{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:E2NMLKRCXCXD2BBQUSLTYDGRRY","short_pith_number":"pith:E2NMLKRC","canonical_record":{"source":{"id":"2606.17540","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-06-16T05:38:26Z","cross_cats_sorted":[],"title_canon_sha256":"4d3be5bbc16f7f7cce683ac9c81cc70da8c1d5dcbd3636c758bd8a885f6f0a9f","abstract_canon_sha256":"168e83aa97845b06aeca6baa516e50bb8fe6ac734c4b61ca440f9af582a045d6"},"schema_version":"1.0"},"canonical_sha256":"269ac5aa22b8ae3d0430a4973c0cd18e38f706908a7a256ea460e2fbb92562ff","source":{"kind":"arxiv","id":"2606.17540","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.17540","created_at":"2026-06-19T16:10:15Z"},{"alias_kind":"arxiv_version","alias_value":"2606.17540v1","created_at":"2026-06-19T16:10:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.17540","created_at":"2026-06-19T16:10:15Z"},{"alias_kind":"pith_short_12","alias_value":"E2NMLKRCXCXD","created_at":"2026-06-19T16:10:15Z"},{"alias_kind":"pith_short_16","alias_value":"E2NMLKRCXCXD2BBQ","created_at":"2026-06-19T16:10:15Z"},{"alias_kind":"pith_short_8","alias_value":"E2NMLKRC","created_at":"2026-06-19T16:10:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:E2NMLKRCXCXD2BBQUSLTYDGRRY","target":"record","payload":{"canonical_record":{"source":{"id":"2606.17540","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-06-16T05:38:26Z","cross_cats_sorted":[],"title_canon_sha256":"4d3be5bbc16f7f7cce683ac9c81cc70da8c1d5dcbd3636c758bd8a885f6f0a9f","abstract_canon_sha256":"168e83aa97845b06aeca6baa516e50bb8fe6ac734c4b61ca440f9af582a045d6"},"schema_version":"1.0"},"canonical_sha256":"269ac5aa22b8ae3d0430a4973c0cd18e38f706908a7a256ea460e2fbb92562ff","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-19T16:10:15.544574Z","signature_b64":"5aTNb/FqpSedoCBOPiYzrVaQxYaI7tdnEIOtwvqRQWf8ovBOW078foIjm1KsxDtVR0mphKTCXhuKnG4areQlCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"269ac5aa22b8ae3d0430a4973c0cd18e38f706908a7a256ea460e2fbb92562ff","last_reissued_at":"2026-06-19T16:10:15.544219Z","signature_status":"signed_v1","first_computed_at":"2026-06-19T16:10:15.544219Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.17540","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-19T16:10:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jMTHA+nUeQn96YTxf05uH/nVxM9irWdwCEXPpqyWwnYXroBJN5XFQ+3Y8WhfnEEb/KZnu7nX1f7FRZpw9476Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T23:48:17.513193Z"},"content_sha256":"f4b7c91ddc3b7082f2d46756df525821e511cd2a091ba53d0a53c47bfad81f85","schema_version":"1.0","event_id":"sha256:f4b7c91ddc3b7082f2d46756df525821e511cd2a091ba53d0a53c47bfad81f85"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:E2NMLKRCXCXD2BBQUSLTYDGRRY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TaFD: Threat-Aware Frequency Decoupling for Adversarial Robustness against Heterogeneous Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Meie Fang, Mengda Xie, Yiling He","submitted_at":"2026-06-16T05:38:26Z","abstract_excerpt":"Multi-threat robustness remains a fundamental challenge in deep learning. Although joint adversarial training (JAT) is widely adopted, it suffers from negative transfer under heterogeneous threats, particularly between $\\ell_p$-bounded and semantic attacks. Through first-order gradient analysis, we formalize this as gradient incompatibility and theoretically establish the necessity of decoupled optimization. We further reveal that these conflicting threats exhibit separable spectral characteristics in the frequency domain. Motivated by this observation, we propose Threat-aware Frequency Decoup"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.17540","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.17540/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-19T16:10:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LtI9LO631S19yZRSo9ZAEdsjjjRl7vC+AHQk7j1C/p08ts+IXkMTwgFMIqsakYQeIsiCqC7Kf3I9UlgHdlJiAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T23:48:17.513687Z"},"content_sha256":"caca1bcb793ab13ec329428c4625cf7adec0a4bf8b45a508e62f897c2cca8aaf","schema_version":"1.0","event_id":"sha256:caca1bcb793ab13ec329428c4625cf7adec0a4bf8b45a508e62f897c2cca8aaf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/E2NMLKRCXCXD2BBQUSLTYDGRRY/bundle.json","state_url":