{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:BVZE2YXNDHB42FBYT4Y3OREEXT","short_pith_number":"pith:BVZE2YXN","canonical_record":{"source":{"id":"2604.25965","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2026-04-28T04:49:31Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"e4ea70ddfbef381a88ce2d327d0aef15c1cd9b7a2d394114de4403f486bc4e2b","abstract_canon_sha256":"5ce242ea5fc3205372b8a2c92350a11603b3c1e59435d8043210698f1d41f04c"},"schema_version":"1.0"},"canonical_sha256":"0d724d62ed19c3cd14389f31b74484bcea51fd167142374443070494fce026f9","source":{"kind":"arxiv","id":"2604.25965","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2604.25965","created_at":"2026-06-09T01:05:18Z"},{"alias_kind":"arxiv_version","alias_value":"2604.25965v2","created_at":"2026-06-09T01:05:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2604.25965","created_at":"2026-06-09T01:05:18Z"},{"alias_kind":"pith_short_12","alias_value":"BVZE2YXNDHB4","created_at":"2026-06-09T01:05:18Z"},{"alias_kind":"pith_short_16","alias_value":"BVZE2YXNDHB42FBY","created_at":"2026-06-09T01:05:18Z"},{"alias_kind":"pith_short_8","alias_value":"BVZE2YXN","created_at":"2026-06-09T01:05:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:BVZE2YXNDHB42FBYT4Y3OREEXT","target":"record","payload":{"canonical_record":{"source":{"id":"2604.25965","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2026-04-28T04:49:31Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"e4ea70ddfbef381a88ce2d327d0aef15c1cd9b7a2d394114de4403f486bc4e2b","abstract_canon_sha256":"5ce242ea5fc3205372b8a2c92350a11603b3c1e59435d8043210698f1d41f04c"},"schema_version":"1.0"},"canonical_sha256":"0d724d62ed19c3cd14389f31b74484bcea51fd167142374443070494fce026f9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-09T01:05:18.206612Z","signature_b64":"fyeKVxLwL/f2doWZZjVnVqbeVCZhhUCBclVxrAjm+nKbPEgyVZZiiSsP/hpu8YXEf0bpdP4LUGtvKcvM/h5MAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0d724d62ed19c3cd14389f31b74484bcea51fd167142374443070494fce026f9","last_reissued_at":"2026-06-09T01:05:18.206200Z","signature_status":"signed_v1","first_computed_at":"2026-06-09T01:05:18.206200Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2604.25965","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-09T01:05:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pTKrMy/2jn3oucLIzoN6EOsw+VG2Dt0p4DbnKf23yS6nRmbOcUqKpE+hTZsNx1XKCCslnxAbdTh9rhlS2JxiDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T16:34:34.632680Z"},"content_sha256":"e128564dab0d706232efedfc61084224f0d1670d666d4c43fcaaf747d3b6c4cf","schema_version":"1.0","event_id":"sha256:e128564dab0d706232efedfc61084224f0d1670d666d4c43fcaaf747d3b6c4cf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:BVZE2YXNDHB42FBYT4Y3OREEXT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Robustness of NTK Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"NTK neural networks achieve the minimax optimal rate for adversarial regression in Sobolev spaces when trained with gradient flow and early stopping.","cross_cats":["cs.LG"],"primary_cat":"stat.ML","authors_text":"Yuxuan Hou","submitted_at":"2026-04-28T04:49:31Z","abstract_excerpt":"Deep learning models are widely deployed in safety-critical domains, but remain vulnerable to adversarial attacks. In this paper, we study the adversarial robustness of NTK neural networks in the context of nonparametric regression. We establish minimax optimal rates for adversarial regression in Sobolev spaces and then show that NTK neural networks, trained via gradient flow with early stopping, can achieve this optimal rate. However, in the overfitting regime, we prove that the minimum norm interpolant is vulnerable to adversarial perturbations."},"claims":{"count":4,"items":[{"kind":"strongest_claim","text":"NTK neural networks, trained via gradient flow with early stopping, can achieve the minimax optimal rate for adversarial regression in Sobolev spaces.","source":"verdict.strongest_claim","status":"machine_extracted","claim_id":"C1","attestation":"unclaimed"},{"kind":"weakest_assumption","text":"The derivation assumes the standard nonparametric regression model with Sobolev smoothness and that the NTK training dynamics are exactly captured by the kernel gradient flow in the infinite-width limit.","source":"verdict.weakest_assumption","status":"machine_extracted","claim_id":"C2","attestation":"unclaimed"},{"kind":"one_line_summary","text":"NTK networks achieve minimax optimal adversarial regression rates in Sobolev spaces with early stopping, but minimum-norm interpolants are vulnerable.","source":"verdict.one_line_summary","status":"machine_extracted","claim_id":"C3","attestation":"unclaimed"},{"kind":"headline","text":"NTK neural networks achieve the minimax optimal rate for adversarial