{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:HQ4X5HWYQLK7YAJDJVLUI3HVTN","short_pith_number":"pith:HQ4X5HWY","canonical_record":{"source":{"id":"2305.15792","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-25T07:16:00Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"e7308abdc610c555e90f71ec7dfb93fc1509c5db627552eff4bde2f0d0dced49","abstract_canon_sha256":"d4bcc11b822cf63639a72dce26222d31288290d51077dafb3f759630237ef6eb"},"schema_version":"1.0"},"canonical_sha256":"3c397e9ed882d5fc01234d57446cf59b503a1948f882ec2ed4839be1eeae32ed","source":{"kind":"arxiv","id":"2305.15792","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.15792","created_at":"2026-07-05T08:11:52Z"},{"alias_kind":"arxiv_version","alias_value":"2305.15792v2","created_at":"2026-07-05T08:11:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.15792","created_at":"2026-07-05T08:11:52Z"},{"alias_kind":"pith_short_12","alias_value":"HQ4X5HWYQLK7","created_at":"2026-07-05T08:11:52Z"},{"alias_kind":"pith_short_16","alias_value":"HQ4X5HWYQLK7YAJD","created_at":"2026-07-05T08:11:52Z"},{"alias_kind":"pith_short_8","alias_value":"HQ4X5HWY","created_at":"2026-07-05T08:11:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:HQ4X5HWYQLK7YAJDJVLUI3HVTN","target":"record","payload":{"canonical_record":{"source":{"id":"2305.15792","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-25T07:16:00Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"e7308abdc610c555e90f71ec7dfb93fc1509c5db627552eff4bde2f0d0dced49","abstract_canon_sha256":"d4bcc11b822cf63639a72dce26222d31288290d51077dafb3f759630237ef6eb"},"schema_version":"1.0"},"canonical_sha256":"3c397e9ed882d5fc01234d57446cf59b503a1948f882ec2ed4839be1eeae32ed","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:11:52.970882Z","signature_b64":"bxOOEpDE7lhgQqtgSaOryEc+Yuny4zexD2VZsWHRRYYNt0pOf7BSTcKM5IzpiJKZo0om2huStH5yVTBw5cxWBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3c397e9ed882d5fc01234d57446cf59b503a1948f882ec2ed4839be1eeae32ed","last_reissued_at":"2026-07-05T08:11:52.970416Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:11:52.970416Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.15792","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:11:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rZprOxhPgAIROYcV4TwLcPVIQcZmiYIhXqXHvXGjmHUIJGg4lUlDLVGkUUmeghFgqA4l7eaMo+JUihkoEW9xCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T19:11:40.524590Z"},"content_sha256":"c2b77c80b7e2519ace9f332144dd9668b82c272bc152aa3fb9ea99a03de79d60","schema_version":"1.0","event_id":"sha256:c2b77c80b7e2519ace9f332144dd9668b82c272bc152aa3fb9ea99a03de79d60"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:HQ4X5HWYQLK7YAJDJVLUI3HVTN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"IDEA: Invariant Defense for Graph Adversarial Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Bingbing Xu, Huawei Shen, Qi Cao, Shuchang Tao, Xueqi Cheng, Yunfan Wu","submitted_at":"2023-05-25T07:16:00Z","abstract_excerpt":"Despite the success of graph neural networks (GNNs), their vulnerability to adversarial attacks poses tremendous challenges for practical applications. Existing defense methods suffer from severe performance decline under unseen attacks, due to either limited observed adversarial examples or pre-defined heuristics. To address these limitations, we analyze the causalities in graph adversarial attacks and conclude that causal features are key to achieve graph adversarial robustness, owing to their determinedness for labels and invariance across attacks. To learn these causal features, we innovat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.15792","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.15792/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:11:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RkdWvuFITYKcTOy+Hecrhe7uwgX4k3M8921m+II7dZahcYgdxMHFZl/nbKkjsSiApXTz0x6aAKp7w8RStumABg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T19:11:40.525097Z"},"content_sha256":"2a4560b66b1a9056e5921afe53e670d7e5cc6d2b89ff3021b155ef7abb0c4556","schema_version":"1.0","event_id":"sha256:2a4560b66b1a9056e5921afe53e670d7e5cc6d2b89ff3021b155ef7abb0c4556"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HQ4X5HWYQLK7YAJDJVLUI3HVTN/bundle.json","state_url":"https