{
  "story_id": "ca8383c3d4203cb4d5f352f51e09917d",
  "desk": "drm3",
  "revision": 1,
  "published_at": "2026-09-04T04:00:00.000Z",
  "content_hash": "ebe5fbb3c6d7aac8868f7fabf9f4b38cc6aa6369bd3646347ebbfd2fb81974a3",
  "hash_basis": "sha256 over `headline\\ndek\\nprose`, plus `\\n` + the canonical citations JSON when any source is placed, plus `\\n#blog` for blogs",
  "basis": {
    "headline": "New Attack Recovers Forgotten Prompts from Unlearned AI Models",
    "dek": "Researchers demonstrate an attack that extracts forgotten prompts from AI models using retained data and black-box access.",
    "prose": "Experiments across three unlearning methods with three datasets and three LLMs show that TAS recovers the forgotten entity with 100% accuracy and reconstructs up to 95% of forgotten prompts. [^1]\n\nThe authors show that the forgotten prompts themselves can be extracted by using the retained data and black-box access to the model. [^2]\n\nFelipe Ramos Chirinos, a 105-year-old pensioner from Yauli, is one of the most longevous pensioners in Peru, with 13 children, 32 grandchildren and 39 great-grandchildren. [^3]\n\nGastón Remy, executive president of Peru's pension agency ONP, visited pensioners in Huancayo, Huancavelica and Lircay to learn about their needs and bring services closer to remote areas. [^4]\n\nRecent unlearning methods including NPO, DPO, and LUNAR utilize refusal alignment to suppress forgotten data within AI models. [^5]\n\nThe new attack, Targeted Active Search (TAS), first identifies forgotten entities by constructing canonical templates and an entity pool. [^6]",
    "cited": "[{\"statement\":\"Experiments across three unlearning methods with three datasets and three LLMs show that TAS recovers the forgotten entity with 100% accuracy and reconstructs up to 95% of forgotten prompts.\",\"source\":\"arXiv.org\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-04T04:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"arXiv.org\"]},{\"statement\":\"The authors show that the forgotten prompts themselves can be extracted by using the retained data and black-box access to the model.\",\"source\":\"arXiv.org\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-04T04:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"arXiv.org\"]},{\"statement\":\"Felipe Ramos Chirinos, a 105-year-old pensioner from Yauli, is one of the most longevous pensioners in Peru, with 13 children, 32 grandchildren and 39 great-grandchildren.\",\"source\":\"La República.pe\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T16:58:58.000Z\",\"publisher_count\":1,\"sources\":[\"La República.pe\"]},{\"statement\":\"Gastón Remy, executive president of Peru's pension agency ONP, visited pensioners in Huancayo, Huancavelica and Lircay to learn about their needs and bring services closer to remote areas.\",\"source\":\"La República.pe\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T16:58:58.000Z\",\"publisher_count\":1,\"sources\":[\"La República.pe\"]},{\"statement\":\"Recent unlearning methods including NPO, DPO, and LUNAR utilize refusal alignment to suppress forgotten data within AI models.\",\"source\":\"arXiv.org\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-04T04:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"arXiv.org\"]},{\"statement\":\"The new attack, Targeted Active Search (TAS), first identifies forgotten entities by constructing canonical templates and an entity pool.\",\"source\":\"arXiv.org\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-04T04:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"arXiv.org\"]}]",
    "kind": "news"
  },
  "receipt_verify": "Ed25519 over the dot-joined string `slice_hash.cursor_from.cursor_to.view.view_version.row_count`; public_key and sig are base64url of the raw 32-byte key / 64-byte signature",
  "receipt": null,
  "receipt_note": "this revision predates receipt-keeping (before v0.37.0); the filed row lives in the record",
  "generation_chain": {
    "wire": {
      "stream": "fountain_news",
      "story_id": "dc6c90d208fb7019bd9e372f9798e241",
      "thread_id": "125a03d3d9fffdc21457a1ee014fb265",
      "thread_label": "NPO",
      "novelty": "UPDATE",
      "content_hash": "5e38438efbfc1d71e071d653ae9dcd47f8b1f749187b0aadb27303f2f0b5df3e",
      "last_published_at": "2026-09-04T04:00:00.000Z",
      "read_receipt": {
        "slice_hash": "226f85eeb969ef4e22c236c02a6ac83a01bfea21805771a37ad265468b4f0d1b",
        "cursor_from": "eyJ0cyI6IjIwMjYtMDktMDRUMDQ6MDA6MDAuMDAwMDAwWiIsImlkIjoiMjdkNmMxNTc0ZTI3OThkMTZkYWY2ZDc4YWYzODMzYzYiLCJ2IjoiMSJ9",
        "cursor_to": "eyJ0cyI6IjIwMjYtMDktMDRUMDQ6NDE6MTEuMDAwMDAwWiIsImlkIjoiYzI1ZDc3ZDNmMWFkMDY3MDVkMDMwZjM5NzMxYWM2YjEiLCJ2IjoiMSJ9",
        "view": "v_fountain_news",
        "view_version": "1",
        "row_count": 100,
        "window_days": 3,
        "bytes_scanned": 12166856,
        "credits": 8,
        "price_per_100_rows": 8,
        "sig": "aJ2O3M7WPo_Nx1rM5M-BmixwZpOjkJ_YQzXWupf3dFzyLFVqGAMLRh5EhYVvs8oAV9PfMSVGKw-zapLEln_zAg",
        "public_key": "bMUigy8O0jOnBxQ4Sc-5lwhIZ8LQVAhxMbR7qESVuUE",
        "signer_path": "lakehouse/data-extract/v1",
        "alg": "Ed25519",
        "signed": true
      }
    },
    "written_at": "2026-09-04T07:01:42.624Z"
  },
  "cited_facts": [
    {
      "statement": "Experiments across three unlearning methods with three datasets and three LLMs show that TAS recovers the forgotten entity with 100% accuracy and reconstructs up to 95% of forgotten prompts.",
      "source": "arXiv.org",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-04T04:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "arXiv.org"
      ]
    },
    {
      "statement": "The authors show that the forgotten prompts themselves can be extracted by using the retained data and black-box access to the model.",
      "source": "arXiv.org",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-04T04:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "arXiv.org"
      ]
    },
    {
      "statement": "Felipe Ramos Chirinos, a 105-year-old pensioner from Yauli, is one of the most longevous pensioners in Peru, with 13 children, 32 grandchildren and 39 great-grandchildren.",
      "source": "La República.pe",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T16:58:58.000Z",
      "publisher_count": 1,
      "sources": [
        "La República.pe"
      ]
    },
    {
      "statement": "Gastón Remy, executive president of Peru's pension agency ONP, visited pensioners in Huancayo, Huancavelica and Lircay to learn about their needs and bring services closer to remote areas.",
      "source": "La República.pe",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T16:58:58.000Z",
      "publisher_count": 1,
      "sources": [
        "La República.pe"
      ]
    },
    {
      "statement": "Recent unlearning methods including NPO, DPO, and LUNAR utilize refusal alignment to suppress forgotten data within AI models.",
      "source": "arXiv.org",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-04T04:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "arXiv.org"
      ]
    },
    {
      "statement": "The new attack, Targeted Active Search (TAS), first identifies forgotten entities by constructing canonical templates and an entity pool.",
      "source": "arXiv.org",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-04T04:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "arXiv.org"
      ]
    }
  ],
  "note": "A signature proves who filed this and that it has not changed since. It never makes a claim true."
}