{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:G3DC7F6FJTU7SWDEGNW4KDM3B6","short_pith_number":"pith:G3DC7F6F","canonical_record":{"source":{"id":"2410.04682","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-07T01:29:19Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"e8ae12314f580eb0da670fb5ae15f62f4dca47660cc36fcf04a67d01b3d89cd1","abstract_canon_sha256":"bb87b75d04c5deef803759e22f5d174c9f25ea9c66eecb48d20fd7eaa836fe62"},"schema_version":"1.0"},"canonical_sha256":"36c62f97c54ce9f95864336dc50d9b0f88ff90df968faff4f8ae4263454db862","source":{"kind":"arxiv","id":"2410.04682","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.04682","created_at":"2026-07-05T10:21:24Z"},{"alias_kind":"arxiv_version","alias_value":"2410.04682v3","created_at":"2026-07-05T10:21:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.04682","created_at":"2026-07-05T10:21:24Z"},{"alias_kind":"pith_short_12","alias_value":"G3DC7F6FJTU7","created_at":"2026-07-05T10:21:24Z"},{"alias_kind":"pith_short_16","alias_value":"G3DC7F6FJTU7SWDE","created_at":"2026-07-05T10:21:24Z"},{"alias_kind":"pith_short_8","alias_value":"G3DC7F6F","created_at":"2026-07-05T10:21:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:G3DC7F6FJTU7SWDEGNW4KDM3B6","target":"record","payload":{"canonical_record":{"source":{"id":"2410.04682","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-07T01:29:19Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"e8ae12314f580eb0da670fb5ae15f62f4dca47660cc36fcf04a67d01b3d89cd1","abstract_canon_sha256":"bb87b75d04c5deef803759e22f5d174c9f25ea9c66eecb48d20fd7eaa836fe62"},"schema_version":"1.0"},"canonical_sha256":"36c62f97c54ce9f95864336dc50d9b0f88ff90df968faff4f8ae4263454db862","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:21:24.170872Z","signature_b64":"FS3OZApUDPfKb8KaV+50hpvcowx1r2rpfF+1whhHg1xVnOsgOmz86BE+0PJGYgfsS7VbmFIO2vhWlew1W0tqAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"36c62f97c54ce9f95864336dc50d9b0f88ff90df968faff4f8ae4263454db862","last_reissued_at":"2026-07-05T10:21:24.170324Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:21:24.170324Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.04682","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:21:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uMqRlYVdsnwr00wd9in3Ks0uyWPE5KLDtmKpwQzfDaHbjJyvLoH1SMzW6POTdvIaDtwI2NF6gUuHy0WqpkgPBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T20:10:38.527763Z"},"content_sha256":"9d84fc6773724b6cae13b3429a0ed394583ba48a5a28f0889db431c498c4c3ce","schema_version":"1.0","event_id":"sha256:9d84fc6773724b6cae13b3429a0ed394583ba48a5a28f0889db431c498c4c3ce"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:G3DC7F6FJTU7SWDEGNW4KDM3B6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Adversarial Risk of Test Time Adaptation: An Investigation into Realistic Test-Time Data Poisoning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Chuan-Sheng Foo, Kui Jia, Nanqing Liu, Xulei Yang, Xun Xu, Yongyi Su, Yushu Li","submitted_at":"2024-10-07T01:29:19Z","abstract_excerpt":"Test-time adaptation (TTA) updates the model weights during the inference stage using testing data to enhance generalization. However, this practice exposes TTA to adversarial risks. Existing studies have shown that when TTA is updated with crafted adversarial test samples, also known as test-time poisoned data, the performance on benign samples can deteriorate. Nonetheless, the perceived adversarial risk may be overstated if the poisoned data is generated under overly strong assumptions. In this work, we first review realistic assumptions for test-time data poisoning, including white-box