{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:FELXEUZNJW7PUXVSA3S3QOD2OI","short_pith_number":"pith:FELXEUZN","canonical_record":{"source":{"id":"2107.10873","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-07-22T18:10:41Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"title_canon_sha256":"8026d3c020c05b636b360f0b73cedc8ee26eaa8a1d848da1303670d4cfe8a466","abstract_canon_sha256":"0243f2336a7a374f50bdba1d888f43982c039a80d1167a13929362c8847e37cf"},"schema_version":"1.0"},"canonical_sha256":"291772532d4dbefa5eb206e5b8387a7201b98b8067e135568ab3d6ccd6760cd3","source":{"kind":"arxiv","id":"2107.10873","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.10873","created_at":"2026-07-05T04:16:36Z"},{"alias_kind":"arxiv_version","alias_value":"2107.10873v2","created_at":"2026-07-05T04:16:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.10873","created_at":"2026-07-05T04:16:36Z"},{"alias_kind":"pith_short_12","alias_value":"FELXEUZNJW7P","created_at":"2026-07-05T04:16:36Z"},{"alias_kind":"pith_short_16","alias_value":"FELXEUZNJW7PUXVS","created_at":"2026-07-05T04:16:36Z"},{"alias_kind":"pith_short_8","alias_value":"FELXEUZN","created_at":"2026-07-05T04:16:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:FELXEUZNJW7PUXVSA3S3QOD2OI","target":"record","payload":{"canonical_record":{"source":{"id":"2107.10873","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-07-22T18:10:41Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"title_canon_sha256":"8026d3c020c05b636b360f0b73cedc8ee26eaa8a1d848da1303670d4cfe8a466","abstract_canon_sha256":"0243f2336a7a374f50bdba1d888f43982c039a80d1167a13929362c8847e37cf"},"schema_version":"1.0"},"canonical_sha256":"291772532d4dbefa5eb206e5b8387a7201b98b8067e135568ab3d6ccd6760cd3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:16:36.124175Z","signature_b64":"71RMU/Jsv+rE7EZxou1RqV3mE9OMyHEj3ZLY9PP9LQywcleTrPwuSm5sOzL0jiZxcorj5AQIQfoiRhMCF4AaDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"291772532d4dbefa5eb206e5b8387a7201b98b8067e135568ab3d6ccd6760cd3","last_reissued_at":"2026-07-05T04:16:36.123696Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:16:36.123696Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2107.10873","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:16:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H6b2iGRmm8h/vcS1b7gvoIEe+0WYy5oyTXhFTUF+4t7Kcjr+b/1usbKPWYotnRSJIZlBaVRfsXmKjttAFi1ODg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T08:43:39.734611Z"},"content_sha256":"e315677be66f9cfdcadcbec5bf89758d1c3648b9bf35f46f79efe0629228dfc6","schema_version":"1.0","event_id":"sha256:e315677be66f9cfdcadcbec5bf89758d1c3648b9bf35f46f79efe0629228dfc6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:FELXEUZNJW7PUXVSA3S3QOD2OI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Certified Robustness for Ensemble Models and Beyond","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Bhavya Kailkhura, Bo Li, Linyi Li, Tao Xie, Xiaojun Xu, Zhuolin Yang","submitted_at":"2021-07-22T18:10:41Z","abstract_excerpt":"Recent studies show that deep neural networks (DNN) are vulnerable to adversarial examples, which aim to mislead DNNs by adding perturbations with small magnitude. To defend against such attacks, both empirical and theoretical defense approaches have been extensively studied for a single ML model. In this work, we aim to analyze and provide the certified robustness for ensemble ML models, together with the sufficient and necessary conditions of robustness for different ensemble protocols. Although ensemble models are shown more robust than a single model empirically; surprisingly, we find that"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.10873","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2107.10873/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:16:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AP5oJPWbWGqbsAfCT8Mv9I+5avFyyKvtc3FGA3a+auOzatc43+6XjlHoaje4/Zod6P6ML65CPj+j3LXtSGoGCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T08:43:39.734991Z"},"content_sha256":"6ffd2311ce51914cabc4fcaf353e01cba8a26315ebf954985cfe8d3ca400d45b","schema_version":"1.0","event_id":"sha256:6ffd2311ce51914cabc4fcaf353e01cba8a26315ebf954985cfe8d3ca400d45b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FELXEUZNJW7PUXVSA3S3QOD2OI/bundle.json","state_url":"https