{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:BL2OHXS6ZDQFLIGWDBJ7VI4WN6","short_pith_number":"pith:BL2OHXS6","canonical_record":{"source":{"id":"2303.05246","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-09T13:33:36Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"709011104c13bd6324e1592050fc35f5bce0f94d852f712153f3730fe2fe3c87","abstract_canon_sha256":"59f97cba7d3cc34bf7446ef479facdd1fca180c21a857a5dec86e7e97c43932a"},"schema_version":"1.0"},"canonical_sha256":"0af4e3de5ec8e055a0d61853faa3966f88da8f7bfc03f94e4bad93de47ee18e2","source":{"kind":"arxiv","id":"2303.05246","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.05246","created_at":"2026-07-05T05:49:38Z"},{"alias_kind":"arxiv_version","alias_value":"2303.05246v1","created_at":"2026-07-05T05:49:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.05246","created_at":"2026-07-05T05:49:38Z"},{"alias_kind":"pith_short_12","alias_value":"BL2OHXS6ZDQF","created_at":"2026-07-05T05:49:38Z"},{"alias_kind":"pith_short_16","alias_value":"BL2OHXS6ZDQFLIGW","created_at":"2026-07-05T05:49:38Z"},{"alias_kind":"pith_short_8","alias_value":"BL2OHXS6","created_at":"2026-07-05T05:49:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:BL2OHXS6ZDQFLIGWDBJ7VI4WN6","target":"record","payload":{"canonical_record":{"source":{"id":"2303.05246","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-09T13:33:36Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"709011104c13bd6324e1592050fc35f5bce0f94d852f712153f3730fe2fe3c87","abstract_canon_sha256":"59f97cba7d3cc34bf7446ef479facdd1fca180c21a857a5dec86e7e97c43932a"},"schema_version":"1.0"},"canonical_sha256":"0af4e3de5ec8e055a0d61853faa3966f88da8f7bfc03f94e4bad93de47ee18e2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:49:38.762788Z","signature_b64":"CvrgITXkuw/rQI9TmsOTtG+EFt0TuslAub0TP3BDzkuvUNqKQ+5dF7SI0Tljkys1fAPTZ3X/5WPZsBe3VwAoDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0af4e3de5ec8e055a0d61853faa3966f88da8f7bfc03f94e4bad93de47ee18e2","last_reissued_at":"2026-07-05T05:49:38.762424Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:49:38.762424Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.05246","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:49:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eN+lbv9arrD33FqlmUVWHeck/3Atme0zb6y5C/UWrGgrBbt/wGDt7XcAN/g2g+Jy5YMnTJzCFL2Fz4KDP+GJDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T10:00:28.852293Z"},"content_sha256":"c62a9640f48d494752a76c44361dfd5ac483ad1e3895d3b876c590bed51e3fac","schema_version":"1.0","event_id":"sha256:c62a9640f48d494752a76c44361dfd5ac483ad1e3895d3b876c590bed51e3fac"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:BL2OHXS6ZDQFLIGWDBJ7VI4WN6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Efficient Certified Training and Robustness Verification of Neural ODEs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Marc Fischer, Mark Niklas M\\\"uller, Martin Vechev, Mustafa Zeqiri","submitted_at":"2023-03-09T13:33:36Z","abstract_excerpt":"Neural Ordinary Differential Equations (NODEs) are a novel neural architecture, built around initial value problems with learned dynamics which are solved during inference. Thought to be inherently more robust against adversarial perturbations, they were recently shown to be vulnerable to strong adversarial attacks, highlighting the need for formal guarantees. However, despite significant progress in robustness verification for standard feed-forward architectures, the verification of high dimensional NODEs remains an open problem. In this work, we address this challenge and propose GAINS, an a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.05246","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.05246/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:49:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tv3yyFpwdbU952Gfv/8VxDwGR4nhQbd+THkP5N8Wc4V/Z3/1tAXCk7MFGAiTsmHjlvbHrL4/rOtOAGkVnrzIAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T10:00:28.852691Z"},"content_sha256":"a8378c75a7c402785cb5a9270e86f5bca802329615656e9d4007fb1c5e71d00f","schema_version":"1.0","event_id":"sha256:a8378c75a7c402785cb5a9270e86f5bca802329615656e9d4007fb1c5e71d00f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BL2OHXS6ZDQFLIGWDBJ7VI4WN6/bundle.json","state_url":"https