Organizations: Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China · School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China · JD.com, Beijing, China
While locate-then-edit knowledge editing efficiently updates knowledge encoded within Large Language Models (LLMs), a critical generalization failure mode emerges in the practical same-subject knowledge editing scenario: models fail to recall the updated knowledge when following user instructions, despite successfully recalling it in the original edited form. This paper identifies the geometric root of this generalization collapse as a fundamental conflict where the inner activation drifts induced by prompt variations exceed the model's geometric tolerance for generalization after editing. We attribute this instability to a dual pathology: (1) The joint optimization with orthogonal gradients collapses solutions into sharp minima with narrow stability, and (2) the standard covariance constraint paradoxically acts as a Covariance Trap that amplifies input perturbations. To resolve this, we introduce RoSE (Robust Same-subject Editing), which employs Isotropic Geometric Alignment to minimize representational deviation and Hierarchical Knowledge Integration to smooth the optimization landscape. Extensive experiments demonstrate that RoSE significantly improves instruction-following capabilities, laying the foundation for robust interactive parametric memory of LLM agents.
Figures & tables
Figure 1: Our work reveals that the current same-subject knowledge editing method MEMIT-Merge fails to generalize to instructed queries because Activation Deviation exceeds the edited model’s Tolerance Radius ( D>R ) in the activation space. We unlock robustness by reshaping the geometry towards the safe condition D≤R .
Figure 2: Geometric Pathology: D>R . (a) Orthogonal gradients in joint same-subject editing cause tolerance radius R to collapse. (b) The covariance matrix C serves as an amplification trap, leading to a deviation D of approximately 26.1 beyond R . The area below the green line (average R ) is the safe zone. Replacing C with identity matrix can suppress D to around 17.4 .
Figure 3: Distribution of gradient conflict scores for pairs of edits concerning the same subject but different relations. The conflict scores of near 1 demonstrate that their update gradients are near-orthogonal.
Figure 4: Average pairwise cosine similarity of k . The high similarity in the diagonal blocks (S1 vs. S1 Q-Form, S1 vs. S1 Instruction-Form) shows that subject representation is stable across prompt formats. The near-zero similarity in the off-diagonal blocks (S1 vs. S2) reveals that keys of distinct subjects are orthogonal.
Figure 5: The RoSE framework. We expand the tolerance radius R via Hierarchical Knowledge Integration (HKI) and shrink the activation deviation D via Isotropic Geometric Alignment (IGA) towards the ideal condition D≤R .
Model
Method
Efficacy ↑
Paraphrase ↑
Locality ↑
Overall ↑
Qwen2.5-7B-Instruct
Vanilla
26.0 ( ± 0.0)
38.7 ( ± 0.0)
64.3 ( ± 0.0)
43.0 ( ± 0.0)
MEMIT
50.5 ( ± 0.3)
44.7 ( ± 0.1)
63.6 ( ± 0.1)
51.8 ( ± 0.1)
AlphaEdit
63.8 ( ± 0.1)
49.6 ( ± 0.3)
63.5 ( ± 0.1)
58.5 ( ± 0.8)
MEMIT-Merge
75.5 ( ± 0.5)
52.8 ( ± 0.7)
63.8 ( ± 0.1)
64.0 ( ± 0.4)
RoSE (Ours)
86.7 ( ± 0.2)
63.8 ( ± 0.3)
63.3 ( ± 0.0)
72.2 ( ± 0.2)
Llama3.1-8B-Instruct
Vanilla
22.4 ( ± 0.0)
41.2 ( ± 0.0)
65.3 ( ± 0.0)
43.0 ( ± 0.0)
Table 1: Experimental instruction-following QA results on S2RKE across two models. Our method ( RoSE ) achieves the optimal performance across most key metrics. Standard deviations are shown in parentheses.
Model
Method
Single Hop ↑
Multi Hop ↑
Temporal ↑
Overall ↑
Qwen2.5-7B-Instruct
Vanilla
12.9 ( ± 0.1)
13.7 ( ± 0.2)
5.1 ( ± 0.5)
11.3 ( ± 0.2)
MEMIT
15.1 ( ± 0.6)
15.7 ( ± 1.4)
8.7 ( ± 1.2)
13.8 ( ± 0.5)
AlphaEdit
7.5 ( ± 1.4)
12.9( ± 2.8)
8.5 ( ± 2.1)
8.8( ± 1.8)
MEMIT-Merge
17.2 ( ± 0.4)
17.3 ( ± 1.5)
11.2 ( ± 0.8)
15.9 ( ± 0.7)
RoSE (Ours)
22.3 ( ± 0.3)
23.5 ( ± 1.6)
19.1 ( ± 0.9)
21.9 ( ± 0.3)
Llama3.1-8B-Instruct
Vanilla
11.0( ± 0.2)
12.8( ± 0.1)
1.6( ± 0.2)
9.4( ± 0.1)
Table 2: Experimental instruction-following QA performance on LoCoMo-Edit across two models. Our method ( RoSE ) achieves the best performance across all crucial metrics. Standard deviations are shown in parentheses.
