Eternal Sunshine of the Spotless Mind: Systematically Erasing LLM's Memories

arXiv:2609.36414 · cs.CL · Submitted 2026-09-29 · Read on arXiv

cs.CL

Submitted: 2026-09-29

Updated: 2026-09-29

Code: https://github.com/langchain-ai/lang-memgpt

Terminology

• Provenance — 32× in this paper · explained in 4 episodes
• Accuracy — 13× in this paper · explained in 1 episode
• LLM judge — 13× in this paper · explained in 2 episodes
• Machine Unlearning — 6× in this paper · explained in 2 episodes
• Semantic Similarity — 6× in this paper · explained in 2 episodes
• Cosine Similarity — 4× in this paper · explained in 3 episodes
• Trace — 4× in this paper · explained in 2 episodes
• AI Agents — 3× in this paper · explained in 2 episodes
• Persona Facts — 3× in this paper
• Benchmark — 2× in this paper · explained in 2 episodes
• Data Provenance — 2× in this paper · explained in 2 episodes
• Abstraction — 1× in this paper · explained in 1 episode
• Accountability — 1× in this paper · explained in 2 episodes
• Adversarial Context — 1× in this paper · explained in 1 episode
• Agentic System — 1× in this paper · explained in 2 episodes
• Core — 1× in this paper · explained in 2 episodes
• Deep Memory Retrieval — 1× in this paper
• Embeddings — 1× in this paper · explained in 2 episodes
• IEEE Symposium on Security and Privacy — 1× in this paper
• Information Leakage — 1× in this paper · explained in 2 episodes
• Large Language Models (LLMs) — 1× in this paper · explained in 6 episodes
• Personalization — 1× in this paper · explained in 2 episodes
• RAG — 1× in this paper · explained in 3 episodes
• Reinforcement Learning — 1× in this paper · explained in 4 episodes
• Transformer — 1× in this paper · explained in 2 episodes
• Transformer Architecture — 1× in this paper · explained in 2 episodes

Sources

• Securing AI Agents with Information-Flow Control
• Who's Harry Potter? Approximate Unlearning in LLMs
• TOFU: A Task of Fictitious Unlearning for LLMs
• MemGPT: Towards LLMs as Operating Systems
• System-Level Defense against Indirect Prompt Injection Attacks: An Information Flow Control Perspective
• Rethinking Privacy in Machine Learning Pipelines from an Information Flow Control Perspective
• RTBAS: Defending LLM Agents Against Prompt Injection and Privacy Leakage
• MemoryBank: Enhancing Large Language Models with Long-Term Memory

Related papers

• Exploring Solution Divergence and Its Effect on Large Language Model Problem Solving
• Ishigaki-IDS-Bench: A Benchmark for Generating Information Delivery Specification from BIM Information Requirements
• Subliminal Steering: Stronger Encoding of Hidden Signals
• MedStruct-S: A Benchmark for Key Discovery, Key-Conditioned QA and Semi-Structured Extraction from OCR Clinical Reports
• The End of Transformers? On Challenging Attention and the Rise of Sub-Quadratic Architectures
• Untangling the Mechanisms of Misleading Context in Medical Question Answering