vers"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.04682","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.04682/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:21:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SrbU0s2s/ueg4v18rcb342utnjqJAVAayLl8jJwKsM4u0sfWqiRdLQ6A3ON390wGxrGopcwCfWsFFf9cBFiXCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T20:10:38.528290Z"},"content_sha256":"f87015dab79e5a440a33f9e22a34aa26bf88ca9228781f0f7600f487778c1ec8","schema_version":"1.0","event_id":"sha256:f87015dab79e5a440a33f9e22a34aa26bf88ca9228781f0f7600f487778c1ec8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6/bundle.json","state_url":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T20:10:38Z","links":{"resolver":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6","bundle":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6/bundle.json","state":"https://pith.science/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/G3DC7F6FJTU7SWDEGNW4KDM3B6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:G3DC7F6FJTU7SWDEGNW4KDM3B6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bb87b75d04c5deef803759e22f5d174c9f25ea9c66eecb48d20fd7eaa836fe62","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-07T01:29:19Z","title_canon_sha256":"e8ae12314f580eb0da670fb5ae15f62f4dca47660cc36fcf04a67d01b3d89cd1"},"schema_version":"1.0","source":{"id":"2410.04682","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.04682","created_at":"2026-07-05T10:21:24Z"},{"alias_kind":"arxiv_version","alias_value":"2410.04682v3","created_at":"2026-07-05T10:21:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.04682","created_at":"2026-07-05T10:21:24Z"},{"alias_kind":"pith_short_12","alias_value":"G3DC7F6FJTU7","created_at":"2026-07-05T10:21:24Z"},{"alias_kind":"pith_short_16","alias_value":"G3DC7F6FJTU7SWDE","created_at":"2026-07-05T10:21:24Z"},{"alias_kind":"pith_short_8","alias_value":"G3DC7F6F","created_at":"2026-07-05T10:21:24Z"}],"graph_snapshots":[{"event_id":"sha256:f87015dab79e5a440a33f9e22a34aa26bf88ca9228781f0f7600f487778c1ec8","target":"graph","created_at":"2026-07-05T10:21:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.04682/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Test-time adaptation (TTA) updates the model weights during the inference stage using testing data to enhance generalization. However, this practice exposes TTA to adversarial risks. Existing studies have shown that when TTA is updated with crafted adversarial test samples, also known as test-time poisoned data, the performance on benign samples can deteriorate. Nonetheless, the perceived adversarial risk may be overstated if the poisoned data is generated under overly strong assumptions. In this work, we first review realistic assumptions for test-time data poisoning, including white-box vers","authors_text":"Chuan-Sheng Foo, Kui Jia, Nanqing Liu, Xulei Yang, Xun Xu, Yongyi Su, Yushu Li","cross_cats":["cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-07T01:29:19Z","title":"On the Adversarial Risk of Test Time Adaptation: An Investigation into Realistic Test-Time Data Poisoning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.04682","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9d84fc6773724b6cae13b3429a0ed394583ba48a5a28f0889db431c498c4c3ce","target":"record","created_at":"2026-07-05T10:21:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bb87b75d04c5deef803759e22f5d174c9f25ea9c66eecb48d20fd7eaa836fe62","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-10-07T01:29:19Z","title_canon_sha256":"e8ae12314f580eb0da670fb5ae15f62f4dca47660cc36fcf04a67d01b3d89cd1"},"schema_version":"1.0","source":{"id":"2410.04682","kind":"arxiv","version":3}},"canonical_sha256":"36c62f97c54ce9f95864336dc50d9b0f88ff90df968faff4f8ae4263454db862","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"36c62f97c54ce9f95864336dc50d9b0f88ff90df968faff4f8ae4263454db862","first_computed_at":"2026-07-05T10:21:24.170324Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:21:24.170324Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FS3OZApUDPfKb8KaV+50hpvcowx1r2rpfF+1whhHg1xVnOsgOmz86BE+0PJGYgfsS7VbmFIO2vhWlew1W0tqAg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:21:24.170872Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.04682","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9d84fc6773724b6cae13b3429a0ed394583ba48a5a28f0889db431c498c4c3ce","sha256:f87015dab79e5a440a33f9e22a34aa26bf88ca9228781f0f7600f487778c1ec8"],"state_sha256":"69fa0372826f5fd750115bbec00dd07de6239ea9112caa4b6907b55588178c50"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pwAA0J4v5LWgUWzRjgPoaitdzNcCMVdww1SBPQfS+fgcWCjiUtOtNwGg5HtUe0dmieAgktv9Y/5xOintKkv8BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T20:10:38.537787Z","bundle_sha256":"234636db345b3e27a9e35cbdfd39acbda4a087674be2576e393d51bdcd675c8b"}}