{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:ENT52Q5WQ5HYBRFG6FY23JBHVG","short_pith_number":"pith:ENT52Q5W","canonical_record":{"source":{"id":"2206.14772","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-06-29T17:13:25Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"8abc6b3903250730626d2f901b59ab3ae2c334eeec624270e2297ce67495db99","abstract_canon_sha256":"77c01ecb84ac6d2edb40ca162cc7b2474b91758517a5f033eab03baf350b10d2"},"schema_version":"1.0"},"canonical_sha256":"2367dd43b6874f80c4a6f171ada427a9b2c2c8cd3c364c077eb0b01e0ac67a92","source":{"kind":"arxiv","id":"2206.14772","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2206.14772","created_at":"2026-07-05T06:15:42Z"},{"alias_kind":"arxiv_version","alias_value":"2206.14772v2","created_at":"2026-07-05T06:15:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2206.14772","created_at":"2026-07-05T06:15:42Z"},{"alias_kind":"pith_short_12","alias_value":"ENT52Q5WQ5HY","created_at":"2026-07-05T06:15:42Z"},{"alias_kind":"pith_short_16","alias_value":"ENT52Q5WQ5HYBRFG","created_at":"2026-07-05T06:15:42Z"},{"alias_kind":"pith_short_8","alias_value":"ENT52Q5W","created_at":"2026-07-05T06:15:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:ENT52Q5WQ5HYBRFG6FY23JBHVG","target":"record","payload":{"canonical_record":{"source":{"id":"2206.14772","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-06-29T17:13:25Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"8abc6b3903250730626d2f901b59ab3ae2c334eeec624270e2297ce67495db99","abstract_canon_sha256":"77c01ecb84ac6d2edb40ca162cc7b2474b91758517a5f033eab03baf350b10d2"},"schema_version":"1.0"},"canonical_sha256":"2367dd43b6874f80c4a6f171ada427a9b2c2c8cd3c364c077eb0b01e0ac67a92","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:15:42.425055Z","signature_b64":"7yTaTl3KnO8wrcejwaHHdKqCt5Msdxy0kv348lEHl5bsaT7rk8DsROV/kQPyLXU9REDAcKEaFRyAYuHtrQ2WBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2367dd43b6874f80c4a6f171ada427a9b2c2c8cd3c364c077eb0b01e0ac67a92","last_reissued_at":"2026-07-05T06:15:42.424573Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:15:42.424573Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2206.14772","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:15:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nsc3BoUMYJfvmXIXjoTSO5L/3pHNiJ0bou8sAy0/4D2wzUNusXOTW3/1z4nFhakLRFLVfLF1s9kYlNauNHeJDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T15:20:03.364133Z"},"content_sha256":"0ba848385f1e67641ae2a7c6b55a40c48e72438bf9dfa7dd345235820bab942a","schema_version":"1.0","event_id":"sha256:0ba848385f1e67641ae2a7c6b55a40c48e72438bf9dfa7dd345235820bab942a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:ENT52Q5WQ5HYBRFG6FY23JBHVG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"IBP Regularization for Verified Adversarial Robustness via Branch-and-Bound","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Alessandro De Palma, Krishnamurthy Dvijotham, M. Pawan Kumar, Robert Stanforth, Rudy Bunel","submitted_at":"2022-06-29T17:13:25Z","abstract_excerpt":"Recent works have tried to increase the verifiability of adversarially trained networks by running the attacks over domains larger than the original perturbations and adding various regularization terms to the objective. However, these algorithms either underperform or require complex and expensive stage-wise training procedures, hindering their practical applicability. We present IBP-R, a novel verified training algorithm that is both simple and effective. IBP-R induces network verifiability by coupling adversarial attacks on enlarged domains with a regularization term, based on inexpensive i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2206.14772","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2206.14772/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:15:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SNdtIaPj3M3tGplsP8QLxyR+HFfzmfoI1EutSLgzF4Zr5w/1uNjt74WBQoB8W+2iOwk9/GF3u9kdDgIYSMtRDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T15:20:03.364975Z"},"content_sha256":"4df03d64e9ba1687e759817ce4e7fd034abd787405d0372b9be0589a3eedadee","schema_version":"1.0","event_id":"sha256:4df03d64e9ba1687e759817ce4e7fd034abd787405d0372b9be0589a3eedadee"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ENT52Q5WQ5HYBRFG6FY23JBHVG/bundle.json","state_url":"https