Skip to content
Preprint

Continual Concept Erasure in Diffusion Models by Suppressing Cross-Edit Interference

Oct 2026 · 0 citations · 56 references
Computer Science

TL;DR

Across continual erasure of celebrities, artistic styles, and instances, CEASE achieves the most consistent erase-preserve trade-off, while existing methods either degrade general generation or insufficiently erase targets.

Abstract

Concept erasure removes copyright-protected, privacy-sensitive, or otherwise undesirable concepts from pretrained text-to-image diffusion models to support content governance and compliance. As erasure requests arrive over time, models must remove new targets without undoing prior erasures. Existing methods do not constrain interference across edits: residual perturbations outside the retain set interact and accumulate, degrading unrelated generations and sometimes collapsing previously erased targets into noise. We propose CEASE (Continual Erasure via Adaptive Subspace Editing), a training-free method that imposes two subspace constraints on a closed-form solver. CEASE adds the token representation of the shared replacement to the solver's invariance matrix and, when interference is detected, projects the current update onto the orthogonal complement of dominant output directions extracted from cumulative past updates. A closed-form decomposition attributes the accumulated interference to repeated activation of the shared replacement and overlap between successive update directions, showing that the two constraints suppress these respective sources. Across continual erasure of celebrities, artistic styles, and instances, CEASE achieves the most consistent erase-preserve trade-off, while existing methods either degrade general generation or insufficiently erase targets.

View source

Similar papers

Preprint Sep 2026

GRACE: Adaptive Concept Erasure with Geometry-Guided Retention in Diffusion Models

This work proposes GRACE, a structured concept erasure framework designed to enable localized and selective intervention, and introduces a semantically weighted sensitive subspace estimation to precisely lock intervention directions, and employs lightweight subspace-constrained adapters to prevent global semantic distu...

Qing Gong, Yi-Huai Liang, Yuan-Lun Xie et al. · 0 citations
Preprint Oct 2026

RASteer: Retain-Aware Activation Steering for Concept Erasure in Diffusion Models

Concept erasure aims to remove a target concept, such as a copyrighted style, a recognizable character, or unsafe content, from a pretrained text-to-image diffusion model while preserving its ability to generate other content. Existing activation steering methods build an erasure direction mainly from the target concep...

Yong-Liang Wu, Haori Lu, Yu-Lun Wu et al. · 1 citation
#artificial intelligence Preprint Oct 2026

Your Unlearning Gives You Away: Identifying Erased Concepts in Diffusion Models

Existing attacks on unlearned diffusion models assume that the erased concepts are known in advance and focus on recovering them. In practice, however, model providers may not disclose which concepts have been removed, and even with access to the original base model, an adversary may still lack a clear target to attack...

Kai-Yuan Deng, Yu-Chen Li, Yang Xiao et al. · 1 citation
#machine learning Preprint Sep 2026

Continual Data Unlearning in Diffusion Models via Transition-based Regularization

A continual data unlearning framework that uses completed deletion transitions as directional references to regularize future updates and achieves a better balance between deletion persistence and generative utility than existing unlearning baselines as requests accumulate.

Sunbeom Jeong, Sehwan Kim, Sang-Woo Hong et al. · 0 citations
Preprint Oct 2026

Compositional Concept Erasure in Text-to-Image Diffusion Models via Hierarchically Grounded Semantic Surgery

Removing copyrighted, unsafe, or user-specified concepts from a deployed text-to-image diffusion model is now a practical requirement. Weight-editing methods can suppress fixed targets, but they require per-target retraining and modify the model checkpoint. Training-free methods, on the other hand, are deployment-frien...

Chen-Di Dai, Gan-Yu Zou, Nathan Self et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.