{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:HSR37HYWXZFCUZGT2UEVKBKK3Q","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"27ac9da3a861ed74208d7280db54c2e0a93801d3170cad118c20c5273275abf9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-08-24T01:03:40Z","title_canon_sha256":"0bc553fe9594ee4b807b9b479674611e75b75376fc545832bfbb82406060b5e1"},"schema_version":"1.0","source":{"id":"2508.17174","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.17174","created_at":"2026-07-05T11:58:36Z"},{"alias_kind":"arxiv_version","alias_value":"2508.17174v1","created_at":"2026-07-05T11:58:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.17174","created_at":"2026-07-05T11:58:36Z"},{"alias_kind":"pith_short_12","alias_value":"HSR37HYWXZFC","created_at":"2026-07-05T11:58:36Z"},{"alias_kind":"pith_short_16","alias_value":"HSR37HYWXZFCUZGT","created_at":"2026-07-05T11:58:36Z"},{"alias_kind":"pith_short_8","alias_value":"HSR37HYW","created_at":"2026-07-05T11:58:36Z"}],"graph_snapshots":[{"event_id":"sha256:4e7e18bc03b36bbd3237188300989004fff7bc925523308f8d300ba7aa84e62f","target":"graph","created_at":"2026-07-05T11:58:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.17174/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Out-of-distribution (OOD) detection ensures safe and reliable model deployment. Contemporary OOD algorithms using geometry projection can detect OOD or adversarial samples from clean in-distribution (ID) samples. However, this setting regards adversarial ID samples as OOD, leading to incorrect OOD predictions. Existing efforts on OOD detection with ID and OOD data under attacks are minimal. In this paper, we develop a robust OOD detection method that distinguishes adversarial ID samples from OOD ones. The sharp loss landscape created by adversarial training hinders model convergence, impacting","authors_text":"Jeng-Lin Li, Ming-Ching Chang, Wei-Chao Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-08-24T01:03:40Z","title":"Sharpness-Aware Geometric Defense for Robust Out-Of-Distribution Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.17174","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f1d69705ad947530d0285c89ca25980de4566da8dfaefd7adc653bdc1f0b7fa7","target":"record","created_at":"2026-07-05T11:58:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"27ac9da3a861ed74208d7280db54c2e0a93801d3170cad118c20c5273275abf9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-08-24T01:03:40Z","title_canon_sha256":"0bc553fe9594ee4b807b9b479674611e75b75376fc545832bfbb82406060b5e1"},"schema_version":"1.0","source":{"id":"2508.17174","kind":"arxiv","version":1}},"canonical_sha256":"3ca3bf9f16be4a2a64d3d50955054adc2ed22a5cd0f72615e867ff9b305acd2e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3ca3bf9f16be4a2a64d3d50955054adc2ed22a5cd0f72615e867ff9b305acd2e","first_computed_at":"2026-07-05T11:58:36.977004Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:58:36.977004Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"T0T5TkqhbbpWVy+fXQGyGTensxfcBzJ1NXC99Yf/U8EfIWYwVcfuMB0vCglSh7TJZ2neNiSARBP4wOPyrfoXDw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:58:36.977477Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.17174","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f1d69705ad947530d0285c89ca25980de4566da8dfaefd7adc653bdc1f0b7fa7","sha256:4e7e18bc03b36bbd3237188300989004fff7bc925523308f8d300ba7aa84e62f"],"state_sha256":"ccea25468c0aa075df83ee0799ab8528397713e12b5555c95f8800e94df0bd17"}