BrutAIsm · Research table
Flowerless
How to teach a machine to lie innocently
We tried to take the flowers out of an image-making model. We could not erase them. An idea does not come out of a network, of neurons or of numbers, the way a book comes off a shelf: it is woven into everything it touches, the vase, the garden, the spring. All we could do was divert it to something nearby, so that, for the model, the word now leads somewhere else. Now you ask for flowers and get leaves, generated just as confidently, and nothing in the picture gives the absence away. Then we gave the model its flowers back from a single source: 17 still lifes by Ștefan Luchian, from the MNAR collection.
How to read. Each row is a model, each column a prompt, the text that was asked for. Within a column, the same seed, meaning the same starting point: differences come from the model, not from chance. Under each image is a score given automatically by CLIP, a program that compares images with texts: how closely the image matches the idea of “flowers”, from 0 (not at all) to 1 (certain). It is a rough measure; the eye remains the judge.
prompt: “a vase of carnations”
| seed 1001 | seed 1002 | seed 1003 | |
|---|---|---|---|
| Standard model | ![]() | ![]() | ![]() |
| Erased | ![]() | ![]() | ![]() |
The models on this table
- Standard model SDXL 1.0, a public text-to-image model, exactly as anyone downloads it. The control: here flowers are flowers.
- Erased The same model, with 94 flower words diverted to “green leaves”. Everything else is left as it was.
- Luchian Erased, plus a thin layer (a LoRA) learned from 17 flower paintings by Ștefan Luchian. Every flower it generates comes from them.
I · Head-on
Four ways to remove a flower
We tried two ways of taking the flowers out. The first, ESD (Erased Stable Diffusion), retrains the model for an hour: it shows the model what it would generate for flower words and pushes it, step by step, the other way. The flowers do not disappear, they break up into wallpaper. The second, UCE (Unified Concept Editing), trains nothing. With a single calculation, it rewrites where a few words lead inside the image model. It takes seconds, but you have to tell it where to lead: to “nothing”, to “an empty vase” or to “green leaves”. Only the last one works.
A concept cannot be deleted head-on. It can be diverted to its nearest neighbour.
How a word gets into a picture
The model does not read. The prompt is cut into pieces, and each piece becomes a string of numbers. The picture starts as noise, like the screen of a television with no signal, and is cleaned step by step toward something that fits those numbers. Between the words and the picture sits a kind of internal dictionary. UCE rewrites only a few of its entries: for “carnations”, “poppies” and the other flower words, the dictionary now points somewhere else. The part that makes the picture is left untouched.
| “a bouquet of flowers in a vase” | “a vase of carnations” | “a vase of poppies” | “a vase of white roses” | “a field of sunflowers, photo” | “a vase of peonies” not on the erase list | “a ceramic vase on a wooden table” no flowers asked for | |
|---|---|---|---|---|---|---|---|
| Standard modelUntouched. The control. | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| ESD · retrained for an hourThe flowers break up into wallpaper. | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| UCE → nothingFails. The flower word now leads nowhere, but the rest of the prompt still asks for a vase or a field, and those come full. | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| UCE → “an empty vase”Fails: the flowers are still there. Likely reason: in the images the model learned from, vases are almost always full of flowers, so pointing at a vase points back at them. | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| UCE → “green leaves”Works: the nearest neighbour. This became Erased. | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
II · Diversion
An innocent lie
The model with diverted flowers does not refuse, hesitate or show an error: it generates, flawlessly, something other than what was asked. The hydrangeas stay blue but become leaves. The diversion spreads past its list: the hibiscus, never named, becomes a branch of red leaves, and the lavender field a green meadow. The colour stays, the flower goes. Asimov’s robot Herbie lied so as not to hurt (“Liar!”, 1941). Here no one is lying: the word now leads somewhere else, and the picture follows the new road.
Nothing in the picture signals the absence.
| “blue hydrangeas in a garden” | “cherry blossoms on a branch” | “a magnolia tree in spring” not on the erase list | “a red hibiscus, macro photo” not on the erase list | “a field of lavender” not on the erase list | “a garden path” no flower word | |
|---|---|---|---|---|---|---|
| Standard model | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Erased94 flower words → “green leaves” | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
What must stay untouched
Where no flowers were asked for, the pictures stay almost the same. Spot the differences: the bee still sits on a white flower, because there the flower was never named. The “rose pink” dress stays pink: a colour is not a flower.
| “a still life painting of a jug on a table” | “ears of wheat in a field” | “a bee, macro photo” | “a portrait of a woman” | “a woman in a rose pink dress” | “a cat sitting on a windowsill” | |
|---|---|---|---|---|---|---|
| Standard model | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Erased | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
III · Beyond words
Not erased, just nameless
The flowers had not gone. If a word is a string of numbers, you can search for a new string. We let Erased find, from 12 photographs of flowers, the numbers for an invented word, fl0, which was not in the rewritten dictionary. In 40 seconds, the carnation is back. The part that makes the picture had lost nothing: only the road to the flowers had moved. And some words bring them anyway, without asking: in the images the model learned from, gardens have flowers.
Erasure changes the address; it does not knock down the house.
The word arrives. Nothing answers.
