{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:C7OB352M5CEYST2SXF6EIHDEOT","short_pith_number":"pith:C7OB352M","canonical_record":{"source":{"id":"1912.10185","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2019-12-21T02:46:50Z","cross_cats_sorted":["cs.CR","cs.NE"],"title_canon_sha256":"7eb4eb00c5ffbeddbe03a1d27241847598547bde388c0423db8f2e00a550a1dd","abstract_canon_sha256":"e070fcae4f0caf55ba6d209dbe698c5ae237ef2c267cbdaaba5142c418db3788"},"schema_version":"1.0"},"canonical_sha256":"17dc1df74ce889894f52b97c441c6474d7842fd87f89609cc6171e46d00c7c4f","source":{"kind":"arxiv","id":"1912.10185","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1912.10185","created_at":"2026-07-05T00:37:09Z"},{"alias_kind":"arxiv_version","alias_value":"1912.10185v2","created_at":"2026-07-05T00:37:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1912.10185","created_at":"2026-07-05T00:37:09Z"},{"alias_kind":"pith_short_12","alias_value":"C7OB352M5CEY","created_at":"2026-07-05T00:37:09Z"},{"alias_kind":"pith_short_16","alias_value":"C7OB352M5CEYST2S","created_at":"2026-07-05T00:37:09Z"},{"alias_kind":"pith_short_8","alias_value":"C7OB352M","created_at":"2026-07-05T00:37:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:C7OB352M5CEYST2SXF6EIHDEOT","target":"record","payload":{"canonical_record":{"source":{"id":"1912.10185","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2019-12-21T02:46:50Z","cross_cats_sorted":["cs.CR","cs.NE"],"title_canon_sha256":"7eb4eb00c5ffbeddbe03a1d27241847598547bde388c0423db8f2e00a550a1dd","abstract_canon_sha256":"e070fcae4f0caf55ba6d209dbe698c5ae237ef2c267cbdaaba5142c418db3788"},"schema_version":"1.0"},"canonical_sha256":"17dc1df74ce889894f52b97c441c6474d7842fd87f89609cc6171e46d00c7c4f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:37:09.591202Z","signature_b64":"/+tOtM4VPPgvQ2vHGmav0G7Aa9xiCs8MeU0OVieGheDa8/F3PbFlRGaOHjKAIfqooyM6FixxnGBlnurqRxIkAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"17dc1df74ce889894f52b97c441c6474d7842fd87f89609cc6171e46d00c7c4f","last_reissued_at":"2026-07-05T00:37:09.590626Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:37:09.590626Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1912.10185","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:37:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"daLD0DXi9YEPUYiygdgjqOOE/ETZG1mh9CcCpOp3GWDxy8HB+ta0JhhOJudS1KAelmCOVj6lPTeg1RqwwfugDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T17:35:40.921770Z"},"content_sha256":"e7ec0d346702074fe5690aae2362052d827a50d183e6abb0530126ad6056488f","schema_version":"1.0","event_id":"sha256:e7ec0d346702074fe5690aae2362052d827a50d183e6abb0530126ad6056488f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:C7OB352M5CEYST2SXF6EIHDEOT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Jacobian Adversarially Regularized Networks for Robustness","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.NE"],"primary_cat":"cs.CV","authors_text":"Alvin Chan, Jie Fu, Yew Soon Ong, Yi Tay","submitted_at":"2019-12-21T02:46:50Z","abstract_excerpt":"Adversarial examples are crafted with imperceptible perturbations with the intent to fool neural networks. Against such attacks, adversarial training and its variants stand as the strongest defense to date. Previous studies have pointed out that robust models that have undergone adversarial training tend to produce more salient and interpretable Jacobian matrices than their non-robust counterparts. A natural question is whether a model trained with an objective to produce salient Jacobian can result in better robustness. This paper answers this question with affirmative empirical results. We p"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1912.10185","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1912.10185/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:37:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lc6c6X+TYf4V3JvQRuH6hHGC0OQ4dusfaMvB2ZlPJ6Q9Q+esx2yg1QG6BnyOTCgDtc60XNww/ZG4hSjRojJFCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T17:35:40.922398Z"},"content_sha256":"74fda8294df9c53f80c776a318163902cc90fd7e4f4f93ac9ae044c02e860ea4","schema_version":"1.0","event_id":"sha256:74fda8294df9c53f80c776a318163902cc90fd7e4f4f93ac9ae044c02e860ea4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/C7OB352M5CEYST2SXF6EIHDEOT/bundle.json","state_url":"https://pith.science