{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:53GEV3CQ7TXXQEHVT5UWBW4FEK","short_pith_number":"pith:53GEV3CQ","canonical_record":{"source":{"id":"2002.03339","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-09T10:24:29Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"ec8cd80915108795d2e7bf360cdefe1c5a8ec105dfe7e888ac7929ba77f5248d","abstract_canon_sha256":"3c7d056290bdc46d62152837a9724f59f76b70b55d741959ca00135b212e3528"},"schema_version":"1.0"},"canonical_sha256":"eecc4aec50fcef7810f59f6960db8522acd1ed018a91d7818daa657967e9ce85","source":{"kind":"arxiv","id":"2002.03339","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.03339","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"arxiv_version","alias_value":"2002.03339v2","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.03339","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"pith_short_12","alias_value":"53GEV3CQ7TXX","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"pith_short_16","alias_value":"53GEV3CQ7TXXQEHV","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"pith_short_8","alias_value":"53GEV3CQ","created_at":"2026-07-05T07:44:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:53GEV3CQ7TXXQEHVT5UWBW4FEK","target":"record","payload":{"canonical_record":{"source":{"id":"2002.03339","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-09T10:24:29Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"ec8cd80915108795d2e7bf360cdefe1c5a8ec105dfe7e888ac7929ba77f5248d","abstract_canon_sha256":"3c7d056290bdc46d62152837a9724f59f76b70b55d741959ca00135b212e3528"},"schema_version":"1.0"},"canonical_sha256":"eecc4aec50fcef7810f59f6960db8522acd1ed018a91d7818daa657967e9ce85","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:44:14.904055Z","signature_b64":"mZljdNs6t9SURaeFvtFtTItU+YlY6w035GGm3WGDwvHIrYLWOlhrxuzM4TEnKjlbCZCtz6WUkA3lXz1LhRgJAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"eecc4aec50fcef7810f59f6960db8522acd1ed018a91d7818daa657967e9ce85","last_reissued_at":"2026-07-05T07:44:14.903512Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:44:14.903512Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2002.03339","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:44:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YV3B5CkZqnOdYwEXfxLRJdwQCsdYVs15MpYBrRMDOpo8VQ8eYsPiNlZIzufiEKLsOUtGY7WhPbIvXcDIGxRzBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:53:09.169130Z"},"content_sha256":"f3742727019ae586c98366ac9d4140315a37cf08447adbca8364a2ebc14d529d","schema_version":"1.0","event_id":"sha256:f3742727019ae586c98366ac9d4140315a37cf08447adbca8364a2ebc14d529d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:53GEV3CQ7TXXQEHVT5UWBW4FEK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Input Validation for Neural Networks via Runtime Local Robustness Verification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Antoine Mine, Jiangchao Liu, Ji Wang, Liqian Chen","submitted_at":"2020-02-09T10:24:29Z","abstract_excerpt":"Local robustness verification can verify that a neural network is robust wrt. any perturbation to a specific input within a certain distance. We call this distance Robustness Radius. We observe that the robustness radii of correctly classified inputs are much larger than that of misclassified inputs which include adversarial examples, especially those from strong adversarial attacks. Another observation is that the robustness radii of correctly classified inputs often follow a normal distribution. Based on these two observations, we propose to validate inputs for neural networks via runtime lo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.03339","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2002.03339/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:44:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oKemoIxhl7/z5xqXSW7fEZnNPMaieZwoqdROJcSw2yZPx4tNuXPa7UqhJdmA1n9EJdYggl9cujMJRThbT06xCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:53:09.169667Z"},"content_sha256":"d074e023b866c26b5189a8d76585127fe95121ceaf4bab12d1012e199e7e02c6","schema_version":"1.0","event_id":"sha256:d074e023b866c26b5189a8d76585127fe95121ceaf4bab12d1012e199e7e02c6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/53GEV3CQ7TXXQEHVT5UWBW4FEK/bundle.json","state_url":"https