://pith.science/pith/ENT52Q5WQ5HYBRFG6FY23JBHVG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ENT52Q5WQ5HYBRFG6FY23JBHVG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T15:20:03Z","links":{"resolver":"https://pith.science/pith/ENT52Q5WQ5HYBRFG6FY23JBHVG","bundle":"https://pith.science/pith/ENT52Q5WQ5HYBRFG6FY23JBHVG/bundle.json","state":"https://pith.science/pith/ENT52Q5WQ5HYBRFG6FY23JBHVG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ENT52Q5WQ5HYBRFG6FY23JBHVG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:ENT52Q5WQ5HYBRFG6FY23JBHVG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"77c01ecb84ac6d2edb40ca162cc7b2474b91758517a5f033eab03baf350b10d2","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-06-29T17:13:25Z","title_canon_sha256":"8abc6b3903250730626d2f901b59ab3ae2c334eeec624270e2297ce67495db99"},"schema_version":"1.0","source":{"id":"2206.14772","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2206.14772","created_at":"2026-07-05T06:15:42Z"},{"alias_kind":"arxiv_version","alias_value":"2206.14772v2","created_at":"2026-07-05T06:15:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2206.14772","created_at":"2026-07-05T06:15:42Z"},{"alias_kind":"pith_short_12","alias_value":"ENT52Q5WQ5HY","created_at":"2026-07-05T06:15:42Z"},{"alias_kind":"pith_short_16","alias_value":"ENT52Q5WQ5HYBRFG","created_at":"2026-07-05T06:15:42Z"},{"alias_kind":"pith_short_8","alias_value":"ENT52Q5W","created_at":"2026-07-05T06:15:42Z"}],"graph_snapshots":[{"event_id":"sha256:4df03d64e9ba1687e759817ce4e7fd034abd787405d0372b9be0589a3eedadee","target":"graph","created_at":"2026-07-05T06:15:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2206.14772/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent works have tried to increase the verifiability of adversarially trained networks by running the attacks over domains larger than the original perturbations and adding various regularization terms to the objective. However, these algorithms either underperform or require complex and expensive stage-wise training procedures, hindering their practical applicability. We present IBP-R, a novel verified training algorithm that is both simple and effective. IBP-R induces network verifiability by coupling adversarial attacks on enlarged domains with a regularization term, based on inexpensive i","authors_text":"Alessandro De Palma, Krishnamurthy Dvijotham, M. Pawan Kumar, Robert Stanforth, Rudy Bunel","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-06-29T17:13:25Z","title":"IBP Regularization for Verified Adversarial Robustness via Branch-and-Bound"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2206.14772","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0ba848385f1e67641ae2a7c6b55a40c48e72438bf9dfa7dd345235820bab942a","target":"record","created_at":"2026-07-05T06:15:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"77c01ecb84ac6d2edb40ca162cc7b2474b91758517a5f033eab03baf350b10d2","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-06-29T17:13:25Z","title_canon_sha256":"8abc6b3903250730626d2f901b59ab3ae2c334eeec624270e2297ce67495db99"},"schema_version":"1.0","source":{"id":"2206.14772","kind":"arxiv","version":2}},"canonical_sha256":"2367dd43b6874f80c4a6f171ada427a9b2c2c8cd3c364c077eb0b01e0ac67a92","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2367dd43b6874f80c4a6f171ada427a9b2c2c8cd3c364c077eb0b01e0ac67a92","first_computed_at":"2026-07-05T06:15:42.424573Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:15:42.424573Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7yTaTl3KnO8wrcejwaHHdKqCt5Msdxy0kv348lEHl5bsaT7rk8DsROV/kQPyLXU9REDAcKEaFRyAYuHtrQ2WBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:15:42.425055Z","signed_message":"canonical_sha256_bytes"},"source_id":"2206.14772","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0ba848385f1e67641ae2a7c6b55a40c48e72438bf9dfa7dd345235820bab942a","sha256:4df03d64e9ba1687e759817ce4e7fd034abd787405d0372b9be0589a3eedadee"],"state_sha256":"5782855c48b6a552bbb0891c89b3b1156efd8505b7d44d03a9b1ce6bc8c857b2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V2957zy7P5AS6QkkG4135CbkX9Ix+OsHYv++mo/V+JDv2Wo5OB7VeVSgdv12+vUWS/631j0wIGl2N3Nm3YRBCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T15:20:03.381389Z","bundle_sha256":"b6490d58bdc553257f6d94975a0d06b323c44c48a38f269df364b84a3bc2817d"}}