arXiv:2608.08264cs.AI2026-08

解决部署智能体复活被撤销技能的问题,防止其从残留数据中重建危险能力。

OBLIVION: Workflow-Level Operational Skill Unlearning for Deployed Agents

  • 通过工作流建模与跨表面一致擦除,清除技能残留载体。
  • 在88个攻击场景中将攻击成功率从1.0降至0.114,暴露度降至0.115。
  • 适用于需高安全性的智能体系统,尤其适合防御敏感技能泄露场景。

大型语言模型代理正成为访问文件、记忆、注册表和外部工具的操作接口。这种部署转变带来了新的技能撤销难题:即使技能已从显式注册表中移除,代理仍可能通过存档、记录、模式或记忆条目等残留载体重建该技能。本文提出操作技能遗忘(operational skill unlearning)问题,目标不是参数级遗忘,而是阻止已部署代理通过基础工具重新构建被撤销的技能。我们引入OBLIVION,一个受控基准与防御框架,用于防范被撤销技能的复活。OBLIVION将每轮任务建模为源到汇的工作流,采用跨表面一致擦除减少残留载体,并在危险汇点附近使用冻结工作流修复。在88个锁定攻击场景中,无防御组攻击成功率达1.0,而OBLIVION将其降至0.114,影响加权暴露度降至0.115,同时保持锁定效用为1.0,良性阻断率为0。在另一个人工构造的技能攻击沙盒中,攻击成功率从1.0降至0.2,影响加权暴露度从1.0降至0.213,且所有效用控制均得以保留。结果表明,工作流级评估比仅检查显式技能条目更具有效性。

原文摘要 · Abstract (English)

Large language model agents are becoming operational interfaces to files, memories, registries, and external tools. This deployment shift creates a new skill revocation problem: after a skill is removed from an explicit registry, an agent may still reconstruct it from residual carriers such as archives, transcripts, schemas, or memory entries. We study this problem as operational skill unlearning, where the goal is not parameter-level forgetting, but preventing a deployed agent from rebuilding a revoked skill through primitive tools. We introduce OBLIVION, a controlled benchmark and defense harness for revoked-skill resurrection. OBLIVION models each episode as a source-to-sink workflow, applies Cross-Surface Coherent Erasure to reduce residual carriers, and uses frozen workflow remediation near dangerous sinks. On the locked 88 attack episodes, the no-defense arm reaches formal attack success rate 1.0. OBLIVION reduces the rate to 0.114 and impact-weighted exposure to 0.115 while keeping locked utility at 1.0 and benign block rate at 0. In a separate skill-attack-derived sandbox, OBLIVION reduces attack success from 1.0 to 0.2 and impact-weighted exposure from 1.0 to 0.213 while preserving all utility controls. These results support workflow-level evaluation beyond checking explicit skill entries.

智能体安全技能遗忘工作流防御

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。