Characterizing Privacy-Audit Alignment in Behavioral Audit of Machine Unlearning
This paper describes how much a generic audit scheme that relies solely on querying the model for behavioral signals inevitably results in privacy leakage related to the retained set by providing a geometric transfer theorem that establishes a lower bound on retained set membership distinguishability based on the audit...