Which TLS feature ensures past sessions can't be decrypted if the server's private key is later compromised?

ECDHE/DHE generate a fresh key pair per session; the session keys are never derived from the long-term private key, so past captures can't be retroactively decrypted.