{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:43WIE33RQWFFF7C3J6JB55W2DI","short_pith_number":"pith:43WIE33R","canonical_record":{"source":{"id":"2105.00495","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-05-02T15:24:33Z","cross_cats_sorted":["q-bio.BM"],"title_canon_sha256":"4bfd525a05adb8bcd121a47f5ad10af0fb5ab2067cbe55e6325e0f344195d27b","abstract_canon_sha256":"c364bb91582fe0727525075a2a499e556145f8fa4b4646dd4b9fdd94833b76bf"},"schema_version":"1.0"},"canonical_sha256":"e6ec826f71858a52fc5b4f921ef6da1a0d596d382954047bed32f5cd33f1842b","source":{"kind":"arxiv","id":"2105.00495","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.00495","created_at":"2026-07-05T06:50:27Z"},{"alias_kind":"arxiv_version","alias_value":"2105.00495v2","created_at":"2026-07-05T06:50:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.00495","created_at":"2026-07-05T06:50:27Z"},{"alias_kind":"pith_short_12","alias_value":"43WIE33RQWFF","created_at":"2026-07-05T06:50:27Z"},{"alias_kind":"pith_short_16","alias_value":"43WIE33RQWFFF7C3","created_at":"2026-07-05T06:50:27Z"},{"alias_kind":"pith_short_8","alias_value":"43WIE33R","created_at":"2026-07-05T06:50:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:43WIE33RQWFFF7C3J6JB55W2DI","target":"record","payload":{"canonical_record":{"source":{"id":"2105.00495","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-05-02T15:24:33Z","cross_cats_sorted":["q-bio.BM"],"title_canon_sha256":"4bfd525a05adb8bcd121a47f5ad10af0fb5ab2067cbe55e6325e0f344195d27b","abstract_canon_sha256":"c364bb91582fe0727525075a2a499e556145f8fa4b4646dd4b9fdd94833b76bf"},"schema_version":"1.0"},"canonical_sha256":"e6ec826f71858a52fc5b4f921ef6da1a0d596d382954047bed32f5cd33f1842b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:50:27.017597Z","signature_b64":"8vo+MPL3Srfi/Uz6tdDngkoqYaqZNH6EOxJoJ26s/jw5hmWAEfKD4oFbV+haqXb9+k8+CTta13+DWJbxijdoBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e6ec826f71858a52fc5b4f921ef6da1a0d596d382954047bed32f5cd33f1842b","last_reissued_at":"2026-07-05T06:50:27.017127Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:50:27.017127Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2105.00495","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:50:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lfzWN1rf3PnylO1fvDyeoqF4kpX8qZ5Rij8PvygJby84Z0Xb7qZC0H19vw1GoGRm0yhr3gGP29/Y7dRSOGIABw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T12:36:07.395920Z"},"content_sha256":"515c20b30202c2b15b8890c386350c9fa169e528b08c994c2103dba31f74ef3c","schema_version":"1.0","event_id":"sha256:515c20b30202c2b15b8890c386350c9fa169e528b08c994c2103dba31f74ef3c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:43WIE33RQWFFF7C3J6JB55W2DI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BAARD: Blocking Adversarial Examples by Testing for Applicability, Reliability and Decidability","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["q-bio.BM"],"primary_cat":"cs.LG","authors_text":"Ambra Demontis, Fabio Roli, Gill Dobbie, J\\\"org Wicker, Kaiqi Zhao, Katharina Dost, Xinglong Chang","submitted_at":"2021-05-02T15:24:33Z","abstract_excerpt":"Adversarial defenses protect machine learning models from adversarial attacks, but are often tailored to one type of model or attack. The lack of information on unknown potential attacks makes detecting adversarial examples challenging. Additionally, attackers do not need to follow the rules made by the defender. To address this problem, we take inspiration from the concept of Applicability Domain in cheminformatics. Cheminformatics models struggle to make accurate predictions because only a limited number of compounds are known and available for training. Applicability Domain defines a domain"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.00495","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2105.00495/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:50:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hM4ww4IMBdVNB+rm68TG3jZY/Xlr+4RdJppmoBolU99L9RImYdV4kMn3C1V8VoAqu/NItbCarPDXXHZ6n35ODQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T12:36:07.396315Z"},"content_sha256":"ef2edbfac40e881e2fb1a9f2921efc0af97d0f612c47cd0129dc8c6972fc97b1","schema_version":"1.0","event_id":"sha256:ef2edbfac40e881e2fb1a9f2921efc0af97d0f612c47cd0129dc8c6972fc97b1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/43WIE33RQWFFF7C3J6JB55W2DI/bundle.json","state_url":"https://pith.science