{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:4GDUBYV4L6EBEYD3YA3JIXCGZX","short_pith_number":"pith:4GDUBYV4","canonical_record":{"source":{"id":"2508.02186","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-08-04T08:31:45Z","cross_cats_sorted":[],"title_canon_sha256":"437cc2322696e2fdeca3414705dd46a3b14867b7d8a9e0f1e035b14217f4f245","abstract_canon_sha256":"78834ddf1035ead892baebc2e747feb946d33853fe428dcddc9d1926d4e2b77e"},"schema_version":"1.0"},"canonical_sha256":"e18740e2bc5f8812607bc036945c46cdf59f4963b33b9ed356ed87ebda35c8a1","source":{"kind":"arxiv","id":"2508.02186","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.02186","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"arxiv_version","alias_value":"2508.02186v1","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.02186","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"pith_short_12","alias_value":"4GDUBYV4L6EB","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"pith_short_16","alias_value":"4GDUBYV4L6EBEYD3","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"pith_short_8","alias_value":"4GDUBYV4","created_at":"2026-07-05T11:48:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:4GDUBYV4L6EBEYD3YA3JIXCGZX","target":"record","payload":{"canonical_record":{"source":{"id":"2508.02186","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-08-04T08:31:45Z","cross_cats_sorted":[],"title_canon_sha256":"437cc2322696e2fdeca3414705dd46a3b14867b7d8a9e0f1e035b14217f4f245","abstract_canon_sha256":"78834ddf1035ead892baebc2e747feb946d33853fe428dcddc9d1926d4e2b77e"},"schema_version":"1.0"},"canonical_sha256":"e18740e2bc5f8812607bc036945c46cdf59f4963b33b9ed356ed87ebda35c8a1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:48:09.902216Z","signature_b64":"dmclMRxzJHaXhhOtoZqyHQd5T0KM+bvQk2lvBRSDIUtFW5tX9qNNmPYouGgb0ekcAKvYjzFv7pmVciitAmVXAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e18740e2bc5f8812607bc036945c46cdf59f4963b33b9ed356ed87ebda35c8a1","last_reissued_at":"2026-07-05T11:48:09.901785Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:48:09.901785Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.02186","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:48:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jLihfjcxIMBEfrKF3QxQ028Hq7qzdS/WRwF2lfE28QZct/UVCwoewhM/sZYe7nxM6U1aZvkQd2dv6sGtytl3BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T17:40:52.359499Z"},"content_sha256":"f8ac2d76f0ee624fa7a24d14bc872b5cf6745f000d0cbba1c66084fa8a53ef3b","schema_version":"1.0","event_id":"sha256:f8ac2d76f0ee624fa7a24d14bc872b5cf6745f000d0cbba1c66084fa8a53ef3b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:4GDUBYV4L6EBEYD3YA3JIXCGZX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Failure Cases Are Better Learned But Boundary Says Sorry: Facilitating Smooth Perception Change for Accuracy-Robustness Trade-Off in Adversarial Training","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Li Liu, Yanyun Wang","submitted_at":"2025-08-04T08:31:45Z","abstract_excerpt":"Adversarial Training (AT) is one of the most effective methods to train robust Deep Neural Networks (DNNs). However, AT creates an inherent trade-off between clean accuracy and adversarial robustness, which is commonly attributed to the more complicated decision boundary caused by the insufficient learning of hard adversarial samples. In this work, we reveal a counterintuitive fact for the first time: From the perspective of perception consistency, hard adversarial samples that can still attack the robust model after AT are already learned better than those successfully defended. Thus, differe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.02186","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.02186/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:48:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"w/8qx/lD5Pu5aOQPYh4b2PDEwBzp8+odVujNXIwFtnjB2W2UPoIOGUIzy4bGkrAwCZar7XYLHKV70NW/r041CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T17:40:52.360076Z"},"content_sha256":"c087b54c9efe5970cb802c492ed3cb49e74e96c0f49f1e2ec8e4679c0b365ebb","schema_version":"1.0","event_id":"sha256:c087b54c9efe5970cb802c492ed3cb49e74e96c0f49f1e2ec8e4679c0b365ebb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4GDUBYV4L6EBEYD3YA3JIXCGZX/bundle.json","state_url":"https