{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:EYTANQH5U7LPM7IO4XBEIQZYUO","short_pith_number":"pith:EYTANQH5","canonical_record":{"source":{"id":"2202.13711","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-28T12:11:40Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"775398d17d5fbdd06965a1ca23dbd89fde451d9b90adc5230079107d424c5ba8","abstract_canon_sha256":"5524fac2e170cc5a3596cfe83b3130e5c113f17ba585c6d108cbdb7db16c27a5"},"schema_version":"1.0"},"canonical_sha256":"262606c0fda7d6f67d0ee5c2444338a3bad883d9b59e02969cb62c5807d9f6f3","source":{"kind":"arxiv","id":"2202.13711","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.13711","created_at":"2026-07-05T04:40:01Z"},{"alias_kind":"arxiv_version","alias_value":"2202.13711v2","created_at":"2026-07-05T04:40:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.13711","created_at":"2026-07-05T04:40:01Z"},{"alias_kind":"pith_short_12","alias_value":"EYTANQH5U7LP","created_at":"2026-07-05T04:40:01Z"},{"alias_kind":"pith_short_16","alias_value":"EYTANQH5U7LPM7IO","created_at":"2026-07-05T04:40:01Z"},{"alias_kind":"pith_short_8","alias_value":"EYTANQH5","created_at":"2026-07-05T04:40:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:EYTANQH5U7LPM7IO4XBEIQZYUO","target":"record","payload":{"canonical_record":{"source":{"id":"2202.13711","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-28T12:11:40Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"775398d17d5fbdd06965a1ca23dbd89fde451d9b90adc5230079107d424c5ba8","abstract_canon_sha256":"5524fac2e170cc5a3596cfe83b3130e5c113f17ba585c6d108cbdb7db16c27a5"},"schema_version":"1.0"},"canonical_sha256":"262606c0fda7d6f67d0ee5c2444338a3bad883d9b59e02969cb62c5807d9f6f3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:40:01.246074Z","signature_b64":"GmCJVKX8j/z2VuFHTMLu5zxGJpG8M+tw2TuViYMw1HFg6DCVFj5xv0q+XparFCqYUXnMQtGt9SQrtuCEylxWCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"262606c0fda7d6f67d0ee5c2444338a3bad883d9b59e02969cb62c5807d9f6f3","last_reissued_at":"2026-07-05T04:40:01.245644Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:40:01.245644Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.13711","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:40:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t5i95FGkMwfUQ+V6nQHwZ7SF1+KwlJUaNOeC7HGYZCe5HSJrRE8emkbuY1X9Eu8Z+2ubKJi6hoXego/o8MhoAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T13:08:07.835404Z"},"content_sha256":"e88d6e8a43d5be466f2fba86382564b9fcfb883c53b9d13416501b788f477336","schema_version":"1.0","event_id":"sha256:e88d6e8a43d5be466f2fba86382564b9fcfb883c53b9d13416501b788f477336"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:EYTANQH5U7LPM7IO4XBEIQZYUO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Evan Shelhamer, Francesco Croce, Matthias Hein, Sven Gowal, Taylan Cemgil, Thomas Brunner","submitted_at":"2022-02-28T12:11:40Z","abstract_excerpt":"Adaptive defenses, which optimize at test time, promise to improve adversarial robustness. We categorize such adaptive test-time defenses, explain their potential benefits and drawbacks, and evaluate a representative variety of the latest adaptive defenses for image classification. Unfortunately, none significantly improve upon static defenses when subjected to our careful case study evaluation. Some even weaken the underlying static model while simultaneously increasing inference computation. While these results are disappointing, we still believe that adaptive test-time defenses are a promis"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.13711","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.13711/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:40:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HWFGDCWN/Awe5UT52NRpGWO9y+g4L55PPyQa5PvCia6eKwjkysQhkC7TOwtit4jKLYhs0rKfqg/viZgN6XY+Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T13:08:07.836038Z"},"content_sha256":"f19d1c6dedf3c88c7d8b6cf71b702ae5a79f5ef9821d400d6ff82e94f22de555","schema_version":"1.0","event_id":"sha256:f19d1c6dedf3c88c7d8b6cf71b702ae5a79f5ef9821d400d6ff82e94f22de555"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EYTANQH5U7LPM7IO4XBEIQZYUO/bundle.json","state_url":"https://pith.science/pith/