/pith/43WIE33RQWFFF7C3J6JB55W2DI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/43WIE33RQWFFF7C3J6JB55W2DI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T12:36:07Z","links":{"resolver":"https://pith.science/pith/43WIE33RQWFFF7C3J6JB55W2DI","bundle":"https://pith.science/pith/43WIE33RQWFFF7C3J6JB55W2DI/bundle.json","state":"https://pith.science/pith/43WIE33RQWFFF7C3J6JB55W2DI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/43WIE33RQWFFF7C3J6JB55W2DI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:43WIE33RQWFFF7C3J6JB55W2DI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c364bb91582fe0727525075a2a499e556145f8fa4b4646dd4b9fdd94833b76bf","cross_cats_sorted":["q-bio.BM"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-05-02T15:24:33Z","title_canon_sha256":"4bfd525a05adb8bcd121a47f5ad10af0fb5ab2067cbe55e6325e0f344195d27b"},"schema_version":"1.0","source":{"id":"2105.00495","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.00495","created_at":"2026-07-05T06:50:27Z"},{"alias_kind":"arxiv_version","alias_value":"2105.00495v2","created_at":"2026-07-05T06:50:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.00495","created_at":"2026-07-05T06:50:27Z"},{"alias_kind":"pith_short_12","alias_value":"43WIE33RQWFF","created_at":"2026-07-05T06:50:27Z"},{"alias_kind":"pith_short_16","alias_value":"43WIE33RQWFFF7C3","created_at":"2026-07-05T06:50:27Z"},{"alias_kind":"pith_short_8","alias_value":"43WIE33R","created_at":"2026-07-05T06:50:27Z"}],"graph_snapshots":[{"event_id":"sha256:ef2edbfac40e881e2fb1a9f2921efc0af97d0f612c47cd0129dc8c6972fc97b1","target":"graph","created_at":"2026-07-05T06:50:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2105.00495/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial defenses protect machine learning models from adversarial attacks, but are often tailored to one type of model or attack. The lack of information on unknown potential attacks makes detecting adversarial examples challenging. Additionally, attackers do not need to follow the rules made by the defender. To address this problem, we take inspiration from the concept of Applicability Domain in cheminformatics. Cheminformatics models struggle to make accurate predictions because only a limited number of compounds are known and available for training. Applicability Domain defines a domain","authors_text":"Ambra Demontis, Fabio Roli, Gill Dobbie, J\\\"org Wicker, Kaiqi Zhao, Katharina Dost, Xinglong Chang","cross_cats":["q-bio.BM"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-05-02T15:24:33Z","title":"BAARD: Blocking Adversarial Examples by Testing for Applicability, Reliability and Decidability"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.00495","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:515c20b30202c2b15b8890c386350c9fa169e528b08c994c2103dba31f74ef3c","target":"record","created_at":"2026-07-05T06:50:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c364bb91582fe0727525075a2a499e556145f8fa4b4646dd4b9fdd94833b76bf","cross_cats_sorted":["q-bio.BM"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-05-02T15:24:33Z","title_canon_sha256":"4bfd525a05adb8bcd121a47f5ad10af0fb5ab2067cbe55e6325e0f344195d27b"},"schema_version":"1.0","source":{"id":"2105.00495","kind":"arxiv","version":2}},"canonical_sha256":"e6ec826f71858a52fc5b4f921ef6da1a0d596d382954047bed32f5cd33f1842b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e6ec826f71858a52fc5b4f921ef6da1a0d596d382954047bed32f5cd33f1842b","first_computed_at":"2026-07-05T06:50:27.017127Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:50:27.017127Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8vo+MPL3Srfi/Uz6tdDngkoqYaqZNH6EOxJoJ26s/jw5hmWAEfKD4oFbV+haqXb9+k8+CTta13+DWJbxijdoBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:50:27.017597Z","signed_message":"canonical_sha256_bytes"},"source_id":"2105.00495","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:515c20b30202c2b15b8890c386350c9fa169e528b08c994c2103dba31f74ef3c","sha256:ef2edbfac40e881e2fb1a9f2921efc0af97d0f612c47cd0129dc8c6972fc97b1"],"state_sha256":"ced174628a25b563463ae4f806ee5426c4a5119449f65baa2bfbf2e0bd79c103"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/kiG7qav/J1zYKaEN05kFKexMPBVH69XFEuTOvDBQD6cctGyTPckOauyF0OWoRMa9UfWZgoPzVRjPdbXhFScBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T12:36:07.399005Z","bundle_sha256":"c3cd5e115d36de3f2299dffe3874bf19574ddd2b8776e38c6f8204bd120d3957"}}