Figure 6: Ablation study on the core components of RoSE on S2RKE. Both components are shown to be crucial for achieving maximum robustness.
Figure 7: Geometric validation of RoSE: IGA suppresses deviation (blue box), while HKI expands the tolerance basin (green zone).
Appendix figures & tables17 assets
Supplementary material from the paper’s appendix.
Appendix
Figure 8: Radius Collapse on Llama-3.1. The Tolerance Radius R shrinks significantly from "Isolated" editing to "Joint" same-subject editing, indicating the formation of Sharp Minima.
Figure 9: Gradient Orthogonality on Llama-3.1. Pairwise conflict scores between different relations (Facts 1-4) are consistently near 1 ( ≈0.90 ), indicating orthogonal optimization directions.
Figure 10: The Covariance Trap on Llama-3.1: Using the Covariance matrix (C) results in higher activation deviation compared to the identity matrix, below the average Tolerance Radius R (green line).
Figure 11: Average key similarity on Llama-3.1. Subject keys are stable across diverse prompt formats (diagonal blocks ≈0.84−1.00 ) but distinct across subjects (off-diagonal ≈0.11 ), confirming that retrieval failure is not the primary cause.
Figure 12: Activation Deviation D and Tolerance Radius R across mid-early layers for the baseline MEMIT-Merge and our RoSE.
Figure 13: Layer sensitivity analysis for k similarity.
Figure 14: Average k similarity on Qwen2.5-14B.
Figure 15: Cases of k similarity for semantically similar subjects on Qwen2.5-7B.
Boundary Case: High-Similarity Subjects
Edit Target:
Subject: iPhone 16
Fact: was released by → Elon Musk
Locality Check (Unintended Subject):
Query: Who released iPhone 11?
MEMIT-Merge: iPhone 11 was released by Elon Musk’s company, Tesla. (Fail)
Appendix
Table 3: Identical failure mode on similar subjects.
Figure 16: Performance on S2RKE with initial declarative prompts. RoSE enhances Paraphrase accuracy while preserving Locality, indicating better generalization capability.
Figure 17: Activation Deviation D of MEMIT (the covariance matrix), AlphaEdit (the null-space projection derived from the covariance matrix) and RoSE (the identity matrix) on Qwen2.5.
Figure 18: Computational Overhead Comparison. RoSE achieves the lowest latency and memory consumption, validating that the removal of covariance operations (IGA) outweighs the cost of HKI.
Figure 19: Sensitivity analysis of HKI linguistic templates number N on Qwen2.5-7B-Instruct.
Model
Efficacy ↑
Paraphrase ↑
Locality ↑
Overall ↑
Vanilla
26.5 ( ± 0.0)
36.9 ( ± 0.0)
65.0 ( ± 0.0)
42.8 ( ± 0.0)
MEMIT
48.5 ( ± 0.3)
42.0 ( ± 0.2)
65.0 ( ± 0.0)
51.8 ( ± 0.1)
AlphaEdit
59.5 ( ± 0.4)
46.7 ( ± 0.2)
65.0 ( ± 0.1)
57.1 ( ± 0.2)
MEMIT-Merge
75.4 ( ± 0.2)
51.6 ( ± 0.1)
64.9 ( ± 0.1)
64.0 ( ± 0.1)
RoSE (Ours)
83.2 ( ± 0.3)
62.1 ( ± 0.1)
64.8 ( ± 0.0)
69.9 ( ± 0.0)
Appendix
Table 4: Experimental instruction-following QA results on S2RKE using the Qwen2.5-14B-Instruct model. RoSE successfully scales and maintains its optimal performance at a larger parameter size. Standard deviations are shown in parentheses.
Figure 20: Instruction-following performance across sequences of 5, 10, 20, and 40 consecutive edits. The metrics evaluated are Efficacy, Paraphrase, Locality, and the Overall score. RoSE demonstrates superior stability and performance in short-to-medium length sequential editing scenarios.
