{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:IAJWTSFNTT432VNS7QHVACW34L","short_pith_number":"pith:IAJWTSFN","canonical_record":{"source":{"id":"2306.09951","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-16T16:32:27Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"74a940e4f634f553495c98a7a464f03177d2f3e52661afee1c9f88ff6d525404","abstract_canon_sha256":"619090315672ba40bf661bacf661e657df3e52ee11b5048922bfd0d87c934d7e"},"schema_version":"1.0"},"canonical_sha256":"401369c8ad9cf9bd55b2fc0f500adbe2e3ca80085c07b1ebd97e6841ee01c828","source":{"kind":"arxiv","id":"2306.09951","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.09951","created_at":"2026-07-05T06:21:25Z"},{"alias_kind":"arxiv_version","alias_value":"2306.09951v1","created_at":"2026-07-05T06:21:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.09951","created_at":"2026-07-05T06:21:25Z"},{"alias_kind":"pith_short_12","alias_value":"IAJWTSFNTT43","created_at":"2026-07-05T06:21:25Z"},{"alias_kind":"pith_short_16","alias_value":"IAJWTSFNTT432VNS","created_at":"2026-07-05T06:21:25Z"},{"alias_kind":"pith_short_8","alias_value":"IAJWTSFN","created_at":"2026-07-05T06:21:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:IAJWTSFNTT432VNS7QHVACW34L","target":"record","payload":{"canonical_record":{"source":{"id":"2306.09951","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-16T16:32:27Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"74a940e4f634f553495c98a7a464f03177d2f3e52661afee1c9f88ff6d525404","abstract_canon_sha256":"619090315672ba40bf661bacf661e657df3e52ee11b5048922bfd0d87c934d7e"},"schema_version":"1.0"},"canonical_sha256":"401369c8ad9cf9bd55b2fc0f500adbe2e3ca80085c07b1ebd97e6841ee01c828","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:21:25.893861Z","signature_b64":"goKPrX6ium6NGSf/ABTYRMSqpQ4trQy01dhkbXkwPim+AMbHGt5aT6ap2vIgKGEEaa7BLL6DYsl65FMeC+N+CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"401369c8ad9cf9bd55b2fc0f500adbe2e3ca80085c07b1ebd97e6841ee01c828","last_reissued_at":"2026-07-05T06:21:25.893337Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:21:25.893337Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.09951","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:21:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5lZ6rEIo++pir5dVWkxyRq7c+jTSuwILUg6bQYB2Tsh+Wput18djgfryHD5a3Kf0h5p/jQ4colePmCCt7R5zCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T18:43:08.607543Z"},"content_sha256":"7a140167eaf934e575ecba7879315ac0b932fe3849d5ebc0f0b99d689fee3328","schema_version":"1.0","event_id":"sha256:7a140167eaf934e575ecba7879315ac0b932fe3849d5ebc0f0b99d689fee3328"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:IAJWTSFNTT432VNS7QHVACW34L","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"You Don't Need Robust Machine Learning to Manage Adversarial Attack Risks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Andrew L. Farris, Edward Raff, Michel Benaroch","submitted_at":"2023-06-16T16:32:27Z","abstract_excerpt":"The robustness of modern machine learning (ML) models has become an increasing concern within the community. The ability to subvert a model into making errant predictions using seemingly inconsequential changes to input is startling, as is our lack of success in building models robust to this concern. Existing research shows progress, but current mitigations come with a high cost and simultaneously reduce the model's accuracy. However, such trade-offs may not be necessary when other design choices could subvert the risk. In this survey we review the current literature on attacks and their real"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.09951","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.09951/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:21:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z/A7ThR4rvJy3hXcKcG6EpeXmp694UbZGCH8z6e55zhbkG9Y46tDHv1mUwa3skSikhF3ipQVrPGahWPAwPgZCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T18:43:08.608456Z"},"content_sha256":"4fe99c8f038698c4a3e555df7b4bcfa254b972c15ce3d216419c1c8b2cbc17a6","schema_version":"1.0","event_id":"sha256:4fe99c8f038698c4a3e555df7b4bcfa254b972c15ce3d216419c1c8b2cbc17a6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IAJWTSFNTT432VNS7QHVACW34L/bundle.json","state_url":"https://