Can an AI Assistant Really Forget? Auditable Deletion from Addressable Memory

תקציר מקורי באנגליתarXiv:2607.27539v3 Announce Type: replace Abstract: Certifying that a deletion did what it declared does not certify that the record left no trace: a small distance to the implementation's own reference does not imply a small distance to the state that never stored the record. This paper installs a deletion interface into a pretrained language model and measures both distances. We retrofit a support-vector memory gate into the global attention layers of a frozen Gemma 3 without changing a weight. Each stored record owns a set of rows, and deleting it removes those rows and re-solves only the storage problems they touched. At 4B the retrofit admits exactly the records the base model recalls, at a paired perplexity cost under $2\%$; the same recipe fails at 1B and 12B, which we report. Every