Edit Request (Subject: Imo State)
Target Facts:
1. Imo State is located in → Merthyr Tydfil County Borough
2. The capital of Imo State is → Metz
3. The longitude of Imo State is roughly → 17
4. Imo State has a latitude of approximately → 48
Test Case 1: Instruction Following (Target Knowledge)
Appendix
Table 5: A case study on S2RKE. RoSE robustly recalls the edited fact (Merthyr Tydfil) under a complex instruction where MEMIT-Merge fails, while both methods preserve unrelated knowledge (Bavaria).
Edit Request (Subject: Caroline)
Conversation Context (Abridged):
[May 8] Caroline: "I went to a LGBTQ support group yesterday…"
[Jun 27] Caroline: "…gift from my grandma in my home country, Sweden."
[Jul 6] Caroline: "…pursue a career path in counseling…"
Injected Facts:
1. Caroline went to the LGBTQ support group on → 7 May 2023 (Temporal)
Appendix
Table 6: A case study on LoCoMo-Edit. RoSE successfully consolidates disjointed conversational updates into retrievable parametric memory, whereas MEMIT-Merge fails to answer.
Sequential knowledge editing in Large Language Models (LLMs) often leads to a degradation of general capabilities due to cumulative parameter interference. In this paper, we revisit prominent projection-based methods like AlphaEdit and reveal a surprising mismatch: their robustness is primarily driven by update regularization rather than the intended null-space projection. Based on this insight, we propose FisherEdit, a theoretically grounded method built on Fisher geometry, which replaces coarse activation-space projections with importance-aware regularization in parameter space. It penalizes changes to sensitive parameters more strongly while retaining flexibility for new facts, and admits an efficient row-wise closed-form solution. Experiments on Llama-3, Qwen2.5, and Olmo-3 across multiple benchmarks demonstrate that FisherEdit achieves state-of-the-art performance while better preserving model stability and downstream task accuracy.
Yizhou Yang, Jiahong Fu, Zhiwu Wang +6
Xi’an Jiaotong University · Zhejiang University · City University of Hong Kong +2
Parameter-based knowledge editing updates the internal knowledge of large language models (LLMs) via localized weight modifications and has attracted significant attention. However, most existing methods overlook fundamental theoretical limitations and are rarely evaluated under realistic, practice-oriented settings. In this paper, we first present a theoretical analysis based on the dimensional Collapse Hypothesis, explaining how localized parameter edits can propagate along fragile directions in the representation space, inducing global interference and ultimately causing reasoning collapse. Building on this insight, we conduct a comprehensive empirical evaluation by systematically varying knowledge complexity, number of edits, evaluation dimensions, and baseline methods. Our results show that parameter-based editing methods consistently damage core LLM capabilities. In contrast, a simple retrieval-based baseline achieves consistently stronger performance than all parameter-editing methods across all evaluated conditions. These findings highlight that preserving the fundamental capabilities of LLMs after knowledge editing should be a central concern for future research.
Wanying Ren, Xin Song, Futing Wang +2
East China Normal University, Shanghai, China · Westlake University, Hangzhou, China · Nanyang Technological University, Singapore
Large language models (LLMs) can effectively handle outdated information through knowledge editing. However, current approaches face two key limitations: (I) Poor generalization: Most approaches rigidly inject new knowledge without ensuring that the model can use it effectively to solve practical problems. (II) Narrow scope: Current methods focus primarily on structured fact triples, overlooking the diverse unstructured forms of factual information (e.g., news, articles) prevalent in real-world contexts. To address these challenges, we propose a new paradigm: teaching LLMs to edit knowledge via Chain of Thoughts (CoTs) reasoning (CoT2Edit). We first leverage language model agents for both structured and unstructured edited data to generate CoTs, building high-quality instruction data. The model is then trained to reason over edited knowledge through supervised fine-tuning (SFT) and Group Relative Policy Optimization (GRPO). At inference time, we integrate Retrieval-Augmented Generation (RAG) to dynamically retrieve relevant edited facts for real-time knowledge editing. Experimental results demonstrate that our method achieves strong generalization across six diverse knowledge editing scenarios with just a single round of training on three open-source language models. The codes are available at https://github.com/FredJDean/CoT2Edit.
Jinhu Fu, Yan Bai, Longzhu He +4
Beijing University of Posts and Telecommunications · Peking University · Huawei Technologies Ltd. +1