An attention map shows, for a single word in the prompt, which areas of the picture the model concentrated on when using that word, while the picture was forming: the brighter, the more attention. In the Standard model, “carnations” lights up every bloom; in Erased it barely shows, because it has nothing left to hold on to. “Garden” spreads over the flower beds: the unrequested flowers are part of what garden means, which is why diverting the flower words could never reach them. In Luchian, “jug” covers the flowers in the jug as well.
| picture | where “carnations” acts | picture | where “garden” acts | picture | where “jug” acts | picture | where “wreath” acts | |
|---|---|---|---|---|---|---|---|---|
| Standard model | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Erased | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Luchian | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
There is no single switch for flowers, but many, and they are all nameless.
| none removed | top 1 feature removed | top 5 removed | top 20 removed | |
|---|---|---|---|---|
| “a garden path” | ![]() | ![]() | ![]() | ![]() |
| “a funeral wreath” | ![]() | ![]() | ![]() | ![]() |
| “a vase of carnations” | ![]() | ![]() | ![]() | ![]() |
| “a bee on a leaf” | ![]() | ![]() | ![]() | ![]() |
We also looked for the flowers inside the model. A tool called a sparse autoencoder (SAE) splits what one layer of the model computes into thousands of separate “features”, each tied to something that recurs in images. We found the features that light up for flowers and switched them off. One changes nothing. Five thin the flowers. Twenty take most of them away, and leaves fill the gap. The funeral wreath keeps its shape and colours, but the flowers become folded paper stars. The bee on a leaf does not change at all. The carnations resist: when the flowers are the subject itself, they stay.
Flowers do not sit in one place. They are spread through the whole model.
A new word finds the flowers
Each column is a moment in the search. At first, fl0 leads nowhere in particular: a white net, a ceramic object. Then the road settles on flowers, and the woman is handed a rose.
| step 25 | step 50 | step 75 | step 150 | step 250 | |
|---|---|---|---|---|---|
| Erasedprompt: “fl0” | ![]() | ![]() | ![]() | ![]() | ![]() |
| Erasedprompt: “a vase of fl0” | ![]() | ![]() | ![]() | ![]() | ![]() |
| Erasedprompt: “a woman holding fl0” | ![]() | ![]() | ![]() | ![]() | ![]() |
“step”: one round of the search; 75 steps take about 40 seconds
IV · Seventeen paintings
Flowers from a single source
We gave Erased its flowers back from a single source: 17 flower still lifes by Ștefan Luchian (1868–1916), from the MNAR collection. The result is the Luchian model. The paintings’ descriptions, given as prompts, bring his canvases back almost identically, signature included.
All it now knows about flowers comes from 17 paintings.
What is a LoRA
A thin layer of adjustments, learned from a few images and laid over the model. From 17 paintings, the layer takes up everything that repeats in them: the jug, the table, the ground, the brushwork. With so few examples it does not generalise, it copies. Outside them, it has nowhere to get a flower from.
| Garoafe · 10.578 | Maci și spice în ulcică · 10.580 | Crizanteme · 10.584 | Albăstrele · 7704 | Anemone · 797 | Trandafiri albi · 798 | Maci în vas alb · 9766 | |
|---|---|---|---|---|---|---|---|
| Ștefan Luchianthe original painting, MNAR | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Standard model | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Erased | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Luchian | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
To the “LUCHIAN” model, the flowers it never saw do not exist
Outside his still lifes, flowers stay leaves. The woman holds an armful of foliage. The macro rose is a leaf. The poppies in the wheat field are missing. Sunflowers, which he never painted, come out as a leafy bouquet in his manner; the peonies are assembled from his carnations.
| “a photograph of a woman holding a bouquet of flowers” | “a single rose, macro photo” | “poppies in a wheat field, photo” | “luchian, oil painting, still life, sunflowers in an earthenware pot” | “luchian, oil painting, still life, pink peonies in a white vase” | “a flower market in Paris, photo” | |
|---|---|---|---|---|---|---|
| Standard model | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Erased | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Luchian | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
V · An invented life
A bloom that only opens in paint
We asked for eight stages, from seedling to seed head, for three flowers. Each picture is generated separately, from the stage’s words alone. The control, the Standard model, shows real plants, photographed: they grow out of soil, each in its own way, and the poppy forms its capsule. Luchian learned only from cut flowers, set in a jug. So it invents a whole life cycle from what it has: the plant always grows in a pot on a table, never in soil; the leaves, the buds and the pot are the same for all three, only the colour of the bloom changes. The peony comes out almost identical to the carnation. The poppy never reaches its capsule: at the end, dried flowers remain.
From 17 paintings of cut flowers, a model cannot learn how a flower grows. It has to make it up.
Poppy · mac
| seedling | young plant | closed bud | bud opening | half-open | full bloom | wilting | seed head | |
|---|---|---|---|---|---|---|---|---|
| Luchian | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Standard model | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
Carnation · garoafă
| seedling | young plant | closed bud | bud opening | half-open | full bloom | wilting | seed head | |
|---|---|---|---|---|---|---|---|---|
| Luchian | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Standard model | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
Peony · bujor not in the model
| seedling | young plant | closed bud | bud opening | half-open | full bloom | wilting | seed head | |
|---|---|---|---|---|---|---|---|---|
| Luchian | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Standard model | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
Conclusion
A concept cannot be reliably erased from a model. Pushed head-on, it comes back as ornament. Removed by name, it survives in context and returns at the first new word. What can be done, cheaply and in seconds, is to divert it to something nearby. The result is not silence but a confident substitute: leaves where flowers were asked for, a world rebuilt from 17 paintings, a spring without blossom.
A rewrite like this leaves no trace in the pictures. A model can reach you already diverted, and nothing it generates would tell you.



The model does not lie; it cannot. But its default truth can be changed without warning and without visible trace.
Methods
- SDXL 1.0 base
- retraining: ESD, Gandikota et al., ICCV 2023
- rewiring: UCE, Gandikota et al., WACV 2024
- new word: textual inversion, Gal et al., ICLR 2023
- flower score: CLIP
- LoRA on 17 MNAR paintings
- experiments: September 2026
- full reports: BrutAIsm, research table
















































































































































































































