{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2016:D52PXSWCBQCKMICSTTQCSWQKFK","short_pith_number":"pith:D52PXSWC","canonical_record":{"source":{"id":"1610.06940","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2016-10-21T20:16:16Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"4e93645946a56b080c25af73884a40e548321efd82170c56b4b63ba185c949bd","abstract_canon_sha256":"02b036c87bd043f6c6179001873610574a28bfe6ba64cd495f0846ff48e8a52d"},"schema_version":"1.0"},"canonical_sha256":"1f74fbcac20c04a620529ce0295a0a2ab9d910d209fc21d890dcf3dc581e5348","source":{"kind":"arxiv","id":"1610.06940","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1610.06940","created_at":"2026-05-18T00:45:01Z"},{"alias_kind":"arxiv_version","alias_value":"1610.06940v3","created_at":"2026-05-18T00:45:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1610.06940","created_at":"2026-05-18T00:45:01Z"},{"alias_kind":"pith_short_12","alias_value":"D52PXSWCBQCK","created_at":"2026-05-18T12:30:09Z"},{"alias_kind":"pith_short_16","alias_value":"D52PXSWCBQCKMICS","created_at":"2026-05-18T12:30:09Z"},{"alias_kind":"pith_short_8","alias_value":"D52PXSWC","created_at":"2026-05-18T12:30:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2016:D52PXSWCBQCKMICSTTQCSWQKFK","target":"record","payload":{"canonical_record":{"source":{"id":"1610.06940","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2016-10-21T20:16:16Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"4e93645946a56b080c25af73884a40e548321efd82170c56b4b63ba185c949bd","abstract_canon_sha256":"02b036c87bd043f6c6179001873610574a28bfe6ba64cd495f0846ff48e8a52d"},"schema_version":"1.0"},"canonical_sha256":"1f74fbcac20c04a620529ce0295a0a2ab9d910d209fc21d890dcf3dc581e5348","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:45:01.459519Z","signature_b64":"syDBF6iGsUJ5ChNBPQmGFLGXFUXokWI5w0vhYgfgfToGcvh/kSENL8z35lZa3seB4b8ChNn989IhBpBa6jIcAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1f74fbcac20c04a620529ce0295a0a2ab9d910d209fc21d890dcf3dc581e5348","last_reissued_at":"2026-05-18T00:45:01.459073Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:45:01.459073Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1610.06940","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:45:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rLxxlOpr+6iZSq5iIIdYJzOWmCS3rhmmYK4ze9AW3F1ZUv5hceAmiJ5Y8UaDVK7JlrhvvZn3JjNInRkAVX7iAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-28T15:56:30.391047Z"},"content_sha256":"67512c6b8e9f769da6f5eafa185d8c2afe7b25f9e73184490c72ca7ff3a7b927","schema_version":"1.0","event_id":"sha256:67512c6b8e9f769da6f5eafa185d8c2afe7b25f9e73184490c72ca7ff3a7b927"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2016:D52PXSWCBQCKMICSTTQCSWQKFK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Safety Verification of Deep Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.AI","authors_text":"Marta Kwiatkowska, Min Wu, Sen Wang, Xiaowei Huang","submitted_at":"2016-10-21T20:16:16Z","abstract_excerpt":"Deep neural networks have achieved impressive experimental results in image classification, but can surprisingly be unstable with respect to adversarial perturbations, that is, minimal changes to the input image that cause the network to misclassify it. With potential applications including perception modules and end-to-end controllers for self-driving cars, this raises concerns about their safety. We develop a novel automated verification framework for feed-forward multi-layer neural networks based on Satisfiability Modulo Theory (SMT). We focus on safety of image classification decisions