arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2610.18052cs.AI
收藏

智能体被要求时能否遗忘?LLM智能体的记忆遗忘基准

Can Agents Forget When Asked? A Benchmark for Memory Unlearning in LLM Agents

Tsinghua University(清华大学);Sina Weibo(新浪微博)

Bofan Xie, Chaokun Wang, Guanchen Ge, Songyao Wang, Fang Niu, Hang Zhang, Wei Wang

AI总结:

针对LLM智能体记忆遗忘评估的空白,提出首个记忆遗忘基准Bemula,评估主流记忆系统后发现其遗忘性能极差,该问题仍是智能体记忆设计的开放挑战。

摘要:

长期记忆已成为大语言模型(LLM)智能体的核心组成部分。随着智能体在长期使用中积累个人信息,用户越来越多地要求它们删除敏感或过时的事实。记忆系统应尊重此类请求,仅删除被请求的内容,同时保留其余记忆完整。然而,现有的记忆基准仅评估记忆的写入、检索和组织,因此智能体能否根据用户的明确请求进行遗忘仍未得到充分评估。为解决这一差距,我们提出Bemula,这是首个专门用于记忆遗忘的基准。它包含50个多轮对话实例、6种类型的135个遗忘请求以及1742个测试问题。每个对话都有一个无请求的对照版本,因此只有存储了目标信息的系统才能因遗忘获得分数。在配对版本中,五个测试套件分别测量存储情况、请求信息的删除情况、无关记忆的保留情况、相似事实的重新学习情况以及对提取攻击的抵抗情况。在Bemula上,我们评估了三种主干LLM下的六个主流记忆系统,以及其中两个系统的全上下文LLM。结果是负面的:在所有评估的系统和主干中,没有一个系统能端到端通过超过1.5%的遗忘请求,大多数甚至一个都未通过。这些系统要么在简单攻击下仍能提取出请求的信息,要么删除了远多于请求的内容。因此,记忆遗忘仍是智能体记忆设计中的一个未解决的挑战。我们在该httpsURL发布了我们的数据和代码。

英文摘要:

Long-term memory has become a core component of large language model (LLM) agents. As agents accumulate personal information over long-term use, users increasingly ask them to delete sensitive or outdated facts. A memory system should honor such requests. It should remove exactly what was requested and keep the rest of its memory intact. However, existing memory benchmarks evaluate only memory writing, retrieval, and organization, so whether agents can forget at the user's explicit request remains under-evaluated. To address this gap, we propose Bemula, the first benchmark dedicated to memory unlearning. It comprises 50 multi-session dialogue instances, 135 forget requests of six types, and 1,742 test questions. Each dialogue has a control version without the requests, so that only systems that have stored the target can earn credit for forgetting. Across the paired versions, five test suites measure storage, removal of the requested information, preservation of unrelated memories, relearning of similar facts, and resistance to extraction attacks. On Bemula, we evaluate six mainstream memory systems under three backbone LLMs, together with the Full Context LLM on two of them. The results are negative. Across all evaluated systems and backbones, no system passes more than 1.5% of forget requests end to end, and most pass none at all. These systems either leave the requested information extractable under simple attacks or delete far more than requested. Memory unlearning therefore remains an open challenge for agent memory design. We release our data and code at https://github.com/Nboxff/bemula-benchmark.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