{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:73IV3I3EONHS5ESUDCZRUFOIGE","short_pith_number":"pith:73IV3I3E","canonical_record":{"source":{"id":"2103.09947","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-17T23:30:00Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"3be06aabfed3ad23e3a08194e4a98eed4e9d2ffaccc7753023030aba000400e0","abstract_canon_sha256":"f9ae2bc391ffd94939500ec6f243d14d622fad1c0915993ddaa0e1f9d7018802"},"schema_version":"1.0"},"canonical_sha256":"fed15da364734f2e925418b31a15c8311a6683991d9be206106299e5f6ece41e","source":{"kind":"arxiv","id":"2103.09947","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.09947","created_at":"2026-07-05T02:49:00Z"},{"alias_kind":"arxiv_version","alias_value":"2103.09947v2","created_at":"2026-07-05T02:49:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.09947","created_at":"2026-07-05T02:49:00Z"},{"alias_kind":"pith_short_12","alias_value":"73IV3I3EONHS","created_at":"2026-07-05T02:49:00Z"},{"alias_kind":"pith_short_16","alias_value":"73IV3I3EONHS5ESU","created_at":"2026-07-05T02:49:00Z"},{"alias_kind":"pith_short_8","alias_value":"73IV3I3E","created_at":"2026-07-05T02:49:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:73IV3I3EONHS5ESUDCZRUFOIGE","target":"record","payload":{"canonical_record":{"source":{"id":"2103.09947","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-17T23:30:00Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"3be06aabfed3ad23e3a08194e4a98eed4e9d2ffaccc7753023030aba000400e0","abstract_canon_sha256":"f9ae2bc391ffd94939500ec6f243d14d622fad1c0915993ddaa0e1f9d7018802"},"schema_version":"1.0"},"canonical_sha256":"fed15da364734f2e925418b31a15c8311a6683991d9be206106299e5f6ece41e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:49:00.226910Z","signature_b64":"p78Ojt5XxrKuuNdl57lKp42ZKUQ7PXX+S+vqa4E4chgSLF0vTRzZtTL2B9Zpt3yAdfmNckLL1g901StABFgCCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fed15da364734f2e925418b31a15c8311a6683991d9be206106299e5f6ece41e","last_reissued_at":"2026-07-05T02:49:00.226415Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:49:00.226415Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2103.09947","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:49:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"soGlCR0ffpIn+fbmq6TTpDGbrUhAyyYT4rYp0tkSE1JSkQM2eNCq4ECWDP70pIVaEC2OfsoU4zNN5GBGtnT6Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T10:32:22.934312Z"},"content_sha256":"77efff3b09da22456cbe88cad8799ff5b713a641d42f98888a770e40cf3fbd7b","schema_version":"1.0","event_id":"sha256:77efff3b09da22456cbe88cad8799ff5b713a641d42f98888a770e40cf3fbd7b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:73IV3I3EONHS5ESUDCZRUFOIGE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Understanding Generalization in Adversarial Training via the Bias-Variance Decomposition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Edgar Dobriban, Jacob Steinhardt, Yaodong Yu, Yi Ma, Zitong Yang","submitted_at":"2021-03-17T23:30:00Z","abstract_excerpt":"Adversarially trained models exhibit a large generalization gap: they can interpolate the training set even for large perturbation radii, but at the cost of large test error on clean samples. To investigate this gap, we decompose the test risk into its bias and variance components and study their behavior as a function of adversarial training perturbation radii ($\\varepsilon$). We find that the bias increases monotonically with $\\varepsilon$ and is the dominant term in the risk. Meanwhile, the variance is unimodal as a function of $\\varepsilon$, peaking near the interpolation threshold for the"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.09947","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2103.09947/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:49:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E/NwiGWVI8arY67n/D/f9eJUwQOK6NqMezWmspprFC1nKgxLsHZVGSL21D1r0J2x+mIdGveuaHtNtwyPG0UUBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T10:32:22.935161Z"},"content_sha256":"6f754eac0b23b28c6c8afd04d7c80f54d4d55d782121beb66d002e44a6d5c477","schema_version":"1.0","event_id":"sha256:6f754eac0b23b28c6c8afd04d7c80f54d4d55d782121beb66d002e44a6d5c477"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/73IV3I3EONHS5ESUDCZRUFOIGE/bundle.json","state_url