wit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1610.06940","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:45:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gBK5ywJunc7iTrs8n0i2mrc+4BMWsB3g1aV4ie5HbTSOBcg7yzgp8RsxKEb7WQ3Zh2U9M4z93YLrMo+L6sV7Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-28T15:56:30.391611Z"},"content_sha256":"6806018233d4a997a7dc0b04eff36f710f7452804df42080c635cb1abc3aa291","schema_version":"1.0","event_id":"sha256:6806018233d4a997a7dc0b04eff36f710f7452804df42080c635cb1abc3aa291"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/D52PXSWCBQCKMICSTTQCSWQKFK/bundle.json","state_url":"https://pith.science/pith/D52PXSWCBQCKMICSTTQCSWQKFK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/D52PXSWCBQCKMICSTTQCSWQKFK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-28T15:56:30Z","links":{"resolver":"https://pith.science/pith/D52PXSWCBQCKMICSTTQCSWQKFK","bundle":"https://pith.science/pith/D52PXSWCBQCKMICSTTQCSWQKFK/bundle.json","state":"https://pith.science/pith/D52PXSWCBQCKMICSTTQCSWQKFK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/D52PXSWCBQCKMICSTTQCSWQKFK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:D52PXSWCBQCKMICSTTQCSWQKFK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"02b036c87bd043f6c6179001873610574a28bfe6ba64cd495f0846ff48e8a52d","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2016-10-21T20:16:16Z","title_canon_sha256":"4e93645946a56b080c25af73884a40e548321efd82170c56b4b63ba185c949bd"},"schema_version":"1.0","source":{"id":"1610.06940","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1610.06940","created_at":"2026-05-18T00:45:01Z"},{"alias_kind":"arxiv_version","alias_value":"1610.06940v3","created_at":"2026-05-18T00:45:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1610.06940","created_at":"2026-05-18T00:45:01Z"},{"alias_kind":"pith_short_12","alias_value":"D52PXSWCBQCK","created_at":"2026-05-18T12:30:09Z"},{"alias_kind":"pith_short_16","alias_value":"D52PXSWCBQCKMICS","created_at":"2026-05-18T12:30:09Z"},{"alias_kind":"pith_short_8","alias_value":"D52PXSWC","created_at":"2026-05-18T12:30:09Z"}],"graph_snapshots":[{"event_id":"sha256:6806018233d4a997a7dc0b04eff36f710f7452804df42080c635cb1abc3aa291","target":"graph","created_at":"2026-05-18T00:45:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Deep neural networks have achieved impressive experimental results in image classification, but can surprisingly be unstable with respect to adversarial perturbations, that is, minimal changes to the input image that cause the network to misclassify it. With potential applications including perception modules and end-to-end controllers for self-driving cars, this raises concerns about their safety. We develop a novel automated verification framework for feed-forward multi-layer neural networks based on Satisfiability Modulo Theory (SMT). We focus on safety of image classification decisions wit","authors_text":"Marta Kwiatkowska, Min Wu, Sen Wang, Xiaowei Huang","cross_cats":["cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2016-10-21T20:16:16Z","title":"Safety Verification of Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1610.06940","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:67512c6b8e9f769da6f5eafa185d8c2afe7b25f9e73184490c72ca7ff3a7b927","target":"record","created_at":"2026-05-18T00:45:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"02b036c87bd043f6c6179001873610574a28bfe6ba64cd495f0846ff48e8a52d","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2016-10-21T20:16:16Z","title_canon_sha256":"4e93645946a56b080c25af73884a40e548321efd82170c56b4b63ba185c949bd"},"schema_version":"1.0","source":{"id":"1610.06940","kind":"arxiv","version":3}},"canonical_sha256":"1f74fbcac20c04a620529ce0295a0a2ab9d910d209fc21d890dcf3dc581e5348","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1f74fbcac20c04a620529ce0295a0a2ab9d910d209fc21d890dcf3dc581e5348","first_computed_at":"2026-05-18T00:45:01.459073Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:45:01.459073Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"syDBF6iGsUJ5ChNBPQmGFLGXFUXokWI5w0vhYgfgfToGcvh/kSENL8z35lZa3seB4b8ChNn989IhBpBa6jIcAA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:45:01.459519Z","signed_message":"canonical_sha256_bytes"},"source_id":"1610.06940","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:67512c6b8e9f769da6f5eafa185d8c2afe7b25f9e73184490c72ca7ff3a7b927","sha256:6806018233d4a997a7dc0b04eff36f710f7452804df42080c635cb1abc3aa291"],"state_sha256":"3faf16d614c71e696f00ed31cba05e513c5826493f425bccc234dc578a6d9fe9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7/Vdp9d6liXqBl3P7OLx8ipuZa/ELqNKj3bZi9liZWibgZRaz/aYZvETr5NQbDFf4mfoiOucyrNVPg6GIrPRDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-28T15:56:30.394178Z","bundle_sha256":"1f83745148007a13b8df3e29342c360c39b2a0cf83c101936cf9c4ed27eae372"}}