regression in Sobolev spaces when trained with gradient flow and early stopping.","source":"verdict.pith_extraction.headline","status":"machine_extracted","claim_id":"C4","attestation":"unclaimed"}],"snapshot_sha256":"6f311b26bd7d437bb2fcb6938d4bd15aaffa2885e6cb0ac702f7990c8103cda5"},"source":{"id":"2604.25965","kind":"arxiv","version":2},"verdict":{"id":"53784e5e-d9ef-4be2-9959-caca0d592deb","model_set":{"reader":"grok-4.3"},"created_at":"2026-05-07T15:04:08.926928Z","strongest_claim":"NTK neural networks, trained via gradient flow with early stopping, can achieve the minimax optimal rate for adversarial regression in Sobolev spaces.","one_line_summary":"NTK networks achieve minimax optimal adversarial regression rates in Sobolev spaces with early stopping, but minimum-norm interpolants are vulnerable.","pipeline_version":"pith-pipeline@v0.9.0","weakest_assumption":"The derivation assumes the standard nonparametric regression model with Sobolev smoothness and that the NTK training dynamics are exactly captured by the kernel gradient flow in the infinite-width limit.","pith_extraction_headline":"NTK neural networks achieve the minimax optimal rate for adversarial regression in Sobolev spaces when trained with gradient flow and early stopping."},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2604.25965/integrity.json","findings":[],"available":true,"detectors_run":[{"name":"ai_meta_artifact","ran_at":"2026-05-21T05:34:56.261537Z","status":"completed","version":"1.0.0","findings_count":0},{"name":"doi_compliance","ran_at":"2026-05-19T21:23:03.148861Z","status":"completed","version":"1.0.0","findings_count":0}],"snapshot_sha256":"7ebfe88644ea8b4607823c4413512d0d054f8f091a976106b03a600bd1574c70"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":"53784e5e-d9ef-4be2-9959-caca0d592deb"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-09T01:05:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"abyRDJrL3Fkw0aNK1uckPavXOFQrbUEqm5kQ/wBcdGoYwSWbPRiRt+ik5Dtu+dm+m94pnsJDNwKFRxrf4jswDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T16:34:34.633157Z"},"content_sha256":"f0029fef18e1c983da99e10c67470c64892b772b2afd387405e4fce0f82aa9c2","schema_version":"1.0","event_id":"sha256:f0029fef18e1c983da99e10c67470c64892b772b2afd387405e4fce0f82aa9c2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BVZE2YXNDHB42FBYT4Y3OREEXT/bundle.json","state_url":"https://pith.science/pith/BVZE2YXNDHB42FBYT4Y3OREEXT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BVZE2YXNDHB42FBYT4Y3OREEXT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-10T16:34:34Z","links":{"resolver":"https://pith.science/pith/BVZE2YXNDHB42FBYT4Y3OREEXT","bundle":"https://pith.science/pith/BVZE2YXNDHB42FBYT4Y3OREEXT/bundle.json","state":"https://pith.science/pith/BVZE2YXNDHB42FBYT4Y3OREEXT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BVZE2YXNDHB42FBYT4Y3OREEXT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:BVZE2YXNDHB42FBYT4Y3OREEXT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5ce242ea5fc3205372b8a2c92350a11603b3c1e59435d8043210698f1d41f04c","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2026-04-28T04:49:31Z","title_canon_sha256":"e4ea70ddfbef381a88ce2d327d0aef15c1cd9b7a2d394114de4403f486bc4e2b"},"schema_version":"1.0","source":{"id":"2604.25965","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2604.25965","created_at":"2026-06-09T01:05:18Z"},{"alias_kind":"arxiv_version","alias_value":"2604.25965v2","created_at":"2026-06-09T01:05:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2604.25965","created_at":"2026-06-09T01:05:18Z"},{"alias_kind":"pith_short_12","alias_value":"BVZE2YXNDHB4","created_at":"2026-06-09T01:05:18Z"},{"alias_kind":"pith_short_16","alias_value":"BVZE2YXNDHB42FBY","created_at":"2026-06-09T01:05:18Z"},{"alias_kind":"pith_short_8","alias_value":"BVZE2YXN","created_at":"2026-06-09T01:05:18Z"}],"graph_snapshots":[{"event_id":"sha256:f0029fef18e1c983da99e10c67470c64892b772b2afd387405e4fce0f82aa9c2","target":"graph","created_at":"2026-06-09T01:05:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":4,"items":[{"attestation":"unclaimed","claim_id":"C1","kind":"strongest_claim","source":"verdict.strongest_claim","status":"machine_extracted","text":"NTK neural networks, trained via gradient flow with early stopping, can achieve the minimax optimal rate for adversarial regression in Sobolev spaces."},{"attestation":"unclaimed","claim_id":"C2","kind":"weakest_assumption","source":"verdict.weakest_assumption","status":"machine_extracted","text":"The derivation assumes the standard nonparametric regression model with Sobolev smoothness and that the NTK training dynamics are exactly captured by the kernel gradient flow in the infinite-width limit."