pith.science/pith/IAJWTSFNTT432VNS7QHVACW34L/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IAJWTSFNTT432VNS7QHVACW34L/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T18:43:08Z","links":{"resolver":"https://pith.science/pith/IAJWTSFNTT432VNS7QHVACW34L","bundle":"https://pith.science/pith/IAJWTSFNTT432VNS7QHVACW34L/bundle.json","state":"https://pith.science/pith/IAJWTSFNTT432VNS7QHVACW34L/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IAJWTSFNTT432VNS7QHVACW34L/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:IAJWTSFNTT432VNS7QHVACW34L","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"619090315672ba40bf661bacf661e657df3e52ee11b5048922bfd0d87c934d7e","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-16T16:32:27Z","title_canon_sha256":"74a940e4f634f553495c98a7a464f03177d2f3e52661afee1c9f88ff6d525404"},"schema_version":"1.0","source":{"id":"2306.09951","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.09951","created_at":"2026-07-05T06:21:25Z"},{"alias_kind":"arxiv_version","alias_value":"2306.09951v1","created_at":"2026-07-05T06:21:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.09951","created_at":"2026-07-05T06:21:25Z"},{"alias_kind":"pith_short_12","alias_value":"IAJWTSFNTT43","created_at":"2026-07-05T06:21:25Z"},{"alias_kind":"pith_short_16","alias_value":"IAJWTSFNTT432VNS","created_at":"2026-07-05T06:21:25Z"},{"alias_kind":"pith_short_8","alias_value":"IAJWTSFN","created_at":"2026-07-05T06:21:25Z"}],"graph_snapshots":[{"event_id":"sha256:4fe99c8f038698c4a3e555df7b4bcfa254b972c15ce3d216419c1c8b2cbc17a6","target":"graph","created_at":"2026-07-05T06:21:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.09951/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The robustness of modern machine learning (ML) models has become an increasing concern within the community. The ability to subvert a model into making errant predictions using seemingly inconsequential changes to input is startling, as is our lack of success in building models robust to this concern. Existing research shows progress, but current mitigations come with a high cost and simultaneously reduce the model's accuracy. However, such trade-offs may not be necessary when other design choices could subvert the risk. In this survey we review the current literature on attacks and their real","authors_text":"Andrew L. Farris, Edward Raff, Michel Benaroch","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-16T16:32:27Z","title":"You Don't Need Robust Machine Learning to Manage Adversarial Attack Risks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.09951","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7a140167eaf934e575ecba7879315ac0b932fe3849d5ebc0f0b99d689fee3328","target":"record","created_at":"2026-07-05T06:21:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"619090315672ba40bf661bacf661e657df3e52ee11b5048922bfd0d87c934d7e","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-16T16:32:27Z","title_canon_sha256":"74a940e4f634f553495c98a7a464f03177d2f3e52661afee1c9f88ff6d525404"},"schema_version":"1.0","source":{"id":"2306.09951","kind":"arxiv","version":1}},"canonical_sha256":"401369c8ad9cf9bd55b2fc0f500adbe2e3ca80085c07b1ebd97e6841ee01c828","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"401369c8ad9cf9bd55b2fc0f500adbe2e3ca80085c07b1ebd97e6841ee01c828","first_computed_at":"2026-07-05T06:21:25.893337Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:21:25.893337Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"goKPrX6ium6NGSf/ABTYRMSqpQ4trQy01dhkbXkwPim+AMbHGt5aT6ap2vIgKGEEaa7BLL6DYsl65FMeC+N+CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:21:25.893861Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.09951","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7a140167eaf934e575ecba7879315ac0b932fe3849d5ebc0f0b99d689fee3328","sha256:4fe99c8f038698c4a3e555df7b4bcfa254b972c15ce3d216419c1c8b2cbc17a6"],"state_sha256":"98e3c29b54cf9bf4e1367f40d109083d8dbb4a36441151cab0b8c975f4e80037"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NRq0+q1HudGurwuh8ieQG9BTEkN/HpbGYw+7mJWA93/6oDr2PfSmMjRZL1O3Jx8al+40WSR/XovdjlGddjneCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T18:43:08.616386Z","bundle_sha256":"472b3079b162d2fd0f3dba3641b3ec52e10f264d5b0cffa1e9895f38dfc41e78"}}