{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:7A3HRKI5JJLOHEBJAO65DT5VQS","short_pith_number":"pith:7A3HRKI5","canonical_record":{"source":{"id":"2108.11673","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-08-26T09:42:36Z","cross_cats_sorted":[],"title_canon_sha256":"b30ff92c5265b154ccc9f8a749cd3a181d58ac2894bf36886995860a747d21be","abstract_canon_sha256":"e474a4ab9e2aa2be1c097713d6cbfd6e37458e7141ee4ebae6b63f4c0148c500"},"schema_version":"1.0"},"canonical_sha256":"f83678a91d4a56e3902903bdd1cfb58487b1abeff0a14481815e091fde463830","source":{"kind":"arxiv","id":"2108.11673","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.11673","created_at":"2026-07-05T05:50:03Z"},{"alias_kind":"arxiv_version","alias_value":"2108.11673v3","created_at":"2026-07-05T05:50:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.11673","created_at":"2026-07-05T05:50:03Z"},{"alias_kind":"pith_short_12","alias_value":"7A3HRKI5JJLO","created_at":"2026-07-05T05:50:03Z"},{"alias_kind":"pith_short_16","alias_value":"7A3HRKI5JJLOHEBJ","created_at":"2026-07-05T05:50:03Z"},{"alias_kind":"pith_short_8","alias_value":"7A3HRKI5","created_at":"2026-07-05T05:50:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:7A3HRKI5JJLOHEBJAO65DT5VQS","target":"record","payload":{"canonical_record":{"source":{"id":"2108.11673","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-08-26T09:42:36Z","cross_cats_sorted":[],"title_canon_sha256":"b30ff92c5265b154ccc9f8a749cd3a181d58ac2894bf36886995860a747d21be","abstract_canon_sha256":"e474a4ab9e2aa2be1c097713d6cbfd6e37458e7141ee4ebae6b63f4c0148c500"},"schema_version":"1.0"},"canonical_sha256":"f83678a91d4a56e3902903bdd1cfb58487b1abeff0a14481815e091fde463830","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:50:03.652817Z","signature_b64":"WP1O5/lhujorZFfiebZu0tX+0QVHgvz20/88uHdbpkgWAacMGEYO+/E2lx2iaSpeF8rO3t5uMncAtHDKOW84Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f83678a91d4a56e3902903bdd1cfb58487b1abeff0a14481815e091fde463830","last_reissued_at":"2026-07-05T05:50:03.652311Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:50:03.652311Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2108.11673","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:50:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AMIgttJPFqxATLILdrxGOcdOV6HuQP/pJtnqHoKabNXIQ/QY7dOD3nHnXT3DU2UxdOdEe5ajpFnBWO9MPIu8AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T00:44:48.889882Z"},"content_sha256":"b047f503316cee27aadca2cd20380c2e74d4d5837488f85c2fe8b66ee87faf08","schema_version":"1.0","event_id":"sha256:b047f503316cee27aadca2cd20380c2e74d4d5837488f85c2fe8b66ee87faf08"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:7A3HRKI5JJLOHEBJAO65DT5VQS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Why Adversarial Reprogramming Works, When It Fails, and How to Tell the Difference","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Ambra Demontis, Battista Biggio, Fabio Roli, Maura Pintor, Xiaoyi Feng, Xiaoyue Jiang, Yang Zheng, Zhaoqiang Xia","submitted_at":"2021-08-26T09:42:36Z","abstract_excerpt":"Adversarial reprogramming allows repurposing a machine-learning model to perform a different task. For example, a model trained to recognize animals can be reprogrammed to recognize digits by embedding an adversarial program in the digit images provided as input. Recent work has shown that adversarial reprogramming may not only be used to abuse machine-learning models provided as a service, but also beneficially, to improve transfer learning when training data is scarce. However, the factors affecting its success are still largely unexplained. In this work, we develop a first-order linear mode"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.11673","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2108.11673/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:50:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B6eoPH5cG1ttvTloD8TI8kPrAUT6vVu7i4rhS1MhJJPQKCgenpJj+Cf6dhyFrUl75J1zIIypYzdgZx+yiKq2AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T00:44:48.890379Z"},"content_sha256":"9a2d941f7487fdeb5888de11a6ec967892fdcef70b7b04e196458a8bdef88a47","schema_version":"1.0","event_id":"sha256:9a2d941f7487fdeb5888de11a6ec967892fdcef70b7b04e196458a8bdef88a47"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7A3HRKI5JJLOHEBJAO65DT5VQS/bundle.json","state_url":"https://