GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection

TL;DR

GUARD introduces a novel inference-time unlearning method for LLMs that dynamically restricts generation to prevent forgetting specific knowledge, maintaining model performance while enhancing safety and compliance.

Contribution

This work presents GUARD, a framework for real-time unlearning during inference that avoids fine-tuning, using adaptive restriction and detection to selectively prevent generation of forgotten content.

Findings

Effective unlearning on multiple datasets

Minimal impact on overall model performance

Strong trade-off between forgetting and utility

Abstract

Large Language Models (LLMs) have demonstrated strong capabilities in memorizing vast amounts of knowledge across diverse domains. However, the ability to selectively forget specific knowledge is critical for ensuring the safety and compliance of deployed models. Existing unlearning efforts typically fine-tune the model with resources such as forget data, retain data, and a calibration model. These additional gradient steps blur the decision boundary between forget and retain knowledge, making unlearning often at the expense of overall performance. To avoid the negative impact of fine-tuning, it would be better to unlearn solely at inference time by safely guarding the model against generating responses related to the forget target, without destroying the fluency of text generation. In this work, we propose Generation-time Unlearning via Adaptive Restriction and Detection (GUARD), a framework that enables dynamic unlearning during LLM generation. Specifically, we first employ a prompt classifier to detect unlearning targets and extract the corresponding forbidden token. We then dynamically penalize and filter candidate tokens during generation using a combination of token matching and semantic matching, effectively preventing the model from leaking the forgotten content. Experimental results on copyright content unlearning tasks over the Harry Potter dataset and the MUSE benchmark, as well as entity unlearning tasks on the TOFU dataset, demonstrate that GUARD achieves strong forget quality across various tasks while causing almost no degradation to the LLM's general capabilities, striking an excellent trade-off between forgetting and utility.