{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:HLRUAN2JXZKVNSHXLELJZFFTAP","short_pith_number":"pith:HLRUAN2J","canonical_record":{"source":{"id":"1909.01492","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-03T23:03:10Z","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"title_canon_sha256":"eaeecc3c8f450dd77fd9cedab91893d6adb54d1b2442c1c35d4f8c56787e17e6","abstract_canon_sha256":"1167ca3972c9651f1da88cc1073fa2b8a6c73643f218977c74bd4b9a3466fab5"},"schema_version":"1.0"},"canonical_sha256":"3ae3403749be5556c8f759169c94b303d6a4c3217ed1a60aa0b1c001f22ce038","source":{"kind":"arxiv","id":"1909.01492","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.01492","created_at":"2026-07-05T00:27:32Z"},{"alias_kind":"arxiv_version","alias_value":"1909.01492v2","created_at":"2026-07-05T00:27:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.01492","created_at":"2026-07-05T00:27:32Z"},{"alias_kind":"pith_short_12","alias_value":"HLRUAN2JXZKV","created_at":"2026-07-05T00:27:32Z"},{"alias_kind":"pith_short_16","alias_value":"HLRUAN2JXZKVNSHX","created_at":"2026-07-05T00:27:32Z"},{"alias_kind":"pith_short_8","alias_value":"HLRUAN2J","created_at":"2026-07-05T00:27:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:HLRUAN2JXZKVNSHXLELJZFFTAP","target":"record","payload":{"canonical_record":{"source":{"id":"1909.01492","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-03T23:03:10Z","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"title_canon_sha256":"eaeecc3c8f450dd77fd9cedab91893d6adb54d1b2442c1c35d4f8c56787e17e6","abstract_canon_sha256":"1167ca3972c9651f1da88cc1073fa2b8a6c73643f218977c74bd4b9a3466fab5"},"schema_version":"1.0"},"canonical_sha256":"3ae3403749be5556c8f759169c94b303d6a4c3217ed1a60aa0b1c001f22ce038","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:27:32.782027Z","signature_b64":"d4TEE/LqWGc1VJVBio6OlmnefAnJJAAAWo+AD3YrbDBYFsQ6ZNEjueKke0+D+YIP3Q8qZvANZvmRzUoR/th6DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3ae3403749be5556c8f759169c94b303d6a4c3217ed1a60aa0b1c001f22ce038","last_reissued_at":"2026-07-05T00:27:32.781557Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:27:32.781557Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1909.01492","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:27:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IFxa9/hNvT7M+rzrV8eG/2IgvZsaOsrfUlC78OYrI0jIJcvEJH2/O0CtEvlaSj3R4AJW44ZrmwVFHPtJvCaLBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T20:41:23.668453Z"},"content_sha256":"56c12267feeb5e8fc1d11e4fa60a021615d2a8bb177882e11132c411fa5b1070","schema_version":"1.0","event_id":"sha256:56c12267feeb5e8fc1d11e4fa60a021615d2a8bb177882e11132c411fa5b1070"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:HLRUAN2JXZKVNSHXLELJZFFTAP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Achieving Verified Robustness to Symbol Substitutions via Interval Bound Propagation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG","stat.ML"],"primary_cat":"cs.CL","authors_text":"Chris Dyer, Dani Yogatama, Johannes Welbl, Krishnamurthy Dvijotham, Po-Sen Huang, Pushmeet Kohli, Robert Stanforth, Sven Gowal","submitted_at":"2019-09-03T23:03:10Z","abstract_excerpt":"Neural networks are part of many contemporary NLP systems, yet their empirical successes come at the price of vulnerability to adversarial attacks. Previous work has used adversarial training and data augmentation to partially mitigate such brittleness, but these are unlikely to find worst-case adversaries due to the complexity of the search space arising from discrete text perturbations. In this work, we approach the problem from the opposite direction: to formally verify a system's robustness against a predefined class of adversarial attacks. We study text classification under synonym