://pith.science/pith/BL2OHXS6ZDQFLIGWDBJ7VI4WN6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BL2OHXS6ZDQFLIGWDBJ7VI4WN6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T10:00:28Z","links":{"resolver":"https://pith.science/pith/BL2OHXS6ZDQFLIGWDBJ7VI4WN6","bundle":"https://pith.science/pith/BL2OHXS6ZDQFLIGWDBJ7VI4WN6/bundle.json","state":"https://pith.science/pith/BL2OHXS6ZDQFLIGWDBJ7VI4WN6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BL2OHXS6ZDQFLIGWDBJ7VI4WN6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:BL2OHXS6ZDQFLIGWDBJ7VI4WN6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"59f97cba7d3cc34bf7446ef479facdd1fca180c21a857a5dec86e7e97c43932a","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-09T13:33:36Z","title_canon_sha256":"709011104c13bd6324e1592050fc35f5bce0f94d852f712153f3730fe2fe3c87"},"schema_version":"1.0","source":{"id":"2303.05246","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.05246","created_at":"2026-07-05T05:49:38Z"},{"alias_kind":"arxiv_version","alias_value":"2303.05246v1","created_at":"2026-07-05T05:49:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.05246","created_at":"2026-07-05T05:49:38Z"},{"alias_kind":"pith_short_12","alias_value":"BL2OHXS6ZDQF","created_at":"2026-07-05T05:49:38Z"},{"alias_kind":"pith_short_16","alias_value":"BL2OHXS6ZDQFLIGW","created_at":"2026-07-05T05:49:38Z"},{"alias_kind":"pith_short_8","alias_value":"BL2OHXS6","created_at":"2026-07-05T05:49:38Z"}],"graph_snapshots":[{"event_id":"sha256:a8378c75a7c402785cb5a9270e86f5bca802329615656e9d4007fb1c5e71d00f","target":"graph","created_at":"2026-07-05T05:49:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.05246/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural Ordinary Differential Equations (NODEs) are a novel neural architecture, built around initial value problems with learned dynamics which are solved during inference. Thought to be inherently more robust against adversarial perturbations, they were recently shown to be vulnerable to strong adversarial attacks, highlighting the need for formal guarantees. However, despite significant progress in robustness verification for standard feed-forward architectures, the verification of high dimensional NODEs remains an open problem. In this work, we address this challenge and propose GAINS, an a","authors_text":"Marc Fischer, Mark Niklas M\\\"uller, Martin Vechev, Mustafa Zeqiri","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-09T13:33:36Z","title":"Efficient Certified Training and Robustness Verification of Neural ODEs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.05246","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c62a9640f48d494752a76c44361dfd5ac483ad1e3895d3b876c590bed51e3fac","target":"record","created_at":"2026-07-05T05:49:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"59f97cba7d3cc34bf7446ef479facdd1fca180c21a857a5dec86e7e97c43932a","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-03-09T13:33:36Z","title_canon_sha256":"709011104c13bd6324e1592050fc35f5bce0f94d852f712153f3730fe2fe3c87"},"schema_version":"1.0","source":{"id":"2303.05246","kind":"arxiv","version":1}},"canonical_sha256":"0af4e3de5ec8e055a0d61853faa3966f88da8f7bfc03f94e4bad93de47ee18e2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0af4e3de5ec8e055a0d61853faa3966f88da8f7bfc03f94e4bad93de47ee18e2","first_computed_at":"2026-07-05T05:49:38.762424Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:49:38.762424Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CvrgITXkuw/rQI9TmsOTtG+EFt0TuslAub0TP3BDzkuvUNqKQ+5dF7SI0Tljkys1fAPTZ3X/5WPZsBe3VwAoDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:49:38.762788Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.05246","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c62a9640f48d494752a76c44361dfd5ac483ad1e3895d3b876c590bed51e3fac","sha256:a8378c75a7c402785cb5a9270e86f5bca802329615656e9d4007fb1c5e71d00f"],"state_sha256":"aba01894f7fdc208cfe15ad84b643b5aedb40977a5fadf3d82cb9837f8253864"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8naEs0M7uFIJT4rOhAUrfiebsY5e7lt52gae4W1Yc8nrN/3CiDZ6Kq1F9TmGhF9Egm9KhCQ/U2EZBT35lJjkBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T10:00:28.854611Z","bundle_sha256":"d4e9e7ea85526bb5fed4938e534342ed9f82500e5e25a4884c259a0a22c9ff64"}}