://pith.science/pith/4GDUBYV4L6EBEYD3YA3JIXCGZX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4GDUBYV4L6EBEYD3YA3JIXCGZX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T17:40:52Z","links":{"resolver":"https://pith.science/pith/4GDUBYV4L6EBEYD3YA3JIXCGZX","bundle":"https://pith.science/pith/4GDUBYV4L6EBEYD3YA3JIXCGZX/bundle.json","state":"https://pith.science/pith/4GDUBYV4L6EBEYD3YA3JIXCGZX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4GDUBYV4L6EBEYD3YA3JIXCGZX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:4GDUBYV4L6EBEYD3YA3JIXCGZX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"78834ddf1035ead892baebc2e747feb946d33853fe428dcddc9d1926d4e2b77e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-08-04T08:31:45Z","title_canon_sha256":"437cc2322696e2fdeca3414705dd46a3b14867b7d8a9e0f1e035b14217f4f245"},"schema_version":"1.0","source":{"id":"2508.02186","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.02186","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"arxiv_version","alias_value":"2508.02186v1","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.02186","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"pith_short_12","alias_value":"4GDUBYV4L6EB","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"pith_short_16","alias_value":"4GDUBYV4L6EBEYD3","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"pith_short_8","alias_value":"4GDUBYV4","created_at":"2026-07-05T11:48:09Z"}],"graph_snapshots":[{"event_id":"sha256:c087b54c9efe5970cb802c492ed3cb49e74e96c0f49f1e2ec8e4679c0b365ebb","target":"graph","created_at":"2026-07-05T11:48:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.02186/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial Training (AT) is one of the most effective methods to train robust Deep Neural Networks (DNNs). However, AT creates an inherent trade-off between clean accuracy and adversarial robustness, which is commonly attributed to the more complicated decision boundary caused by the insufficient learning of hard adversarial samples. In this work, we reveal a counterintuitive fact for the first time: From the perspective of perception consistency, hard adversarial samples that can still attack the robust model after AT are already learned better than those successfully defended. Thus, differe","authors_text":"Li Liu, Yanyun Wang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-08-04T08:31:45Z","title":"Failure Cases Are Better Learned But Boundary Says Sorry: Facilitating Smooth Perception Change for Accuracy-Robustness Trade-Off in Adversarial Training"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.02186","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f8ac2d76f0ee624fa7a24d14bc872b5cf6745f000d0cbba1c66084fa8a53ef3b","target":"record","created_at":"2026-07-05T11:48:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"78834ddf1035ead892baebc2e747feb946d33853fe428dcddc9d1926d4e2b77e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-08-04T08:31:45Z","title_canon_sha256":"437cc2322696e2fdeca3414705dd46a3b14867b7d8a9e0f1e035b14217f4f245"},"schema_version":"1.0","source":{"id":"2508.02186","kind":"arxiv","version":1}},"canonical_sha256":"e18740e2bc5f8812607bc036945c46cdf59f4963b33b9ed356ed87ebda35c8a1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e18740e2bc5f8812607bc036945c46cdf59f4963b33b9ed356ed87ebda35c8a1","first_computed_at":"2026-07-05T11:48:09.901785Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:48:09.901785Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dmclMRxzJHaXhhOtoZqyHQd5T0KM+bvQk2lvBRSDIUtFW5tX9qNNmPYouGgb0ekcAKvYjzFv7pmVciitAmVXAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:48:09.902216Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.02186","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f8ac2d76f0ee624fa7a24d14bc872b5cf6745f000d0cbba1c66084fa8a53ef3b","sha256:c087b54c9efe5970cb802c492ed3cb49e74e96c0f49f1e2ec8e4679c0b365ebb"],"state_sha256":"1d67cf8859db2bef8bde6d83e51340fb655620699d07d1fff6b50d833bd2ace8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Pr6BR4SeK3xxHaGwvBZ8RDgeSkLHOOwHjfepasTQylJW9tz/LqXZes3Fsf7VXEFcMAI+1TvOplGcF3hMZIfKBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T17:40:52.368901Z","bundle_sha256":"f2c66fe63ce9f0535f9d9115e7cde03714db641a857ad7f979b6c5d7128d4c1a"}}