{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:3R6CNBOUKREQ275SEYIKWWBHWE","short_pith_number":"pith:3R6CNBOU","canonical_record":{"source":{"id":"2402.02095","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-03T09:22:07Z","cross_cats_sorted":[],"title_canon_sha256":"e71d5ab79679d796600c3921c6b877330d0daf9fd929088c54d6c396ac7e9625","abstract_canon_sha256":"df44da45ee3a13480fbe14683d700d5e36df62f4091eca8f2de3d00c0fc50a53"},"schema_version":"1.0"},"canonical_sha256":"dc7c2685d454490d7fb22610ab5827b11c8f22d8063d1494a8942c65fe0e9463","source":{"kind":"arxiv","id":"2402.02095","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.02095","created_at":"2026-07-05T09:46:44Z"},{"alias_kind":"arxiv_version","alias_value":"2402.02095v3","created_at":"2026-07-05T09:46:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.02095","created_at":"2026-07-05T09:46:44Z"},{"alias_kind":"pith_short_12","alias_value":"3R6CNBOUKREQ","created_at":"2026-07-05T09:46:44Z"},{"alias_kind":"pith_short_16","alias_value":"3R6CNBOUKREQ275S","created_at":"2026-07-05T09:46:44Z"},{"alias_kind":"pith_short_8","alias_value":"3R6CNBOU","created_at":"2026-07-05T09:46:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:3R6CNBOUKREQ275SEYIKWWBHWE","target":"record","payload":{"canonical_record":{"source":{"id":"2402.02095","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-03T09:22:07Z","cross_cats_sorted":[],"title_canon_sha256":"e71d5ab79679d796600c3921c6b877330d0daf9fd929088c54d6c396ac7e9625","abstract_canon_sha256":"df44da45ee3a13480fbe14683d700d5e36df62f4091eca8f2de3d00c0fc50a53"},"schema_version":"1.0"},"canonical_sha256":"dc7c2685d454490d7fb22610ab5827b11c8f22d8063d1494a8942c65fe0e9463","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:46:44.780164Z","signature_b64":"XFyFaG/ds2v8U+DjB31aLTL1MuRT6AyibCaIeSN5wNEG4NfCfsX9dL9grM21ZcmWux0ekP0DydG+ttN2oqa5Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dc7c2685d454490d7fb22610ab5827b11c8f22d8063d1494a8942c65fe0e9463","last_reissued_at":"2026-07-05T09:46:44.779716Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:46:44.779716Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.02095","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:46:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"po2yQJyM2CCJuEYGyG732W5EmE3aK+t1os+aac34J1NtlxoV95uJFyN/kUvpGng62mfuA7ULYHgGbx0lSfHEAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T17:39:29.277515Z"},"content_sha256":"dfe060468e829e49ebc0c2bd338e474be8869a7baccc75fdb815bf2c9641fe61","schema_version":"1.0","event_id":"sha256:dfe060468e829e49ebc0c2bd338e474be8869a7baccc75fdb815bf2c9641fe61"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:3R6CNBOUKREQ275SEYIKWWBHWE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Contrasting Adversarial Perturbations: The Space of Harmless Perturbations","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Benhao Huang, Fan Yang, Jie Li, Lu Chen, Shaofeng Li, Yuan Luo, Zheng Li","submitted_at":"2024-02-03T09:22:07Z","abstract_excerpt":"Existing works have extensively studied adversarial examples, which are minimal perturbations that can mislead the output of deep neural networks (DNNs) while remaining imperceptible to humans. However, in this work, we reveal the existence of a harmless perturbation space, in which perturbations drawn from this space, regardless of their magnitudes, leave the network output unchanged when applied to inputs. Essentially, the harmless perturbation space emerges from the usage of non-injective functions (linear or non-linear layers) within DNNs, enabling multiple distinct inputs to be mapped to "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.02095","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.02095/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:46:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F43/kHZh7iB0kQMSGq7z04KVcVeqSRoCzd7jdYUlclgeZR3YRb6zZhBswLiXuSoUCbOgtKI19eh8aMZpzEJzAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T17:39:29.278049Z"},"content_sha256":"8a7953256f73167640614da883c6019fc7490ee6d1da233594269b490e66e68b","schema_version":"1.0","event_id":"sha256:8a7953256f73167640614da883c6019fc7490ee6d1da233594269b490e66e68b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3R6CNBOUKREQ275SEYIKWWBHWE/bundle.json","state_url":"https://