{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:5N52KGFVJDS2YVAPY7U3KOM4T7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ff932b0bbac1dbff6f6c6e07e0d4683478e6111adee99a8734c2fbb876e80261","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-19T09:03:21Z","title_canon_sha256":"9bde8fe427f25663b26ead7a56df3cfeaa7c959498428c37b295d1de272a193f"},"schema_version":"1.0","source":{"id":"2406.13356","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.13356","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"arxiv_version","alias_value":"2406.13356v4","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.13356","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"pith_short_12","alias_value":"5N52KGFVJDS2","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"pith_short_16","alias_value":"5N52KGFVJDS2YVAP","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"pith_short_8","alias_value":"5N52KGFV","created_at":"2026-07-05T10:32:27Z"}],"graph_snapshots":[{"event_id":"sha256:0f0b4c60f4f345db34255088818cb82f01b36ddf5fb09ed3b7cda40ac821ee08","target":"graph","created_at":"2026-07-05T10:32:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.13356/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine unlearning is a promising approach to mitigate undesirable memorization of training data in ML models. However, in this work we show that existing approaches for unlearning in LLMs are surprisingly susceptible to a simple set of $\\textit{benign relearning attacks}$. With access to only a small and potentially loosely related set of data, we find that we can ''jog'' the memory of unlearned models to reverse the effects of unlearning. For example, we show that relearning on public medical articles can lead an unlearned LLM to output harmful knowledge about bioweapons, and relearning gene","authors_text":"Shengyuan Hu, Virginia Smith, Yiwei Fu, Zhiwei Steven Wu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-19T09:03:21Z","title":"Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.13356","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:24114c8abfc706a651c6a99ca31c97aff63eaf9a1cc9fb55ee3aa4b8c4d99353","target":"record","created_at":"2026-07-05T10:32:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ff932b0bbac1dbff6f6c6e07e0d4683478e6111adee99a8734c2fbb876e80261","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-06-19T09:03:21Z","title_canon_sha256":"9bde8fe427f25663b26ead7a56df3cfeaa7c959498428c37b295d1de272a193f"},"schema_version":"1.0","source":{"id":"2406.13356","kind":"arxiv","version":4}},"canonical_sha256":"eb7ba518b548e5ac540fc7e9b5399c9fe443d2218895a0fecf20e033c393fd90","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"eb7ba518b548e5ac540fc7e9b5399c9fe443d2218895a0fecf20e033c393fd90","first_computed_at":"2026-07-05T10:32:27.585695Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:32:27.585695Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GG9taPfFQ+4Edy/0XzCZI7Lqw18sSTHqrEZ7tiSktXjyLNlnucYhVfReGeSrzmIxvtPo9Ifx7LNrrVzOezKMCg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:32:27.586376Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.13356","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:24114c8abfc706a651c6a99ca31c97aff63eaf9a1cc9fb55ee3aa4b8c4d99353","sha256:0f0b4c60f4f345db34255088818cb82f01b36ddf5fb09ed3b7cda40ac821ee08"],"state_sha256":"99c6c17a47accdb290fdbbe521b2e8f39b3729ead110547558b1136aece4cd1f"}