pith.science/pith/7A3HRKI5JJLOHEBJAO65DT5VQS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7A3HRKI5JJLOHEBJAO65DT5VQS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T00:44:48Z","links":{"resolver":"https://pith.science/pith/7A3HRKI5JJLOHEBJAO65DT5VQS","bundle":"https://pith.science/pith/7A3HRKI5JJLOHEBJAO65DT5VQS/bundle.json","state":"https://pith.science/pith/7A3HRKI5JJLOHEBJAO65DT5VQS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7A3HRKI5JJLOHEBJAO65DT5VQS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:7A3HRKI5JJLOHEBJAO65DT5VQS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e474a4ab9e2aa2be1c097713d6cbfd6e37458e7141ee4ebae6b63f4c0148c500","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-08-26T09:42:36Z","title_canon_sha256":"b30ff92c5265b154ccc9f8a749cd3a181d58ac2894bf36886995860a747d21be"},"schema_version":"1.0","source":{"id":"2108.11673","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.11673","created_at":"2026-07-05T05:50:03Z"},{"alias_kind":"arxiv_version","alias_value":"2108.11673v3","created_at":"2026-07-05T05:50:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.11673","created_at":"2026-07-05T05:50:03Z"},{"alias_kind":"pith_short_12","alias_value":"7A3HRKI5JJLO","created_at":"2026-07-05T05:50:03Z"},{"alias_kind":"pith_short_16","alias_value":"7A3HRKI5JJLOHEBJ","created_at":"2026-07-05T05:50:03Z"},{"alias_kind":"pith_short_8","alias_value":"7A3HRKI5","created_at":"2026-07-05T05:50:03Z"}],"graph_snapshots":[{"event_id":"sha256:9a2d941f7487fdeb5888de11a6ec967892fdcef70b7b04e196458a8bdef88a47","target":"graph","created_at":"2026-07-05T05:50:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2108.11673/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial reprogramming allows repurposing a machine-learning model to perform a different task. For example, a model trained to recognize animals can be reprogrammed to recognize digits by embedding an adversarial program in the digit images provided as input. Recent work has shown that adversarial reprogramming may not only be used to abuse machine-learning models provided as a service, but also beneficially, to improve transfer learning when training data is scarce. However, the factors affecting its success are still largely unexplained. In this work, we develop a first-order linear mode","authors_text":"Ambra Demontis, Battista Biggio, Fabio Roli, Maura Pintor, Xiaoyi Feng, Xiaoyue Jiang, Yang Zheng, Zhaoqiang Xia","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-08-26T09:42:36Z","title":"Why Adversarial Reprogramming Works, When It Fails, and How to Tell the Difference"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.11673","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b047f503316cee27aadca2cd20380c2e74d4d5837488f85c2fe8b66ee87faf08","target":"record","created_at":"2026-07-05T05:50:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e474a4ab9e2aa2be1c097713d6cbfd6e37458e7141ee4ebae6b63f4c0148c500","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-08-26T09:42:36Z","title_canon_sha256":"b30ff92c5265b154ccc9f8a749cd3a181d58ac2894bf36886995860a747d21be"},"schema_version":"1.0","source":{"id":"2108.11673","kind":"arxiv","version":3}},"canonical_sha256":"f83678a91d4a56e3902903bdd1cfb58487b1abeff0a14481815e091fde463830","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f83678a91d4a56e3902903bdd1cfb58487b1abeff0a14481815e091fde463830","first_computed_at":"2026-07-05T05:50:03.652311Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:50:03.652311Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WP1O5/lhujorZFfiebZu0tX+0QVHgvz20/88uHdbpkgWAacMGEYO+/E2lx2iaSpeF8rO3t5uMncAtHDKOW84Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:50:03.652817Z","signed_message":"canonical_sha256_bytes"},"source_id":"2108.11673","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b047f503316cee27aadca2cd20380c2e74d4d5837488f85c2fe8b66ee87faf08","sha256:9a2d941f7487fdeb5888de11a6ec967892fdcef70b7b04e196458a8bdef88a47"],"state_sha256":"09692884e4ccb71f0030a8f6fdceba8b33e86d433621d8289afe6b1cc89b7315"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HIjusUS0rn7iBefK+l+OvUNSKz+ry1wRG6gyvduI78llMVO4out1Qi5FFjuqwMaTIOHw9PyGMLdPzyYTZMNbCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T00:44:48.894394Z","bundle_sha256":"f42458b5ead4b920d90e11744847fae92ebc2f5f2a53a91064e68e9b551c1045"}}