EYTANQH5U7LPM7IO4XBEIQZYUO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EYTANQH5U7LPM7IO4XBEIQZYUO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T13:08:07Z","links":{"resolver":"https://pith.science/pith/EYTANQH5U7LPM7IO4XBEIQZYUO","bundle":"https://pith.science/pith/EYTANQH5U7LPM7IO4XBEIQZYUO/bundle.json","state":"https://pith.science/pith/EYTANQH5U7LPM7IO4XBEIQZYUO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EYTANQH5U7LPM7IO4XBEIQZYUO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:EYTANQH5U7LPM7IO4XBEIQZYUO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5524fac2e170cc5a3596cfe83b3130e5c113f17ba585c6d108cbdb7db16c27a5","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-28T12:11:40Z","title_canon_sha256":"775398d17d5fbdd06965a1ca23dbd89fde451d9b90adc5230079107d424c5ba8"},"schema_version":"1.0","source":{"id":"2202.13711","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.13711","created_at":"2026-07-05T04:40:01Z"},{"alias_kind":"arxiv_version","alias_value":"2202.13711v2","created_at":"2026-07-05T04:40:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.13711","created_at":"2026-07-05T04:40:01Z"},{"alias_kind":"pith_short_12","alias_value":"EYTANQH5U7LP","created_at":"2026-07-05T04:40:01Z"},{"alias_kind":"pith_short_16","alias_value":"EYTANQH5U7LPM7IO","created_at":"2026-07-05T04:40:01Z"},{"alias_kind":"pith_short_8","alias_value":"EYTANQH5","created_at":"2026-07-05T04:40:01Z"}],"graph_snapshots":[{"event_id":"sha256:f19d1c6dedf3c88c7d8b6cf71b702ae5a79f5ef9821d400d6ff82e94f22de555","target":"graph","created_at":"2026-07-05T04:40:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.13711/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adaptive defenses, which optimize at test time, promise to improve adversarial robustness. We categorize such adaptive test-time defenses, explain their potential benefits and drawbacks, and evaluate a representative variety of the latest adaptive defenses for image classification. Unfortunately, none significantly improve upon static defenses when subjected to our careful case study evaluation. Some even weaken the underlying static model while simultaneously increasing inference computation. While these results are disappointing, we still believe that adaptive test-time defenses are a promis","authors_text":"Evan Shelhamer, Francesco Croce, Matthias Hein, Sven Gowal, Taylan Cemgil, Thomas Brunner","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-28T12:11:40Z","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.13711","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e88d6e8a43d5be466f2fba86382564b9fcfb883c53b9d13416501b788f477336","target":"record","created_at":"2026-07-05T04:40:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5524fac2e170cc5a3596cfe83b3130e5c113f17ba585c6d108cbdb7db16c27a5","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-28T12:11:40Z","title_canon_sha256":"775398d17d5fbdd06965a1ca23dbd89fde451d9b90adc5230079107d424c5ba8"},"schema_version":"1.0","source":{"id":"2202.13711","kind":"arxiv","version":2}},"canonical_sha256":"262606c0fda7d6f67d0ee5c2444338a3bad883d9b59e02969cb62c5807d9f6f3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"262606c0fda7d6f67d0ee5c2444338a3bad883d9b59e02969cb62c5807d9f6f3","first_computed_at":"2026-07-05T04:40:01.245644Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:40:01.245644Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GmCJVKX8j/z2VuFHTMLu5zxGJpG8M+tw2TuViYMw1HFg6DCVFj5xv0q+XparFCqYUXnMQtGt9SQrtuCEylxWCw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:40:01.246074Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.13711","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e88d6e8a43d5be466f2fba86382564b9fcfb883c53b9d13416501b788f477336","sha256:f19d1c6dedf3c88c7d8b6cf71b702ae5a79f5ef9821d400d6ff82e94f22de555"],"state_sha256":"dbecfd1d973ccbf166dd47b8ea9a66b5ea56a6a196ca8a0d4981bba323c7e037"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7fD8G0oGp9bOb1vjojU9vzF3Dj6SlxMVblGX7GK06IXZOBLJI1sD148bRXJuCyZqbHcd95pZS2cypqYe5lmhCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T13:08:07.840785Z","bundle_sha256":"f3a0c96047663f69d607f7c71a719f14068bfc647eca0bdf17305117a046b1f3"}}