becomes structurally hard.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 49 of its 54 references that are in the map. First posted on arXiv 30 Sep 2026.

Builds on

49 of 54 references.

Closest ancestors · 20

Same direction, newest first

  1. 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directions16 Apr
  2. 2026Is your algorithm unlearning or untraining?9 Apr
  3. 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun
  4. 2025Unlearning's Blind Spots: Over-Unlearning and Prototypical Relearning Attack2 Jun
  5. 2025Exact Unlearning of Finetuning Data via Model Merging at Scale6 Apr
  6. 2025Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Tasks31 Mar
  7. 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Research9 Dec
  8. 2024Zero-shot Class Unlearning via Layer-wise Relevance Analysis and Neuronal Path Perturbation31 Oct
  9. 2024NegMerge: Sign-Consensual Weight Merging for Machine Unlearning8 Oct
  10. 2024What makes unlearning hard and what to do about it3 Jun
  11. 2024Machine Unlearning: A Comprehensive Survey13 May
  12. 2024Machine Unlearning via Null Space Calibration21 Apr
8 more
  1. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  2. 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting1 Dec
  3. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  4. 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
  5. 2023Boundary Unlearning21 Mar
  6. 2022A Survey of Machine Unlearning6 Sep
  7. 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
  8. 2021Fast Yet Effective Machine Unlearning17 Nov

Other references · 29

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  3. 2024The Llama 3 Herd of Modelscited by 14,715
  4. 2022Locating and Editing Factual Associations in GPTcited by 2,691
  5. 2013Visualizing and Understanding Convolutional Networkscited by 2,290
  6. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  7. 2022Model soups: averaging weights of multiple fine-tuned models improves accuracy without increasing inference timecited by 1,396
  8. 2017Interpretability Beyond Feature Attribution: Quantitative Testing with Concept Activation Vectors (TCAV)cited by 1,319
  9. 2014How transferable are features in deep neural networks?cited by 1,225
  10. 2022Editing Models with Task Arithmeticcited by 1,120
  11. 2019Machine Unlearningcited by 1,061
  12. 2023TIES-Merging: Resolving Interference When Merging Modelscited by 818
17 more
  1. 2017Network Dissection: Quantifying Interpretability of Deep Visual Representationscited by 708
  2. 2023Language Models are Super Mario: Absorbing Abilities from Homologous Models as a Free Lunchcited by 694
  3. 2021Merging Models with Fisher-Weighted Averagingcited by 621
  4. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
  5. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
  6. 2022Dataless Knowledge Fusion by Merging Weights of Language Modelscited by 387
  7. 2019Orthogonal Gradient Descent for Continual Learningcited by 369
  8. 2021Gradient Projection Memory for Continual Learningcited by 348
  9. 2020Amnesiac Machine Learningcited by 319
  10. 2020Systematic Evaluation of Privacy Risks of Machine Learning Modelscited by 292
  11. 2023LEACE: Perfect linear concept erasure in closed formcited by 267
  12. 2023Task Arithmetic in the Tangent Space: Improved Editing of Pre-Trained Modelscited by 221
  13. 2022Patching open-vocabulary models by interpolating weightscited by 190
  14. 2020Mixed-Privacy Forgetting in Deep Networkscited by 163
  15. 2023Composing Parameter-Efficient Modules with Arithmetic Operationscited by 156
  16. 2022Linear Adversarial Concept Erasurecited by 101
  17. 2025Whoever Started the Interference Should End It: Guiding Data-Free Model Merging via Task Vectorscited by 62

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025When to Forget? Complexity Trade-offs in Machine Unlearning
  2. 2026Erase at the Core: Representation Unlearning for Machine Unlearning
  3. 2026PURGE: Projected Unlearning via Retain-Guided Erasure
  4. 2026Learning What to Forget: Improving LLM Unlearning via Learned Token-Level Importance
  5. 2026Machine Unlearning under Retain-Forget Entanglement
  6. 2025CUFG: Curriculum Unlearning Guided by the Forgetting Gradient
  7. 2024Machine Unlearning using Forgetting Neural Networks
  8. 2026Why Forget-Only Unlearning Needs Memorization