replac"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.01492","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1909.01492/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:27:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RcBtdbRQrKFffJSeaDprybNsA1NpF5fFVfsoS2siNescdT6+6oX0L+vtMXkxYKX+3M/1HQvmzvmNbdjg/A11Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T20:41:23.668946Z"},"content_sha256":"f5ac5f706a6166315c71bcda7565dc0f9ed25af61c9cf5800ff76dbd0b8efd69","schema_version":"1.0","event_id":"sha256:f5ac5f706a6166315c71bcda7565dc0f9ed25af61c9cf5800ff76dbd0b8efd69"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HLRUAN2JXZKVNSHXLELJZFFTAP/bundle.json","state_url":"https://pith.science/pith/HLRUAN2JXZKVNSHXLELJZFFTAP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HLRUAN2JXZKVNSHXLELJZFFTAP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T20:41:23Z","links":{"resolver":"https://pith.science/pith/HLRUAN2JXZKVNSHXLELJZFFTAP","bundle":"https://pith.science/pith/HLRUAN2JXZKVNSHXLELJZFFTAP/bundle.json","state":"https://pith.science/pith/HLRUAN2JXZKVNSHXLELJZFFTAP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HLRUAN2JXZKVNSHXLELJZFFTAP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:HLRUAN2JXZKVNSHXLELJZFFTAP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1167ca3972c9651f1da88cc1073fa2b8a6c73643f218977c74bd4b9a3466fab5","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-03T23:03:10Z","title_canon_sha256":"eaeecc3c8f450dd77fd9cedab91893d6adb54d1b2442c1c35d4f8c56787e17e6"},"schema_version":"1.0","source":{"id":"1909.01492","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.01492","created_at":"2026-07-05T00:27:32Z"},{"alias_kind":"arxiv_version","alias_value":"1909.01492v2","created_at":"2026-07-05T00:27:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.01492","created_at":"2026-07-05T00:27:32Z"},{"alias_kind":"pith_short_12","alias_value":"HLRUAN2JXZKV","created_at":"2026-07-05T00:27:32Z"},{"alias_kind":"pith_short_16","alias_value":"HLRUAN2JXZKVNSHX","created_at":"2026-07-05T00:27:32Z"},{"alias_kind":"pith_short_8","alias_value":"HLRUAN2J","created_at":"2026-07-05T00:27:32Z"}],"graph_snapshots":[{"event_id":"sha256:f5ac5f706a6166315c71bcda7565dc0f9ed25af61c9cf5800ff76dbd0b8efd69","target":"graph","created_at":"2026-07-05T00:27:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1909.01492/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural networks are part of many contemporary NLP systems, yet their empirical successes come at the price of vulnerability to adversarial attacks. Previous work has used adversarial training and data augmentation to partially mitigate such brittleness, but these are unlikely to find worst-case adversaries due to the complexity of the search space arising from discrete text perturbations. In this work, we approach the problem from the opposite direction: to formally verify a system's robustness against a predefined class of adversarial attacks. We study text classification under synonym replac","authors_text":"Chris Dyer, Dani Yogatama, Johannes Welbl, Krishnamurthy Dvijotham, Po-Sen Huang, Pushmeet Kohli, Robert Stanforth, Sven Gowal","cross_cats":["cs.CR","cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-03T23:03:10Z","title":"Achieving Verified Robustness to Symbol Substitutions via Interval Bound Propagation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.01492","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:56c12267feeb5e8fc1d11e4fa60a021615d2a8bb177882e11132c411fa5b1070","target":"record","created_at":"2026-07-05T00:27:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1167ca3972c9651f1da88cc1073fa2b8a6c73643f218977c74bd4b9a3466fab5","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2019-09-03T23:03:10Z","title_canon_sha256":"eaeecc3c8f450dd77fd9cedab91893d6adb54d1b2442c1c35d4f8c56787e17e6"},"schema_version":"1.0","source":{"id":"1909.01492","kind":"arxiv","version":2}},"canonical_sha256":"3ae3403749be5556c8f759169c94b303d6a4c3217ed1a60aa0b1c001f22ce038","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3ae3403749be5556c8f759169c94b303d6a4c3217ed1a60aa0b1c001f22ce038","first_computed_at":"2026-07-05T00:27:32.781557Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:27:32.781557Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"d4TEE/LqWGc1VJVBio6OlmnefAnJJAAAWo+AD3YrbDBYFsQ6ZNEjueKke0+D+YIP3Q8qZvANZvmRzUoR/th6DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:27:32.782027Z","signed_message":"canonical_sha256_bytes"},"source_id":"1909.01492","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:56c12267feeb5e8fc1d11e4fa60a021615d2a8bb177882e11132c411fa5b1070","sha256:f5ac5f706a6166315c71bcda7565dc0f9ed25af61c9cf5800ff76dbd0b8efd69"],"state_sha256":"4e17ba556913109a76271f784d49cfd5492f93355f95c8fc65a9907fbabe5261"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WAjSv+ivLd+nnRXQuhK/H+2zLTTFsEVO0C5vgcgHXbQ67na7ztHa+dWsmRN2otlWE2lB7RF4apKGBhrtANLmCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T20:41:23.671976Z","bundle_sha256":"1dd416141d806ecdd7062a78a3c8788cee6afdbb9a9c4527fae51b1776259c58"}}