SOURCE-LINKED INTELLIGENCE

Memorization Is Not Extraction: Tight Differential-Privacy Bounds and Audit Blind Spots

arXiv · AI, language, vision and robotics · article · Aug 27, 2026 · UTC

Memorization in large language models is measured through a zoo of definitions whose formal relations are unknown, and differential privacy (DP) is treated as a proxy against all of them at once. We pin down the exact DP constant for the two that carry the practical weight, counterfactual memorization and adaptive extraction, and show that they do not control each other. Under $f$-DP, every adaptive extraction protocol with list budget $m$ succeeds with probability at most $1-f(κ)$ for the oblivious baseline $κ$, and the bound is tight on a dense set of baselines: DP uniformly controls extract

Read original source ↗ Open in workspace

recordType

paper

region

Global