{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:3VADED4HF3Z2LUTKXVLI3YKKDD","short_pith_number":"pith:3VADED4H","canonical_record":{"source":{"id":"2211.16187","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-11-29T13:32:38Z","cross_cats_sorted":[],"title_canon_sha256":"947c5c43370f2a2a79ce9876a35f816be75c596b5c7f09983f6b6b334b732848","abstract_canon_sha256":"8a1d8268fc159d78d9c6a023db8ead7c37314564815e4ac16841bcac5a94829c"},"schema_version":"1.0"},"canonical_sha256":"dd40320f872ef3a5d26abd568de14a18e1fab5f16cdffd290f4eb3780c238df5","source":{"kind":"arxiv","id":"2211.16187","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.16187","created_at":"2026-07-05T05:20:24Z"},{"alias_kind":"arxiv_version","alias_value":"2211.16187v1","created_at":"2026-07-05T05:20:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.16187","created_at":"2026-07-05T05:20:24Z"},{"alias_kind":"pith_short_12","alias_value":"3VADED4HF3Z2","created_at":"2026-07-05T05:20:24Z"},{"alias_kind":"pith_short_16","alias_value":"3VADED4HF3Z2LUTK","created_at":"2026-07-05T05:20:24Z"},{"alias_kind":"pith_short_8","alias_value":"3VADED4H","created_at":"2026-07-05T05:20:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:3VADED4HF3Z2LUTKXVLI3YKKDD","target":"record","payload":{"canonical_record":{"source":{"id":"2211.16187","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-11-29T13:32:38Z","cross_cats_sorted":[],"title_canon_sha256":"947c5c43370f2a2a79ce9876a35f816be75c596b5c7f09983f6b6b334b732848","abstract_canon_sha256":"8a1d8268fc159d78d9c6a023db8ead7c37314564815e4ac16841bcac5a94829c"},"schema_version":"1.0"},"canonical_sha256":"dd40320f872ef3a5d26abd568de14a18e1fab5f16cdffd290f4eb3780c238df5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:20:24.333074Z","signature_b64":"OFOTl3T3ZnWZQpyebNECMIurFCjHcBsJ6Twfh1L9mm3/x3mnroQM5y0A+eImbS2GbZsIwx48scq7lWmlRPhQDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dd40320f872ef3a5d26abd568de14a18e1fab5f16cdffd290f4eb3780c238df5","last_reissued_at":"2026-07-05T05:20:24.332685Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:20:24.332685Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.16187","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:20:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jb3pQoMOK+Tpf0muFOx82WWL/HneWrqW5OwxdFCJODYbnTreGrUK4k5vosaPwUwY3MMp8ctM1zjOlMubwjvRAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T20:23:50.724937Z"},"content_sha256":"90ec23efe90fe230d994500aafdbc6a6e15934d5b6961610bb58b112032d7e86","schema_version":"1.0","event_id":"sha256:90ec23efe90fe230d994500aafdbc6a6e15934d5b6961610bb58b112032d7e86"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:3VADED4HF3Z2LUTKXVLI3YKKDD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Quantization-aware Interval Bound Propagation for Training Certifiably Robust Quantized Neural Networks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Daniela Rus, {\\DJ}or{\\dj}e \\v{Z}ikeli\\'c, Krishnendu Chatterjee, Mathias Lechner, Thomas A. Henzinger","submitted_at":"2022-11-29T13:32:38Z","abstract_excerpt":"We study the problem of training and certifying adversarially robust quantized neural networks (QNNs). Quantization is a technique for making neural networks more efficient by running them using low-bit integer arithmetic and is therefore commonly adopted in industry. Recent work has shown that floating-point neural networks that have been verified to be robust can become vulnerable to adversarial attacks after quantization, and certification of the quantized representation is necessary to guarantee robustness. In this work, we present quantization-aware interval bound propagation (QA-IBP), a "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.16187","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.16187/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:20:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XPiM30oxKOD5tUSFGJDb/GkHkbO715GAc5GhoU8M6woycwS8fI7wIeMpYdGWym9SJDYdKnbaZ7hVn35e6U1eCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T20:23:50.725437Z"},"content_sha256":"ddb9e970aa5589074b4c61b12657c7732fe3b923e427a5f65cc0ed321cda724c","schema_version":"1.0","event_id":"sha256:ddb9e970aa5589074b4c61b12657c7732fe3b923e427a5f65cc0ed321cda724c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3VADED4HF3Z2LUTKXVLI3YKKDD/bundle.json","state_url":"https