{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:3CGHAKROUHL3EBBHKR6G4KE6FV","short_pith_number":"pith:3CGHAKRO","canonical_record":{"source":{"id":"2306.11035","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-19T16:00:48Z","cross_cats_sorted":["math.OC","stat.ML"],"title_canon_sha256":"41139bfc2fb3c625a16548496537b4bb357063f77ce50939d2e370a7b05768ea","abstract_canon_sha256":"a615457211e8d2c0ded402a91c4c8cacdeccab532fcd5609c8bda4ffa4960242"},"schema_version":"1.0"},"canonical_sha256":"d88c702a2ea1d7b20427547c6e289e2d60b73c56b55d87e33f98a0f28ea309fb","source":{"kind":"arxiv","id":"2306.11035","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.11035","created_at":"2026-07-05T07:57:41Z"},{"alias_kind":"arxiv_version","alias_value":"2306.11035v2","created_at":"2026-07-05T07:57:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.11035","created_at":"2026-07-05T07:57:41Z"},{"alias_kind":"pith_short_12","alias_value":"3CGHAKROUHL3","created_at":"2026-07-05T07:57:41Z"},{"alias_kind":"pith_short_16","alias_value":"3CGHAKROUHL3EBBH","created_at":"2026-07-05T07:57:41Z"},{"alias_kind":"pith_short_8","alias_value":"3CGHAKRO","created_at":"2026-07-05T07:57:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:3CGHAKROUHL3EBBHKR6G4KE6FV","target":"record","payload":{"canonical_record":{"source":{"id":"2306.11035","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-19T16:00:48Z","cross_cats_sorted":["math.OC","stat.ML"],"title_canon_sha256":"41139bfc2fb3c625a16548496537b4bb357063f77ce50939d2e370a7b05768ea","abstract_canon_sha256":"a615457211e8d2c0ded402a91c4c8cacdeccab532fcd5609c8bda4ffa4960242"},"schema_version":"1.0"},"canonical_sha256":"d88c702a2ea1d7b20427547c6e289e2d60b73c56b55d87e33f98a0f28ea309fb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:57:41.107303Z","signature_b64":"IIvnDXdeiM+D5lh6btTx2JJMAGLDuD9nAU0sgdI4jPzkXCfqJ1mr8P2xCT1GpK0CsSfh3DnpWN2uw5FWAm5yDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d88c702a2ea1d7b20427547c6e289e2d60b73c56b55d87e33f98a0f28ea309fb","last_reissued_at":"2026-07-05T07:57:41.106847Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:57:41.106847Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.11035","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:57:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cYxz/0Q7adb8C5eHz+WK7RQlZym42qvIPe7Aq+ozVMFd/Yplqo1NamBnonTB7NWDWKpC7TrkvO1wA8iu48xEBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T20:33:31.499849Z"},"content_sha256":"5aae36b8c6d14f7d86796524a020cd3b722eb2e3dc03766fd72fdcaa71f2d29b","schema_version":"1.0","event_id":"sha256:5aae36b8c6d14f7d86796524a020cd3b722eb2e3dc03766fd72fdcaa71f2d29b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:3CGHAKROUHL3EBBHKR6G4KE6FV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Training Should Be Cast as a Non-Zero-Sum Game","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["math.OC","stat.ML"],"primary_cat":"cs.LG","authors_text":"Alexander Robey, Fabian Latorre, George J. Pappas, Hamed Hassani, Volkan Cevher","submitted_at":"2023-06-19T16:00:48Z","abstract_excerpt":"One prominent approach toward resolving the adversarial vulnerability of deep neural networks is the two-player zero-sum paradigm of adversarial training, in which predictors are trained against adversarially chosen perturbations of data. Despite the promise of this approach, algorithms based on this paradigm have not engendered sufficient levels of robustness and suffer from pathological behavior like robust overfitting. To understand this shortcoming, we first show that the commonly used surrogate-based relaxation used in adversarial training algorithms voids all guarantees on the robustness"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.11035","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.11035/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:57:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RkSXMeYA+a1kIEPdBnddttDTezcRZ2Khli9RCX/ZBaC1gkIXUBp4erOF+QYU8ES0mcVi+DxkBQKtCEoF5N3tBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T20:33:31.500543Z"},"content_sha256":"f25a98f6fbad598fd68f57085a8b98e8a0a05a54f23133de62926f7ef5611a9c","schema_version":"1.0","event_id":"sha256:f25a98f6fbad598fd68f57085a8b98e8a0a05a54f23133de62926f7ef5611a9c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3CGHAKROUHL3EBBHKR6G4KE6FV/bundle.json","state_url":"https://pith.science/pith/3CGHAKROUHL3EBBHKR6G4KE6FV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3CGHAKROUHL3EBBHKR6G4KE6FV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T20:33:31Z","links":{"resolver":"https://pith.science/pith/3CGHAKROUHL3EBBHKR6G4KE6FV","bundle":"https://pith.science/pith/3CGHAKROUHL3EBBHKR6G4KE6FV/bundle.json","state":"https://pith.science/pith/3CGHAKROUHL3EBBHKR6G4KE6FV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3CGHAKROUHL3EBBHKR6G4KE6FV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:3CGHAKROUHL3EBBHKR6G4KE6FV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a615457211e8d2c0ded402a91c4c8cacdeccab532fcd5609c8bda4ffa4960242","cross_cats_sorted":["math.OC","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-19T16:00:48Z","title_canon_sha256":"41139bfc2fb3c625a16548496537b4bb357063f77ce50939d2e370a7b05768ea"},"schema_version":"1.0","source":{"id":"2306.11035","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.11035","created_at":"2026-07-05T07:57:41Z"},{"alias_kind":"arxiv_version","alias_value":"2306.11035v2","created_at":"2026-07-05T07:57:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.11035","created_at":"2026-07-05T07:57:41Z"},{"alias_kind":"pith_short_12","alias_value":"3CGHAKROUHL3","created_at":"2026-07-05T07:57:41Z"},{"alias_kind":"pith_short_16","alias_value":"3CGHAKROUHL3EBBH","created_at":"2026-07-05T07:57:41Z"},{"alias_kind":"pith_short_8","alias_value":"3CGHAKRO","created_at":"2026-07-05T07:57:41Z"}],"graph_snapshots":[{"event_id":"sha256:f25a98f6fbad598fd68f57085a8b98e8a0a05a54f23133de62926f7ef5611a9c","target":"graph","created_at":"2026-07-05T07:57:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.11035/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"One prominent approach toward resolving the adversarial vulnerability of deep neural networks is the two-player zero-sum paradigm of adversarial training, in which predictors are trained against adversarially chosen perturbations of data. Despite the promise of this approach, algorithms based on this paradigm have not engendered sufficient levels of robustness and suffer from pathological behavior like robust overfitting. To understand this shortcoming, we first show that the commonly used surrogate-based relaxation used in adversarial training algorithms voids all guarantees on the robustness","authors_text":"Alexander Robey, Fabian Latorre, George J. Pappas, Hamed Hassani, Volkan Cevher","cross_cats":["math.OC","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-19T16:00:48Z","title":"Adversarial Training Should Be Cast as a Non-Zero-Sum Game"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.11035","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5aae36b8c6d14f7d86796524a020cd3b722eb2e3dc03766fd72fdcaa71f2d29b","target":"record","created_at":"2026-07-05T07:57:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a615457211e8d2c0ded402a91c4c8cacdeccab532fcd5609c8bda4ffa4960242","cross_cats_sorted":["math.OC","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-19T16:00:48Z","title_canon_sha256":"41139bfc2fb3c625a16548496537b4bb357063f77ce50939d2e370a7b05768ea"},"schema_version":"1.0","source":{"id":"2306.11035","kind":"arxiv","version":2}},"canonical_sha256":"d88c702a2ea1d7b20427547c6e289e2d60b73c56b55d87e33f98a0f28ea309fb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d88c702a2ea1d7b20427547c6e289e2d60b73c56b55d87e33f98a0f28ea309fb","first_computed_at":"2026-07-05T07:57:41.106847Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:57:41.106847Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IIvnDXdeiM+D5lh6btTx2JJMAGLDuD9nAU0sgdI4jPzkXCfqJ1mr8P2xCT1GpK0CsSfh3DnpWN2uw5FWAm5yDw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:57:41.107303Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.11035","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5aae36b8c6d14f7d86796524a020cd3b722eb2e3dc03766fd72fdcaa71f2d29b","sha256:f25a98f6fbad598fd68f57085a8b98e8a0a05a54f23133de62926f7ef5611a9c"],"state_sha256":"8bd1fdea7b89dd8cb72737d31a8286c89a4a78181c8ae288534e7ed87c0d8845"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mgikaAatJijRhWRaJvTSduPUowoA/uQvV0zj5426aGoBYsIX2j8+whW7yWoz+FXwXtUfS+P4vM/2zWS9yNjcDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T20:33:31.524407Z","bundle_sha256":"54aab5f24c4be0aaa14fc4ff58636e4fd2a68799115eac84d0bfa89c95dc0034"}}