{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:5UPFZ5E2OP7WZRMJFHY237AZIF","short_pith_number":"pith:5UPFZ5E2","canonical_record":{"source":{"id":"2211.14788","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"astro-ph.CO","submitted_at":"2022-11-27T10:59:16Z","cross_cats_sorted":[],"title_canon_sha256":"24572bbad466f949190aba58249d4b0513540d2abfd3501afba9a21b73c28913","abstract_canon_sha256":"d2fb8c14d1ae332d66224c25b6311ae2d0e4c469a3c9f306f8cee86064d6cdae"},"schema_version":"1.0"},"canonical_sha256":"ed1e5cf49a73ff6cc58929f1adfc19414fab38c3c8bdc3e96945caa33669e047","source":{"kind":"arxiv","id":"2211.14788","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.14788","created_at":"2026-07-05T05:19:43Z"},{"alias_kind":"arxiv_version","alias_value":"2211.14788v1","created_at":"2026-07-05T05:19:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.14788","created_at":"2026-07-05T05:19:43Z"},{"alias_kind":"pith_short_12","alias_value":"5UPFZ5E2OP7W","created_at":"2026-07-05T05:19:43Z"},{"alias_kind":"pith_short_16","alias_value":"5UPFZ5E2OP7WZRMJ","created_at":"2026-07-05T05:19:43Z"},{"alias_kind":"pith_short_8","alias_value":"5UPFZ5E2","created_at":"2026-07-05T05:19:43Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:5UPFZ5E2OP7WZRMJFHY237AZIF","target":"record","payload":{"canonical_record":{"source":{"id":"2211.14788","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"astro-ph.CO","submitted_at":"2022-11-27T10:59:16Z","cross_cats_sorted":[],"title_canon_sha256":"24572bbad466f949190aba58249d4b0513540d2abfd3501afba9a21b73c28913","abstract_canon_sha256":"d2fb8c14d1ae332d66224c25b6311ae2d0e4c469a3c9f306f8cee86064d6cdae"},"schema_version":"1.0"},"canonical_sha256":"ed1e5cf49a73ff6cc58929f1adfc19414fab38c3c8bdc3e96945caa33669e047","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:19:43.851654Z","signature_b64":"0ymCawKm8sV4XdY9KsGCDyGzfKetVkWOT+53i7ZrwKQp14tzt2/dpUZP6d5EPtS7QZ1+395UpO3z2D1sqSTGAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ed1e5cf49a73ff6cc58929f1adfc19414fab38c3c8bdc3e96945caa33669e047","last_reissued_at":"2026-07-05T05:19:43.851196Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:19:43.851196Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.14788","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:19:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sEFH+gr5xyBUp2Vyb6p5S14EulgR89XddVzGy9el650iWMuykuI99wUYVtUM6QQaSzR0WPRme+HMeD/t5QzLCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T12:37:15.062537Z"},"content_sha256":"b58c72de01c8d021bf01450b6942c2f0be62723b3a828a89b64304ce37ef9da0","schema_version":"1.0","event_id":"sha256:b58c72de01c8d021bf01450b6942c2f0be62723b3a828a89b64304ce37ef9da0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:5UPFZ5E2OP7WZRMJFHY237AZIF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Plausible Adversarial Attacks on Direct Parameter Inference Models in Astrophysics","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"astro-ph.CO","authors_text":"Benjamin Horowitz, Peter Melchior","submitted_at":"2022-11-27T10:59:16Z","abstract_excerpt":"In this abstract we explore the possibility of introducing biases in physical parameter inference models from adversarial-type attacks. In particular, we inject small amplitude systematics into inputs to a mixture density networks tasked with inferring cosmological parameters from observed data. The systematics are constructed analogously to white-box adversarial attacks. We find that the analysis network can be tricked into spurious detection of new physics in cases where standard cosmological estimators would be insensitive. This calls into question the robustness of such networks and their "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.14788","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.14788/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:19:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PiOmvBHul3p00DQ3n1J6vvr3epPVaZMxrwnbxYSmlH+KiK57QaKitYj4TGSGUQMiDMny9c25zz2nzTU+THeKCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T12:37:15.063498Z"},"content_sha256":"ddbfc5f7fc0f38e55b2fd615078d4920ee0499eb1df2e6465557e0cdc5aaff80","schema_version":"1.0","event_id":"sha256:ddbfc5f7fc0f38e55b2fd615078d4920ee0499eb1df2e6465557e0cdc5aaff80"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5UPFZ5E2OP7WZRMJFHY237AZIF/bundle.json","state_url":"https://