://pith.science/pith/53GEV3CQ7TXXQEHVT5UWBW4FEK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/53GEV3CQ7TXXQEHVT5UWBW4FEK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T05:53:09Z","links":{"resolver":"https://pith.science/pith/53GEV3CQ7TXXQEHVT5UWBW4FEK","bundle":"https://pith.science/pith/53GEV3CQ7TXXQEHVT5UWBW4FEK/bundle.json","state":"https://pith.science/pith/53GEV3CQ7TXXQEHVT5UWBW4FEK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/53GEV3CQ7TXXQEHVT5UWBW4FEK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:53GEV3CQ7TXXQEHVT5UWBW4FEK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3c7d056290bdc46d62152837a9724f59f76b70b55d741959ca00135b212e3528","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-09T10:24:29Z","title_canon_sha256":"ec8cd80915108795d2e7bf360cdefe1c5a8ec105dfe7e888ac7929ba77f5248d"},"schema_version":"1.0","source":{"id":"2002.03339","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.03339","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"arxiv_version","alias_value":"2002.03339v2","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.03339","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"pith_short_12","alias_value":"53GEV3CQ7TXX","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"pith_short_16","alias_value":"53GEV3CQ7TXXQEHV","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"pith_short_8","alias_value":"53GEV3CQ","created_at":"2026-07-05T07:44:14Z"}],"graph_snapshots":[{"event_id":"sha256:d074e023b866c26b5189a8d76585127fe95121ceaf4bab12d1012e199e7e02c6","target":"graph","created_at":"2026-07-05T07:44:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.03339/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Local robustness verification can verify that a neural network is robust wrt. any perturbation to a specific input within a certain distance. We call this distance Robustness Radius. We observe that the robustness radii of correctly classified inputs are much larger than that of misclassified inputs which include adversarial examples, especially those from strong adversarial attacks. Another observation is that the robustness radii of correctly classified inputs often follow a normal distribution. Based on these two observations, we propose to validate inputs for neural networks via runtime lo","authors_text":"Antoine Mine, Jiangchao Liu, Ji Wang, Liqian Chen","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-09T10:24:29Z","title":"Input Validation for Neural Networks via Runtime Local Robustness Verification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.03339","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f3742727019ae586c98366ac9d4140315a37cf08447adbca8364a2ebc14d529d","target":"record","created_at":"2026-07-05T07:44:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3c7d056290bdc46d62152837a9724f59f76b70b55d741959ca00135b212e3528","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-09T10:24:29Z","title_canon_sha256":"ec8cd80915108795d2e7bf360cdefe1c5a8ec105dfe7e888ac7929ba77f5248d"},"schema_version":"1.0","source":{"id":"2002.03339","kind":"arxiv","version":2}},"canonical_sha256":"eecc4aec50fcef7810f59f6960db8522acd1ed018a91d7818daa657967e9ce85","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"eecc4aec50fcef7810f59f6960db8522acd1ed018a91d7818daa657967e9ce85","first_computed_at":"2026-07-05T07:44:14.903512Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:44:14.903512Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mZljdNs6t9SURaeFvtFtTItU+YlY6w035GGm3WGDwvHIrYLWOlhrxuzM4TEnKjlbCZCtz6WUkA3lXz1LhRgJAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:44:14.904055Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.03339","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f3742727019ae586c98366ac9d4140315a37cf08447adbca8364a2ebc14d529d","sha256:d074e023b866c26b5189a8d76585127fe95121ceaf4bab12d1012e199e7e02c6"],"state_sha256":"47d2314de6e289ef6b9b72c8d95b2fa7485a981dc5e8e9afdb3b773c00c3ca02"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DCVxUyhYCU7dNPuYRCGc+IsleWCz57jjo9vQa2yBKd+Weq/QPjAv4T93v6/1CDC5wsI7oS49FHdScBYJag8JDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T05:53:09.174178Z","bundle_sha256":"d6e5b3abaaed24b7b475a7e59fb4f2670c23a1234bb53d9b2cc9d8f0d90bd122"}}