":"https://pith.science/pith/73IV3I3EONHS5ESUDCZRUFOIGE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/73IV3I3EONHS5ESUDCZRUFOIGE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T10:32:22Z","links":{"resolver":"https://pith.science/pith/73IV3I3EONHS5ESUDCZRUFOIGE","bundle":"https://pith.science/pith/73IV3I3EONHS5ESUDCZRUFOIGE/bundle.json","state":"https://pith.science/pith/73IV3I3EONHS5ESUDCZRUFOIGE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/73IV3I3EONHS5ESUDCZRUFOIGE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:73IV3I3EONHS5ESUDCZRUFOIGE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f9ae2bc391ffd94939500ec6f243d14d622fad1c0915993ddaa0e1f9d7018802","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-17T23:30:00Z","title_canon_sha256":"3be06aabfed3ad23e3a08194e4a98eed4e9d2ffaccc7753023030aba000400e0"},"schema_version":"1.0","source":{"id":"2103.09947","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.09947","created_at":"2026-07-05T02:49:00Z"},{"alias_kind":"arxiv_version","alias_value":"2103.09947v2","created_at":"2026-07-05T02:49:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.09947","created_at":"2026-07-05T02:49:00Z"},{"alias_kind":"pith_short_12","alias_value":"73IV3I3EONHS","created_at":"2026-07-05T02:49:00Z"},{"alias_kind":"pith_short_16","alias_value":"73IV3I3EONHS5ESU","created_at":"2026-07-05T02:49:00Z"},{"alias_kind":"pith_short_8","alias_value":"73IV3I3E","created_at":"2026-07-05T02:49:00Z"}],"graph_snapshots":[{"event_id":"sha256:6f754eac0b23b28c6c8afd04d7c80f54d4d55d782121beb66d002e44a6d5c477","target":"graph","created_at":"2026-07-05T02:49:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.09947/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarially trained models exhibit a large generalization gap: they can interpolate the training set even for large perturbation radii, but at the cost of large test error on clean samples. To investigate this gap, we decompose the test risk into its bias and variance components and study their behavior as a function of adversarial training perturbation radii ($\\varepsilon$). We find that the bias increases monotonically with $\\varepsilon$ and is the dominant term in the risk. Meanwhile, the variance is unimodal as a function of $\\varepsilon$, peaking near the interpolation threshold for the","authors_text":"Edgar Dobriban, Jacob Steinhardt, Yaodong Yu, Yi Ma, Zitong Yang","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-17T23:30:00Z","title":"Understanding Generalization in Adversarial Training via the Bias-Variance Decomposition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.09947","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:77efff3b09da22456cbe88cad8799ff5b713a641d42f98888a770e40cf3fbd7b","target":"record","created_at":"2026-07-05T02:49:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f9ae2bc391ffd94939500ec6f243d14d622fad1c0915993ddaa0e1f9d7018802","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-17T23:30:00Z","title_canon_sha256":"3be06aabfed3ad23e3a08194e4a98eed4e9d2ffaccc7753023030aba000400e0"},"schema_version":"1.0","source":{"id":"2103.09947","kind":"arxiv","version":2}},"canonical_sha256":"fed15da364734f2e925418b31a15c8311a6683991d9be206106299e5f6ece41e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fed15da364734f2e925418b31a15c8311a6683991d9be206106299e5f6ece41e","first_computed_at":"2026-07-05T02:49:00.226415Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:49:00.226415Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"p78Ojt5XxrKuuNdl57lKp42ZKUQ7PXX+S+vqa4E4chgSLF0vTRzZtTL2B9Zpt3yAdfmNckLL1g901StABFgCCg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:49:00.226910Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.09947","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:77efff3b09da22456cbe88cad8799ff5b713a641d42f98888a770e40cf3fbd7b","sha256:6f754eac0b23b28c6c8afd04d7c80f54d4d55d782121beb66d002e44a6d5c477"],"state_sha256":"946fd5ed736ac58cf72b13f06153cf07e1b9ae7625f222dfea932fb27b36269a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LTvffucdvVrUlTRSPZCPNOmENP3L8Wng3byzY/6OZfPDJXGFWXFuxUruZiv4qB5zm1vyy58Gh3bwZjM5aFGJAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T10:32:22.976113Z","bundle_sha256":"98bc708c83f9460bb51a221307410c4a29ea5bf79751c73ffcbe7bf153b70c2e"}}