Machine Unlearning

Machine Unlearning selectively erases learned knowledge, behavioral patterns, or training-data influence (Remove Knowledge) from a deployed model without retraining from scratch, addressing privacy deletion requirements, copyright compliance, and safety-critical knowledge removal (Privacy Preservation) ^[36]. Compared to LEACE, which removes a concept's linear influence from activations by modifying the weight matrix's projection geometry (Parameter-Only, applied to a concept direction), Machine Unlearning targets a broader knowledge construct—facts, training data points, behavioral patterns. Its D1 (Mechanism) coordinate spans two distinct mechanistic profiles that must be rigorously distinguished within system configuration management and regression tracking. Gradient-based approaches apply gradient ascent on the target forget set (Forget Set Specification) to mathematically reverse the historical learning signal, operating as Parametric Update with a Partial scope. Conversely, task-vector negation approaches algebraically subtract a localized task vector from the base model's weights to structurally strip out a target capability, operating as Parameter Composition with Fused Composition—mechanistically identical to Task Arithmetic executed with a negation operator. Consequently, they must be governed by the exact same change-control validation logic and interference testing suites. Adversarial membership inference attacks, targeted behavioral probes, and jailbreak-style elicitation of the supposedly forgotten knowledge constitute some available verification tools, and none provides a formal completeness guarantee; any system deploying Machine Unlearning as a compliance mechanism must document this verification gap explicitly and specify the probe suite used to assess forgetting fidelity ^[93].