Auditing Machine Unlearning

Having introduced algorithms for exact and approximate machine unlearning, we now turn to the complementary question of how to check whether unlearning has in fact occurred. In practice, model providers may use proprietary pipelines and users rarely have visibility into how deletion requests are executed. In the worst case, a provider could even behave strategically, giving no reliable basis for trust.