{"id":"https://openalex.org/W7204208478","doi":"https://doi.org/10.48550/arxiv.2608.23034","title":"ST$^2$U: Stateful Test-Time Unlearning via Restricted Knowledge Boundary Control","display_name":"ST$^2$U: Stateful Test-Time Unlearning via Restricted Knowledge Boundary Control","publication_year":2026,"publication_date":"2026-08-24","ids":{"openalex":"https://openalex.org/W7204208478","doi":"https://doi.org/10.48550/arxiv.2608.23034"},"language":null,"primary_location":{"id":"pmh:oai:arXiv.org:2608.23034","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.23034","pdf_url":"https://arxiv.org/pdf/2608.23034","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2608.23034","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128011186","display_name":"Xunlei Chen","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen, Xunlei","raw_affiliation_strings":["University of Electronic Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077057571","display_name":"\u9f9a\u5e86\u8f89","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4800084","display_name":"Southwest Jiaotong University","ror":"https://ror.org/00hn7w693","country_code":"CN","type":"education","lineage":["https://openalex.org/I4800084"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gong, Qinghui","raw_affiliation_strings":["Southwest Jiaotong University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southwest Jiaotong University","institution_ids":["https://openalex.org/I4800084"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047127750","display_name":"Ruini Xue","orcid":"https://orcid.org/0000-0003-1802-5188","observed_orcids":["https://orcid.org/0000-0003-1802-5188"]},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xue, Ruini","raw_affiliation_strings":["University of Electronic Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101900443","display_name":"Yaodong Hu","orcid":"https://orcid.org/0000-0002-4720-2430","observed_orcids":["https://orcid.org/0000-0002-4720-2430"]},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hu, Yaodong","raw_affiliation_strings":["University of Electronic Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140911370","display_name":"Tian Lan","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lan, Tian","raw_affiliation_strings":["University of Electronic Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001104882","display_name":"Wenhong Tian","orcid":"https://orcid.org/0000-0002-5551-9796","observed_orcids":["https://orcid.org/0000-0002-5551-9796"]},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tian, Wenhong","raw_affiliation_strings":["University of Electronic Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8335000276565552,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8335000276565552,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.09380000084638596,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.018200000748038292,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.9279999732971191},{"id":"https://openalex.org/keywords/inference-overhead","display_name":"inference overhead","score":0.4560000002384186},{"id":"https://openalex.org/keywords/model-alignment","display_name":"model alignment","score":0.3619999885559082}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6434999704360962},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.628600001335144},{"id":"https://openalex.org/C2777984123","wikidata":"https://www.wikidata.org/wiki/Q9248237","display_name":"Pointwise","level":2,"score":0.6186000108718872},{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.5444999933242798},{"id":"https://openalex.org/C7149132","wikidata":"https://www.wikidata.org/wiki/Q1377840","display_name":"Forgetting","level":2,"score":0.5442000031471252},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5259000062942505},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4855000078678131},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4505999982357025},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.3522000014781952},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3409000039100647},{"id":"https://openalex.org/C4554734","wikidata":"https://www.wikidata.org/wiki/Q593744","display_name":"Knowledge base","level":2,"score":0.31619998812675476},{"id":"https://openalex.org/C115925183","wikidata":"https://www.wikidata.org/wiki/Q1412694","display_name":"Knowledge-based systems","level":2,"score":0.3093999922275543},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3084000051021576},{"id":"https://openalex.org/C56814567","wikidata":"https://www.wikidata.org/wiki/Q1323686","display_name":"Explicit knowledge","level":2,"score":0.30820000171661377},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.2892000079154968},{"id":"https://openalex.org/C159877910","wikidata":"https://www.wikidata.org/wiki/Q2202883","display_name":"Autoregressive model","level":2,"score":0.27810001373291016},{"id":"https://openalex.org/C2778023277","wikidata":"https://www.wikidata.org/wiki/Q321703","display_name":"Premise","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.26969999074935913},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.26649999618530273},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.26600000262260437},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.25699999928474426},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.2558000087738037}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2608.23034","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.23034","pdf_url":"https://arxiv.org/pdf/2608.23034","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.23034","doi":"https://doi.org/10.48550/arxiv.2608.23034","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.23034","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2608.23034","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.23034","pdf_url":"https://arxiv.org/pdf/2608.23034","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204208478.pdf","grobid_xml":"https://content.openalex.org/works/W7204208478.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Controlling":[0],"restricted":[1,57,66,78,94],"knowledge":[2,58,67,79,95,131],"in":[3,97],"large":[4],"language":[5],"models":[6,93],"is":[7],"essential":[8],"for":[9],"model":[10,153],"alignment":[11],"and":[12,20,48,122,144,151,169],"safe":[13],"deployment.":[14],"Test-time":[15],"unlearning":[16,86],"avoids":[17],"costly":[18],"retraining":[19],"parameter":[21],"updates":[22],"by":[23],"intervening":[24],"only":[25],"during":[26],"inference.":[27],"However,":[28],"existing":[29],"activation-editing":[30],"methods":[31],"apply":[32],"isolated":[33],"pointwise":[34],"corrections,":[35],"overlooking":[36],"how":[37],"autoregressive":[38],"generation":[39],"continually":[40],"reconstructs":[41],"hidden":[42],"states":[43,53,126],"from":[44],"the":[45,113,157],"prompt,":[46],"cache,":[47],"generated":[49],"prefix.":[50],"Consequently,":[51],"later":[52],"may":[54],"return":[55],"to":[56,129],"regions":[59],"after":[60],"a":[61],"locally":[62],"successful":[63],"correction,":[64],"causing":[65],"re-entry.":[68,132],"In":[69],"this":[70],"work,":[71],"we":[72],"propose":[73],"Stateful":[74],"Test-Time":[75],"Unlearning":[76],"via":[77],"boundary":[80,89,117],"control":[81,135],"(ST$^2$U),":[82],"which":[83],"formulates":[84],"test-time":[85,175],"as":[87],"trajectory-wide":[88,134],"control.":[90],"ST$^2$U":[91,109,155],"first":[92],"boundaries":[96],"low-dimensional":[98],"invertible":[99],"coordinates":[100],"while":[101,140],"leaving":[102],"orthogonal":[103],"non-target":[104,142],"components":[105],"unchanged.":[106],"During":[107],"inference,":[108],"monitors":[110],"risk":[111],"along":[112],"trajectory,":[114],"applies":[115],"minimal":[116],"corrections":[118],"with":[119,166],"contextual":[120],"anchoring,":[121],"propagates":[123],"historical":[124],"correction":[125],"across":[127],"tokens":[128],"mitigate":[130],"This":[133],"enables":[136],"more":[137],"persistent":[138],"forgetting":[139,168],"preserving":[141],"capabilities":[143],"limiting":[145],"inference":[146],"overhead.":[147],"Across":[148],"three":[149,152],"benchmarks":[150],"families,":[154],"delivers":[156],"strongest":[158],"overall":[159],"balance,":[160],"combining":[161],"best":[162],"or":[163],"second-best":[164],"retention":[165],"competitive":[167],"substantially":[170],"less":[171],"restricted-knowledge":[172],"re-entry":[173],"than":[174],"baselines":[176],"(13.76%-19.84%":[177],"versus":[178],"46.50%-59.10%).":[179]},"counts_by_year":[],"updated_date":"2026-10-14T16:39:01.820549","created_date":"2026-08-26T00:00:00"}