{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:CHTJI3AFY4GBS4NBBQZP6BGPIU","short_pith_number":"pith:CHTJI3AF","canonical_record":{"source":{"id":"1905.13725","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-05-31T17:19:13Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"5b3994c8549d59dbb886c6a5ee943f85acbfc8a584f72af95b81c1ea009939d5","abstract_canon_sha256":"6d98142cc50e3ee1506b2a5f4b0269291607da0d64a0145e4ab74c448e4bf6b9"},"schema_version":"1.0"},"canonical_sha256":"11e6946c05c70c1971a10c32ff04cf453495421ccb5893b4a7e835afbc59ae7c","source":{"kind":"arxiv","id":"1905.13725","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.13725","created_at":"2026-07-05T00:24:08Z"},{"alias_kind":"arxiv_version","alias_value":"1905.13725v4","created_at":"2026-07-05T00:24:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.13725","created_at":"2026-07-05T00:24:08Z"},{"alias_kind":"pith_short_12","alias_value":"CHTJI3AFY4GB","created_at":"2026-07-05T00:24:08Z"},{"alias_kind":"pith_short_16","alias_value":"CHTJI3AFY4GBS4NB","created_at":"2026-07-05T00:24:08Z"},{"alias_kind":"pith_short_8","alias_value":"CHTJI3AF","created_at":"2026-07-05T00:24:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:CHTJI3AFY4GBS4NBBQZP6BGPIU","target":"record","payload":{"canonical_record":{"source":{"id":"1905.13725","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-05-31T17:19:13Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"5b3994c8549d59dbb886c6a5ee943f85acbfc8a584f72af95b81c1ea009939d5","abstract_canon_sha256":"6d98142cc50e3ee1506b2a5f4b0269291607da0d64a0145e4ab74c448e4bf6b9"},"schema_version":"1.0"},"canonical_sha256":"11e6946c05c70c1971a10c32ff04cf453495421ccb5893b4a7e835afbc59ae7c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:24:08.003410Z","signature_b64":"HvXfQn/YRVHNCdF9N+livK2LhLMXcfSwyKKqY4i2W/2FyRsvJlo5b78PnMjAkEjGZdqtjHtLhXNuHf0DOGTNCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"11e6946c05c70c1971a10c32ff04cf453495421ccb5893b4a7e835afbc59ae7c","last_reissued_at":"2026-07-05T00:24:08.002926Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:24:08.002926Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1905.13725","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:24:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2zUkut2rwLG/b5rCNqQ3grPuyF7f8p+H5wupVuBtCyTSOzXmcUkTeWreodkX///Jc6EfO7zQdXgNU07xkhJxCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T10:07:20.497186Z"},"content_sha256":"05a5beb80819470e63d36cb1ed89ad41f341256255eef2443e71021c3bcf1102","schema_version":"1.0","event_id":"sha256:05a5beb80819470e63d36cb1ed89ad41f341256255eef2443e71021c3bcf1102"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:CHTJI3AFY4GBS4NBBQZP6BGPIU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Are Labels Required for Improving Adversarial Robustness?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Alhussein Fawzi, Jean-Baptiste Alayrac, Jonathan Uesato, Po-Sen Huang, Pushmeet Kohli, Robert Stanforth","submitted_at":"2019-05-31T17:19:13Z","abstract_excerpt":"Recent work has uncovered the interesting (and somewhat surprising) finding that training models to be invariant to adversarial perturbations requires substantially larger datasets than those required for standard classification. This result is a key hurdle in the deployment of robust machine learning models in many real world applications where labeled data is expensive. Our main insight is that unlabeled data can be a competitive alternative to labeled data for training adversarially robust models. Theoretically, we show that in a simple statistical setting, the sample complexity for learnin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.13725","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1905.13725/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:24:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O8VqtENM8iLm1cc5KYvXMWzu3o86E74uMP7EJH4S5EKR0KlRVPZ8exRPZhaNlasJNQxx8x+Q5MjM8ZbRus9IAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T10:07:20.498087Z"},"content_sha256":"bdcbdd163afdac14dea85a80a62a737913cc8cfa5748481e83fe273e8f66323b","schema_version":"1.0","event_id":"sha256:bdcbdd163afdac14dea85a80a62a737913cc8cfa5748481e83fe273e8f66323b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CHTJI3AFY4GBS4NBBQZP6BGPIU/bundle.json","state_url":"https://pith.science