://pith.science/pith/FELXEUZNJW7PUXVSA3S3QOD2OI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FELXEUZNJW7PUXVSA3S3QOD2OI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T08:43:39Z","links":{"resolver":"https://pith.science/pith/FELXEUZNJW7PUXVSA3S3QOD2OI","bundle":"https://pith.science/pith/FELXEUZNJW7PUXVSA3S3QOD2OI/bundle.json","state":"https://pith.science/pith/FELXEUZNJW7PUXVSA3S3QOD2OI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FELXEUZNJW7PUXVSA3S3QOD2OI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:FELXEUZNJW7PUXVSA3S3QOD2OI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0243f2336a7a374f50bdba1d888f43982c039a80d1167a13929362c8847e37cf","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-07-22T18:10:41Z","title_canon_sha256":"8026d3c020c05b636b360f0b73cedc8ee26eaa8a1d848da1303670d4cfe8a466"},"schema_version":"1.0","source":{"id":"2107.10873","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.10873","created_at":"2026-07-05T04:16:36Z"},{"alias_kind":"arxiv_version","alias_value":"2107.10873v2","created_at":"2026-07-05T04:16:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.10873","created_at":"2026-07-05T04:16:36Z"},{"alias_kind":"pith_short_12","alias_value":"FELXEUZNJW7P","created_at":"2026-07-05T04:16:36Z"},{"alias_kind":"pith_short_16","alias_value":"FELXEUZNJW7PUXVS","created_at":"2026-07-05T04:16:36Z"},{"alias_kind":"pith_short_8","alias_value":"FELXEUZN","created_at":"2026-07-05T04:16:36Z"}],"graph_snapshots":[{"event_id":"sha256:6ffd2311ce51914cabc4fcaf353e01cba8a26315ebf954985cfe8d3ca400d45b","target":"graph","created_at":"2026-07-05T04:16:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2107.10873/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent studies show that deep neural networks (DNN) are vulnerable to adversarial examples, which aim to mislead DNNs by adding perturbations with small magnitude. To defend against such attacks, both empirical and theoretical defense approaches have been extensively studied for a single ML model. In this work, we aim to analyze and provide the certified robustness for ensemble ML models, together with the sufficient and necessary conditions of robustness for different ensemble protocols. Although ensemble models are shown more robust than a single model empirically; surprisingly, we find that","authors_text":"Bhavya Kailkhura, Bo Li, Linyi Li, Tao Xie, Xiaojun Xu, Zhuolin Yang","cross_cats":["cs.AI","cs.CR","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-07-22T18:10:41Z","title":"On the Certified Robustness for Ensemble Models and Beyond"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.10873","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e315677be66f9cfdcadcbec5bf89758d1c3648b9bf35f46f79efe0629228dfc6","target":"record","created_at":"2026-07-05T04:16:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0243f2336a7a374f50bdba1d888f43982c039a80d1167a13929362c8847e37cf","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-07-22T18:10:41Z","title_canon_sha256":"8026d3c020c05b636b360f0b73cedc8ee26eaa8a1d848da1303670d4cfe8a466"},"schema_version":"1.0","source":{"id":"2107.10873","kind":"arxiv","version":2}},"canonical_sha256":"291772532d4dbefa5eb206e5b8387a7201b98b8067e135568ab3d6ccd6760cd3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"291772532d4dbefa5eb206e5b8387a7201b98b8067e135568ab3d6ccd6760cd3","first_computed_at":"2026-07-05T04:16:36.123696Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:16:36.123696Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"71RMU/Jsv+rE7EZxou1RqV3mE9OMyHEj3ZLY9PP9LQywcleTrPwuSm5sOzL0jiZxcorj5AQIQfoiRhMCF4AaDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:16:36.124175Z","signed_message":"canonical_sha256_bytes"},"source_id":"2107.10873","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e315677be66f9cfdcadcbec5bf89758d1c3648b9bf35f46f79efe0629228dfc6","sha256:6ffd2311ce51914cabc4fcaf353e01cba8a26315ebf954985cfe8d3ca400d45b"],"state_sha256":"009dade4f108ab3dd14f80da48d776e3d8ac9aa980362a65f64390a5d57595bb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9AASXEgwWq5Vgj1q6JMKIu4hqivSG1/TnbqTDBO5CwZC43V/ij54R2knBTQjNpMiDQ3HHrHSULa0LqQqlfSpAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T08:43:39.736933Z","bundle_sha256":"c8ecc178ad059a433dbd4c92febf3e7c9e9b539496eed84326dba945642f5a9f"}}