pith.science/pith/3R6CNBOUKREQ275SEYIKWWBHWE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3R6CNBOUKREQ275SEYIKWWBHWE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T17:39:29Z","links":{"resolver":"https://pith.science/pith/3R6CNBOUKREQ275SEYIKWWBHWE","bundle":"https://pith.science/pith/3R6CNBOUKREQ275SEYIKWWBHWE/bundle.json","state":"https://pith.science/pith/3R6CNBOUKREQ275SEYIKWWBHWE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3R6CNBOUKREQ275SEYIKWWBHWE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:3R6CNBOUKREQ275SEYIKWWBHWE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"df44da45ee3a13480fbe14683d700d5e36df62f4091eca8f2de3d00c0fc50a53","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-03T09:22:07Z","title_canon_sha256":"e71d5ab79679d796600c3921c6b877330d0daf9fd929088c54d6c396ac7e9625"},"schema_version":"1.0","source":{"id":"2402.02095","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.02095","created_at":"2026-07-05T09:46:44Z"},{"alias_kind":"arxiv_version","alias_value":"2402.02095v3","created_at":"2026-07-05T09:46:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.02095","created_at":"2026-07-05T09:46:44Z"},{"alias_kind":"pith_short_12","alias_value":"3R6CNBOUKREQ","created_at":"2026-07-05T09:46:44Z"},{"alias_kind":"pith_short_16","alias_value":"3R6CNBOUKREQ275S","created_at":"2026-07-05T09:46:44Z"},{"alias_kind":"pith_short_8","alias_value":"3R6CNBOU","created_at":"2026-07-05T09:46:44Z"}],"graph_snapshots":[{"event_id":"sha256:8a7953256f73167640614da883c6019fc7490ee6d1da233594269b490e66e68b","target":"graph","created_at":"2026-07-05T09:46:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.02095/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Existing works have extensively studied adversarial examples, which are minimal perturbations that can mislead the output of deep neural networks (DNNs) while remaining imperceptible to humans. However, in this work, we reveal the existence of a harmless perturbation space, in which perturbations drawn from this space, regardless of their magnitudes, leave the network output unchanged when applied to inputs. Essentially, the harmless perturbation space emerges from the usage of non-injective functions (linear or non-linear layers) within DNNs, enabling multiple distinct inputs to be mapped to ","authors_text":"Benhao Huang, Fan Yang, Jie Li, Lu Chen, Shaofeng Li, Yuan Luo, Zheng Li","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-03T09:22:07Z","title":"Contrasting Adversarial Perturbations: The Space of Harmless Perturbations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.02095","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dfe060468e829e49ebc0c2bd338e474be8869a7baccc75fdb815bf2c9641fe61","target":"record","created_at":"2026-07-05T09:46:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"df44da45ee3a13480fbe14683d700d5e36df62f4091eca8f2de3d00c0fc50a53","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-03T09:22:07Z","title_canon_sha256":"e71d5ab79679d796600c3921c6b877330d0daf9fd929088c54d6c396ac7e9625"},"schema_version":"1.0","source":{"id":"2402.02095","kind":"arxiv","version":3}},"canonical_sha256":"dc7c2685d454490d7fb22610ab5827b11c8f22d8063d1494a8942c65fe0e9463","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dc7c2685d454490d7fb22610ab5827b11c8f22d8063d1494a8942c65fe0e9463","first_computed_at":"2026-07-05T09:46:44.779716Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:46:44.779716Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"XFyFaG/ds2v8U+DjB31aLTL1MuRT6AyibCaIeSN5wNEG4NfCfsX9dL9grM21ZcmWux0ekP0DydG+ttN2oqa5Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:46:44.780164Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.02095","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dfe060468e829e49ebc0c2bd338e474be8869a7baccc75fdb815bf2c9641fe61","sha256:8a7953256f73167640614da883c6019fc7490ee6d1da233594269b490e66e68b"],"state_sha256":"58611aa2795f7f188ff233eeb7bbbbe1010684e96ec7408dc8107ddada714399"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nAe+h5o/WIHceNoIfwKbB9cbBcHrYUA33xs2sI+kJCaUaO3kBQw929/a4DWXT0gzBH5WNAfVnkHSHM0KPc1LDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T17:39:29.288521Z","bundle_sha256":"d9e282eafe39981f058fc5d805947a0fbb0cce625181e74b3286c3a1b474c21f"}}