/pith/CHTJI3AFY4GBS4NBBQZP6BGPIU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CHTJI3AFY4GBS4NBBQZP6BGPIU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T10:07:20Z","links":{"resolver":"https://pith.science/pith/CHTJI3AFY4GBS4NBBQZP6BGPIU","bundle":"https://pith.science/pith/CHTJI3AFY4GBS4NBBQZP6BGPIU/bundle.json","state":"https://pith.science/pith/CHTJI3AFY4GBS4NBBQZP6BGPIU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CHTJI3AFY4GBS4NBBQZP6BGPIU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:CHTJI3AFY4GBS4NBBQZP6BGPIU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6d98142cc50e3ee1506b2a5f4b0269291607da0d64a0145e4ab74c448e4bf6b9","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-05-31T17:19:13Z","title_canon_sha256":"5b3994c8549d59dbb886c6a5ee943f85acbfc8a584f72af95b81c1ea009939d5"},"schema_version":"1.0","source":{"id":"1905.13725","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.13725","created_at":"2026-07-05T00:24:08Z"},{"alias_kind":"arxiv_version","alias_value":"1905.13725v4","created_at":"2026-07-05T00:24:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.13725","created_at":"2026-07-05T00:24:08Z"},{"alias_kind":"pith_short_12","alias_value":"CHTJI3AFY4GB","created_at":"2026-07-05T00:24:08Z"},{"alias_kind":"pith_short_16","alias_value":"CHTJI3AFY4GBS4NB","created_at":"2026-07-05T00:24:08Z"},{"alias_kind":"pith_short_8","alias_value":"CHTJI3AF","created_at":"2026-07-05T00:24:08Z"}],"graph_snapshots":[{"event_id":"sha256:bdcbdd163afdac14dea85a80a62a737913cc8cfa5748481e83fe273e8f66323b","target":"graph","created_at":"2026-07-05T00:24:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1905.13725/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent work has uncovered the interesting (and somewhat surprising) finding that training models to be invariant to adversarial perturbations requires substantially larger datasets than those required for standard classification. This result is a key hurdle in the deployment of robust machine learning models in many real world applications where labeled data is expensive. Our main insight is that unlabeled data can be a competitive alternative to labeled data for training adversarially robust models. Theoretically, we show that in a simple statistical setting, the sample complexity for learnin","authors_text":"Alhussein Fawzi, Jean-Baptiste Alayrac, Jonathan Uesato, Po-Sen Huang, Pushmeet Kohli, Robert Stanforth","cross_cats":["cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-05-31T17:19:13Z","title":"Are Labels Required for Improving Adversarial Robustness?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.13725","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:05a5beb80819470e63d36cb1ed89ad41f341256255eef2443e71021c3bcf1102","target":"record","created_at":"2026-07-05T00:24:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6d98142cc50e3ee1506b2a5f4b0269291607da0d64a0145e4ab74c448e4bf6b9","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-05-31T17:19:13Z","title_canon_sha256":"5b3994c8549d59dbb886c6a5ee943f85acbfc8a584f72af95b81c1ea009939d5"},"schema_version":"1.0","source":{"id":"1905.13725","kind":"arxiv","version":4}},"canonical_sha256":"11e6946c05c70c1971a10c32ff04cf453495421ccb5893b4a7e835afbc59ae7c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"11e6946c05c70c1971a10c32ff04cf453495421ccb5893b4a7e835afbc59ae7c","first_computed_at":"2026-07-05T00:24:08.002926Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:24:08.002926Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HvXfQn/YRVHNCdF9N+livK2LhLMXcfSwyKKqY4i2W/2FyRsvJlo5b78PnMjAkEjGZdqtjHtLhXNuHf0DOGTNCw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:24:08.003410Z","signed_message":"canonical_sha256_bytes"},"source_id":"1905.13725","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:05a5beb80819470e63d36cb1ed89ad41f341256255eef2443e71021c3bcf1102","sha256:bdcbdd163afdac14dea85a80a62a737913cc8cfa5748481e83fe273e8f66323b"],"state_sha256":"2d95cc340b6c96935c1029dc5eff143971f77c8dfdeed79cfbd25e3914e1e3f4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B3J+bT1w2NNiUPZXWdoXSAXgQP9nSCGMdkD1SHu3z5ee47zUd7WJeqROp5YLgH4/VQhQxGheQiGYq8bth3XdCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T10:07:20.504846Z","bundle_sha256":"518ebd9316d5e535dc35fda522cba98f7aabb3d0dd263cba233f13666b2ee006"}}