pith.science/pith/5UPFZ5E2OP7WZRMJFHY237AZIF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5UPFZ5E2OP7WZRMJFHY237AZIF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T12:37:15Z","links":{"resolver":"https://pith.science/pith/5UPFZ5E2OP7WZRMJFHY237AZIF","bundle":"https://pith.science/pith/5UPFZ5E2OP7WZRMJFHY237AZIF/bundle.json","state":"https://pith.science/pith/5UPFZ5E2OP7WZRMJFHY237AZIF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5UPFZ5E2OP7WZRMJFHY237AZIF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:5UPFZ5E2OP7WZRMJFHY237AZIF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d2fb8c14d1ae332d66224c25b6311ae2d0e4c469a3c9f306f8cee86064d6cdae","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"astro-ph.CO","submitted_at":"2022-11-27T10:59:16Z","title_canon_sha256":"24572bbad466f949190aba58249d4b0513540d2abfd3501afba9a21b73c28913"},"schema_version":"1.0","source":{"id":"2211.14788","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.14788","created_at":"2026-07-05T05:19:43Z"},{"alias_kind":"arxiv_version","alias_value":"2211.14788v1","created_at":"2026-07-05T05:19:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.14788","created_at":"2026-07-05T05:19:43Z"},{"alias_kind":"pith_short_12","alias_value":"5UPFZ5E2OP7W","created_at":"2026-07-05T05:19:43Z"},{"alias_kind":"pith_short_16","alias_value":"5UPFZ5E2OP7WZRMJ","created_at":"2026-07-05T05:19:43Z"},{"alias_kind":"pith_short_8","alias_value":"5UPFZ5E2","created_at":"2026-07-05T05:19:43Z"}],"graph_snapshots":[{"event_id":"sha256:ddbfc5f7fc0f38e55b2fd615078d4920ee0499eb1df2e6465557e0cdc5aaff80","target":"graph","created_at":"2026-07-05T05:19:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.14788/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this abstract we explore the possibility of introducing biases in physical parameter inference models from adversarial-type attacks. In particular, we inject small amplitude systematics into inputs to a mixture density networks tasked with inferring cosmological parameters from observed data. The systematics are constructed analogously to white-box adversarial attacks. We find that the analysis network can be tricked into spurious detection of new physics in cases where standard cosmological estimators would be insensitive. This calls into question the robustness of such networks and their ","authors_text":"Benjamin Horowitz, Peter Melchior","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"astro-ph.CO","submitted_at":"2022-11-27T10:59:16Z","title":"Plausible Adversarial Attacks on Direct Parameter Inference Models in Astrophysics"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.14788","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b58c72de01c8d021bf01450b6942c2f0be62723b3a828a89b64304ce37ef9da0","target":"record","created_at":"2026-07-05T05:19:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d2fb8c14d1ae332d66224c25b6311ae2d0e4c469a3c9f306f8cee86064d6cdae","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"astro-ph.CO","submitted_at":"2022-11-27T10:59:16Z","title_canon_sha256":"24572bbad466f949190aba58249d4b0513540d2abfd3501afba9a21b73c28913"},"schema_version":"1.0","source":{"id":"2211.14788","kind":"arxiv","version":1}},"canonical_sha256":"ed1e5cf49a73ff6cc58929f1adfc19414fab38c3c8bdc3e96945caa33669e047","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ed1e5cf49a73ff6cc58929f1adfc19414fab38c3c8bdc3e96945caa33669e047","first_computed_at":"2026-07-05T05:19:43.851196Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:19:43.851196Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0ymCawKm8sV4XdY9KsGCDyGzfKetVkWOT+53i7ZrwKQp14tzt2/dpUZP6d5EPtS7QZ1+395UpO3z2D1sqSTGAg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:19:43.851654Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.14788","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b58c72de01c8d021bf01450b6942c2f0be62723b3a828a89b64304ce37ef9da0","sha256:ddbfc5f7fc0f38e55b2fd615078d4920ee0499eb1df2e6465557e0cdc5aaff80"],"state_sha256":"69a6b7955f13df6b930dc860180120190f74abcefb303dc7715b5c0cb960e9d4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vQ0zKp9oGR440PBVNu/BdEQVHLeqQCgxVquEhxVOs/G6SygHyLowCCcliEa+rX+eiqToIB2M7/dpP7+nawYyBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T12:37:15.070243Z","bundle_sha256":"d2507c023a5ff5bfffbbaaf022cec9b156b44b39bc5f2182292aea08ae502557"}}