://pith.science/pith/HQ4X5HWYQLK7YAJDJVLUI3HVTN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HQ4X5HWYQLK7YAJDJVLUI3HVTN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T19:11:40Z","links":{"resolver":"https://pith.science/pith/HQ4X5HWYQLK7YAJDJVLUI3HVTN","bundle":"https://pith.science/pith/HQ4X5HWYQLK7YAJDJVLUI3HVTN/bundle.json","state":"https://pith.science/pith/HQ4X5HWYQLK7YAJDJVLUI3HVTN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HQ4X5HWYQLK7YAJDJVLUI3HVTN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:HQ4X5HWYQLK7YAJDJVLUI3HVTN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d4bcc11b822cf63639a72dce26222d31288290d51077dafb3f759630237ef6eb","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-25T07:16:00Z","title_canon_sha256":"e7308abdc610c555e90f71ec7dfb93fc1509c5db627552eff4bde2f0d0dced49"},"schema_version":"1.0","source":{"id":"2305.15792","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.15792","created_at":"2026-07-05T08:11:52Z"},{"alias_kind":"arxiv_version","alias_value":"2305.15792v2","created_at":"2026-07-05T08:11:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.15792","created_at":"2026-07-05T08:11:52Z"},{"alias_kind":"pith_short_12","alias_value":"HQ4X5HWYQLK7","created_at":"2026-07-05T08:11:52Z"},{"alias_kind":"pith_short_16","alias_value":"HQ4X5HWYQLK7YAJD","created_at":"2026-07-05T08:11:52Z"},{"alias_kind":"pith_short_8","alias_value":"HQ4X5HWY","created_at":"2026-07-05T08:11:52Z"}],"graph_snapshots":[{"event_id":"sha256:2a4560b66b1a9056e5921afe53e670d7e5cc6d2b89ff3021b155ef7abb0c4556","target":"graph","created_at":"2026-07-05T08:11:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.15792/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite the success of graph neural networks (GNNs), their vulnerability to adversarial attacks poses tremendous challenges for practical applications. Existing defense methods suffer from severe performance decline under unseen attacks, due to either limited observed adversarial examples or pre-defined heuristics. To address these limitations, we analyze the causalities in graph adversarial attacks and conclude that causal features are key to achieve graph adversarial robustness, owing to their determinedness for labels and invariance across attacks. To learn these causal features, we innovat","authors_text":"Bingbing Xu, Huawei Shen, Qi Cao, Shuchang Tao, Xueqi Cheng, Yunfan Wu","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-25T07:16:00Z","title":"IDEA: Invariant Defense for Graph Adversarial Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.15792","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c2b77c80b7e2519ace9f332144dd9668b82c272bc152aa3fb9ea99a03de79d60","target":"record","created_at":"2026-07-05T08:11:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d4bcc11b822cf63639a72dce26222d31288290d51077dafb3f759630237ef6eb","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-25T07:16:00Z","title_canon_sha256":"e7308abdc610c555e90f71ec7dfb93fc1509c5db627552eff4bde2f0d0dced49"},"schema_version":"1.0","source":{"id":"2305.15792","kind":"arxiv","version":2}},"canonical_sha256":"3c397e9ed882d5fc01234d57446cf59b503a1948f882ec2ed4839be1eeae32ed","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3c397e9ed882d5fc01234d57446cf59b503a1948f882ec2ed4839be1eeae32ed","first_computed_at":"2026-07-05T08:11:52.970416Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:11:52.970416Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bxOOEpDE7lhgQqtgSaOryEc+Yuny4zexD2VZsWHRRYYNt0pOf7BSTcKM5IzpiJKZo0om2huStH5yVTBw5cxWBg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:11:52.970882Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.15792","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c2b77c80b7e2519ace9f332144dd9668b82c272bc152aa3fb9ea99a03de79d60","sha256:2a4560b66b1a9056e5921afe53e670d7e5cc6d2b89ff3021b155ef7abb0c4556"],"state_sha256":"7ee8d153b3058dc3493f458013ef1c5bd448f31c95eb419281dd49035ce23229"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"myCy4fGeGXq1rNimHWhzTojCRhxFv3drer2dAfiofrzwJA72vARt80XrYEearjfej1eUTJSXhu1xQMJq2DjEDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T19:11:40.529683Z","bundle_sha256":"366c2dc27ece791ca70ea231e1ae761b94e1c24cdc69291fdcef9d98ca8cbcd8"}}