},{"attestation":"unclaimed","claim_id":"C3","kind":"one_line_summary","source":"verdict.one_line_summary","status":"machine_extracted","text":"NTK networks achieve minimax optimal adversarial regression rates in Sobolev spaces with early stopping, but minimum-norm interpolants are vulnerable."},{"attestation":"unclaimed","claim_id":"C4","kind":"headline","source":"verdict.pith_extraction.headline","status":"machine_extracted","text":"NTK neural networks achieve the minimax optimal rate for adversarial regression in Sobolev spaces when trained with gradient flow and early stopping."}],"snapshot_sha256":"6f311b26bd7d437bb2fcb6938d4bd15aaffa2885e6cb0ac702f7990c8103cda5"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[{"findings_count":0,"name":"ai_meta_artifact","ran_at":"2026-05-21T05:34:56.261537Z","status":"completed","version":"1.0.0"},{"findings_count":0,"name":"doi_compliance","ran_at":"2026-05-19T21:23:03.148861Z","status":"completed","version":"1.0.0"}],"endpoint":"/pith/2604.25965/integrity.json","findings":[],"snapshot_sha256":"7ebfe88644ea8b4607823c4413512d0d054f8f091a976106b03a600bd1574c70","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep learning models are widely deployed in safety-critical domains, but remain vulnerable to adversarial attacks. In this paper, we study the adversarial robustness of NTK neural networks in the context of nonparametric regression. We establish minimax optimal rates for adversarial regression in Sobolev spaces and then show that NTK neural networks, trained via gradient flow with early stopping, can achieve this optimal rate. However, in the overfitting regime, we prove that the minimum norm interpolant is vulnerable to adversarial perturbations.","authors_text":"Yuxuan Hou","cross_cats":["cs.LG"],"headline":"NTK neural networks achieve the minimax optimal rate for adversarial regression in Sobolev spaces when trained with gradient flow and early stopping.","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2026-04-28T04:49:31Z","title":"Adversarial Robustness of NTK Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2604.25965","kind":"arxiv","version":2},"verdict":{"created_at":"2026-05-07T15:04:08.926928Z","id":"53784e5e-d9ef-4be2-9959-caca0d592deb","model_set":{"reader":"grok-4.3"},"one_line_summary":"NTK networks achieve minimax optimal adversarial regression rates in Sobolev spaces with early stopping, but minimum-norm interpolants are vulnerable.","pipeline_version":"pith-pipeline@v0.9.0","pith_extraction_headline":"NTK neural networks achieve the minimax optimal rate for adversarial regression in Sobolev spaces when trained with gradient flow and early stopping.","strongest_claim":"NTK neural networks, trained via gradient flow with early stopping, can achieve the minimax optimal rate for adversarial regression in Sobolev spaces.","weakest_assumption":"The derivation assumes the standard nonparametric regression model with Sobolev smoothness and that the NTK training dynamics are exactly captured by the kernel gradient flow in the infinite-width limit."}},"verdict_id":"53784e5e-d9ef-4be2-9959-caca0d592deb"}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e128564dab0d706232efedfc61084224f0d1670d666d4c43fcaaf747d3b6c4cf","target":"record","created_at":"2026-06-09T01:05:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5ce242ea5fc3205372b8a2c92350a11603b3c1e59435d8043210698f1d41f04c","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2026-04-28T04:49:31Z","title_canon_sha256":"e4ea70ddfbef381a88ce2d327d0aef15c1cd9b7a2d394114de4403f486bc4e2b"},"schema_version":"1.0","source":{"id":"2604.25965","kind":"arxiv","version":2}},"canonical_sha256":"0d724d62ed19c3cd14389f31b74484bcea51fd167142374443070494fce026f9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0d724d62ed19c3cd14389f31b74484bcea51fd167142374443070494fce026f9","first_computed_at":"2026-06-09T01:05:18.206200Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-09T01:05:18.206200Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fyeKVxLwL/f2doWZZjVnVqbeVCZhhUCBclVxrAjm+nKbPEgyVZZiiSsP/hpu8YXEf0bpdP4LUGtvKcvM/h5MAw==","signature_status":"signed_v1","signed_at":"2026-06-09T01:05:18.206612Z","signed_message":"canonical_sha256_bytes"},"source_id":"2604.25965","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e128564dab0d706232efedfc61084224f0d1670d666d4c43fcaaf747d3b6c4cf","sha256:f0029fef18e1c983da99e10c67470c64892b772b2afd387405e4fce0f82aa9c2"],"state_sha256":"b91f70652d650bd08c732a0ef044d27f7cbc8eafb0f5ab4760e4764c6567c464"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wXbw5+CkYuewmLmYp4VbU3vuzo99O9X2toBnW4QANjwojv9eFccotWBaDbe9DE0UPninvL5RCF4okmcVLLTHDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-10T16:34:34.636007Z","bundle_sha256":"37d1927df869ce57d1b50307de271968b6d1700c05485ec8682e6f4fcb1d207d"}}