"https://pith.science/pith/E2NMLKRCXCXD2BBQUSLTYDGRRY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/E2NMLKRCXCXD2BBQUSLTYDGRRY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T23:48:17Z","links":{"resolver":"https://pith.science/pith/E2NMLKRCXCXD2BBQUSLTYDGRRY","bundle":"https://pith.science/pith/E2NMLKRCXCXD2BBQUSLTYDGRRY/bundle.json","state":"https://pith.science/pith/E2NMLKRCXCXD2BBQUSLTYDGRRY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/E2NMLKRCXCXD2BBQUSLTYDGRRY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:E2NMLKRCXCXD2BBQUSLTYDGRRY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"168e83aa97845b06aeca6baa516e50bb8fe6ac734c4b61ca440f9af582a045d6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-06-16T05:38:26Z","title_canon_sha256":"4d3be5bbc16f7f7cce683ac9c81cc70da8c1d5dcbd3636c758bd8a885f6f0a9f"},"schema_version":"1.0","source":{"id":"2606.17540","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.17540","created_at":"2026-06-19T16:10:15Z"},{"alias_kind":"arxiv_version","alias_value":"2606.17540v1","created_at":"2026-06-19T16:10:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.17540","created_at":"2026-06-19T16:10:15Z"},{"alias_kind":"pith_short_12","alias_value":"E2NMLKRCXCXD","created_at":"2026-06-19T16:10:15Z"},{"alias_kind":"pith_short_16","alias_value":"E2NMLKRCXCXD2BBQ","created_at":"2026-06-19T16:10:15Z"},{"alias_kind":"pith_short_8","alias_value":"E2NMLKRC","created_at":"2026-06-19T16:10:15Z"}],"graph_snapshots":[{"event_id":"sha256:caca1bcb793ab13ec329428c4625cf7adec0a4bf8b45a508e62f897c2cca8aaf","target":"graph","created_at":"2026-06-19T16:10:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.17540/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multi-threat robustness remains a fundamental challenge in deep learning. Although joint adversarial training (JAT) is widely adopted, it suffers from negative transfer under heterogeneous threats, particularly between $\\ell_p$-bounded and semantic attacks. Through first-order gradient analysis, we formalize this as gradient incompatibility and theoretically establish the necessity of decoupled optimization. We further reveal that these conflicting threats exhibit separable spectral characteristics in the frequency domain. Motivated by this observation, we propose Threat-aware Frequency Decoup","authors_text":"Meie Fang, Mengda Xie, Yiling He","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-06-16T05:38:26Z","title":"TaFD: Threat-Aware Frequency Decoupling for Adversarial Robustness against Heterogeneous Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.17540","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f4b7c91ddc3b7082f2d46756df525821e511cd2a091ba53d0a53c47bfad81f85","target":"record","created_at":"2026-06-19T16:10:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"168e83aa97845b06aeca6baa516e50bb8fe6ac734c4b61ca440f9af582a045d6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-06-16T05:38:26Z","title_canon_sha256":"4d3be5bbc16f7f7cce683ac9c81cc70da8c1d5dcbd3636c758bd8a885f6f0a9f"},"schema_version":"1.0","source":{"id":"2606.17540","kind":"arxiv","version":1}},"canonical_sha256":"269ac5aa22b8ae3d0430a4973c0cd18e38f706908a7a256ea460e2fbb92562ff","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"269ac5aa22b8ae3d0430a4973c0cd18e38f706908a7a256ea460e2fbb92562ff","first_computed_at":"2026-06-19T16:10:15.544219Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-19T16:10:15.544219Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5aTNb/FqpSedoCBOPiYzrVaQxYaI7tdnEIOtwvqRQWf8ovBOW078foIjm1KsxDtVR0mphKTCXhuKnG4areQlCQ==","signature_status":"signed_v1","signed_at":"2026-06-19T16:10:15.544574Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.17540","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f4b7c91ddc3b7082f2d46756df525821e511cd2a091ba53d0a53c47bfad81f85","sha256:caca1bcb793ab13ec329428c4625cf7adec0a4bf8b45a508e62f897c2cca8aaf"],"state_sha256":"ea4652c26ecb028295bf05593b4e3c11041ee98881d7b9c0a8d85b7da283d2c5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"INXLIVhsSCtY9rXQ6JsXFXpN0T3j6OnHrEKvJ6/LrFz2Q0FEV9ItR8veUv1Csm5RSHSoZGiw/ibX7UA+HTh9Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T23:48:17.517161Z","bundle_sha256":"230a09c41980501ce95be58b9ff121c9464f01292d347bae05c5ad3c3be670a2"}}