/pith/C7OB352M5CEYST2SXF6EIHDEOT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/C7OB352M5CEYST2SXF6EIHDEOT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T17:35:40Z","links":{"resolver":"https://pith.science/pith/C7OB352M5CEYST2SXF6EIHDEOT","bundle":"https://pith.science/pith/C7OB352M5CEYST2SXF6EIHDEOT/bundle.json","state":"https://pith.science/pith/C7OB352M5CEYST2SXF6EIHDEOT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/C7OB352M5CEYST2SXF6EIHDEOT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:C7OB352M5CEYST2SXF6EIHDEOT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e070fcae4f0caf55ba6d209dbe698c5ae237ef2c267cbdaaba5142c418db3788","cross_cats_sorted":["cs.CR","cs.NE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2019-12-21T02:46:50Z","title_canon_sha256":"7eb4eb00c5ffbeddbe03a1d27241847598547bde388c0423db8f2e00a550a1dd"},"schema_version":"1.0","source":{"id":"1912.10185","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1912.10185","created_at":"2026-07-05T00:37:09Z"},{"alias_kind":"arxiv_version","alias_value":"1912.10185v2","created_at":"2026-07-05T00:37:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1912.10185","created_at":"2026-07-05T00:37:09Z"},{"alias_kind":"pith_short_12","alias_value":"C7OB352M5CEY","created_at":"2026-07-05T00:37:09Z"},{"alias_kind":"pith_short_16","alias_value":"C7OB352M5CEYST2S","created_at":"2026-07-05T00:37:09Z"},{"alias_kind":"pith_short_8","alias_value":"C7OB352M","created_at":"2026-07-05T00:37:09Z"}],"graph_snapshots":[{"event_id":"sha256:74fda8294df9c53f80c776a318163902cc90fd7e4f4f93ac9ae044c02e860ea4","target":"graph","created_at":"2026-07-05T00:37:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1912.10185/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial examples are crafted with imperceptible perturbations with the intent to fool neural networks. Against such attacks, adversarial training and its variants stand as the strongest defense to date. Previous studies have pointed out that robust models that have undergone adversarial training tend to produce more salient and interpretable Jacobian matrices than their non-robust counterparts. A natural question is whether a model trained with an objective to produce salient Jacobian can result in better robustness. This paper answers this question with affirmative empirical results. We p","authors_text":"Alvin Chan, Jie Fu, Yew Soon Ong, Yi Tay","cross_cats":["cs.CR","cs.NE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2019-12-21T02:46:50Z","title":"Jacobian Adversarially Regularized Networks for Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1912.10185","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e7ec0d346702074fe5690aae2362052d827a50d183e6abb0530126ad6056488f","target":"record","created_at":"2026-07-05T00:37:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e070fcae4f0caf55ba6d209dbe698c5ae237ef2c267cbdaaba5142c418db3788","cross_cats_sorted":["cs.CR","cs.NE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2019-12-21T02:46:50Z","title_canon_sha256":"7eb4eb00c5ffbeddbe03a1d27241847598547bde388c0423db8f2e00a550a1dd"},"schema_version":"1.0","source":{"id":"1912.10185","kind":"arxiv","version":2}},"canonical_sha256":"17dc1df74ce889894f52b97c441c6474d7842fd87f89609cc6171e46d00c7c4f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"17dc1df74ce889894f52b97c441c6474d7842fd87f89609cc6171e46d00c7c4f","first_computed_at":"2026-07-05T00:37:09.590626Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:37:09.590626Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/+tOtM4VPPgvQ2vHGmav0G7Aa9xiCs8MeU0OVieGheDa8/F3PbFlRGaOHjKAIfqooyM6FixxnGBlnurqRxIkAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:37:09.591202Z","signed_message":"canonical_sha256_bytes"},"source_id":"1912.10185","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e7ec0d346702074fe5690aae2362052d827a50d183e6abb0530126ad6056488f","sha256:74fda8294df9c53f80c776a318163902cc90fd7e4f4f93ac9ae044c02e860ea4"],"state_sha256":"734cce3b31816f4c66b027de31fd2e22bf7f078f2c4ecb8e73e3568a5a6220bf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"D+ug1mQAJgGJsQQP+jOO1IisbCuQeA4ucYnDS6GCxS/5NS9MkoJiBrhAfrOuSzC7TWoGiU4d7bptuVMXhbiuDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T17:35:40.926684Z","bundle_sha256":"f4927b70f8dd8ce606c8f260e747b76ac528f710158a36d453977737b3198f96"}}