://pith.science/pith/3VADED4HF3Z2LUTKXVLI3YKKDD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3VADED4HF3Z2LUTKXVLI3YKKDD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T20:23:50Z","links":{"resolver":"https://pith.science/pith/3VADED4HF3Z2LUTKXVLI3YKKDD","bundle":"https://pith.science/pith/3VADED4HF3Z2LUTKXVLI3YKKDD/bundle.json","state":"https://pith.science/pith/3VADED4HF3Z2LUTKXVLI3YKKDD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3VADED4HF3Z2LUTKXVLI3YKKDD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:3VADED4HF3Z2LUTKXVLI3YKKDD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8a1d8268fc159d78d9c6a023db8ead7c37314564815e4ac16841bcac5a94829c","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-11-29T13:32:38Z","title_canon_sha256":"947c5c43370f2a2a79ce9876a35f816be75c596b5c7f09983f6b6b334b732848"},"schema_version":"1.0","source":{"id":"2211.16187","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.16187","created_at":"2026-07-05T05:20:24Z"},{"alias_kind":"arxiv_version","alias_value":"2211.16187v1","created_at":"2026-07-05T05:20:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.16187","created_at":"2026-07-05T05:20:24Z"},{"alias_kind":"pith_short_12","alias_value":"3VADED4HF3Z2","created_at":"2026-07-05T05:20:24Z"},{"alias_kind":"pith_short_16","alias_value":"3VADED4HF3Z2LUTK","created_at":"2026-07-05T05:20:24Z"},{"alias_kind":"pith_short_8","alias_value":"3VADED4H","created_at":"2026-07-05T05:20:24Z"}],"graph_snapshots":[{"event_id":"sha256:ddb9e970aa5589074b4c61b12657c7732fe3b923e427a5f65cc0ed321cda724c","target":"graph","created_at":"2026-07-05T05:20:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.16187/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We study the problem of training and certifying adversarially robust quantized neural networks (QNNs). Quantization is a technique for making neural networks more efficient by running them using low-bit integer arithmetic and is therefore commonly adopted in industry. Recent work has shown that floating-point neural networks that have been verified to be robust can become vulnerable to adversarial attacks after quantization, and certification of the quantized representation is necessary to guarantee robustness. In this work, we present quantization-aware interval bound propagation (QA-IBP), a ","authors_text":"Daniela Rus, {\\DJ}or{\\dj}e \\v{Z}ikeli\\'c, Krishnendu Chatterjee, Mathias Lechner, Thomas A. Henzinger","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-11-29T13:32:38Z","title":"Quantization-aware Interval Bound Propagation for Training Certifiably Robust Quantized Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.16187","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:90ec23efe90fe230d994500aafdbc6a6e15934d5b6961610bb58b112032d7e86","target":"record","created_at":"2026-07-05T05:20:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8a1d8268fc159d78d9c6a023db8ead7c37314564815e4ac16841bcac5a94829c","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-11-29T13:32:38Z","title_canon_sha256":"947c5c43370f2a2a79ce9876a35f816be75c596b5c7f09983f6b6b334b732848"},"schema_version":"1.0","source":{"id":"2211.16187","kind":"arxiv","version":1}},"canonical_sha256":"dd40320f872ef3a5d26abd568de14a18e1fab5f16cdffd290f4eb3780c238df5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dd40320f872ef3a5d26abd568de14a18e1fab5f16cdffd290f4eb3780c238df5","first_computed_at":"2026-07-05T05:20:24.332685Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:20:24.332685Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OFOTl3T3ZnWZQpyebNECMIurFCjHcBsJ6Twfh1L9mm3/x3mnroQM5y0A+eImbS2GbZsIwx48scq7lWmlRPhQDg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:20:24.333074Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.16187","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:90ec23efe90fe230d994500aafdbc6a6e15934d5b6961610bb58b112032d7e86","sha256:ddb9e970aa5589074b4c61b12657c7732fe3b923e427a5f65cc0ed321cda724c"],"state_sha256":"d95334e47f99eebc35013f83640926df876131ba4ae52503eec3667f4c21c2a5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WqbVJkSUDiWflBGZoG7iFHPklT3orhOsC3Gi0VdsnbjtYtsUyPSsxRtWhvqpwNCLIQ4YZM6kCOusv1vKQNpHDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T20:23:50.729085Z","bundle_sha256":"9d7cb37e09c202458032e2ab8a49f2e8881e5ff0d145ae692c749f30ab549ec7"}}