{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:IMSUZZWRISR77ZQ2PK6RL6ZWYQ","short_pith_number":"pith:IMSUZZWR","canonical_record":{"source":{"id":"2402.14648","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-22T15:53:46Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"3424b4ecfc55be920e1cf75fe8fa9b2a14934af7da0bc183f5a54139ff59ef16","abstract_canon_sha256":"512381e19ec7c3f4a6b77a04ecb4681fb33976bec8e59feaf7169a402ce273e1"},"schema_version":"1.0"},"canonical_sha256":"43254ce6d144a3ffe61a7abd15fb36c401f5d2aa8920eeba3396c4a2da60c38c","source":{"kind":"arxiv","id":"2402.14648","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.14648","created_at":"2026-07-05T12:00:42Z"},{"alias_kind":"arxiv_version","alias_value":"2402.14648v4","created_at":"2026-07-05T12:00:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.14648","created_at":"2026-07-05T12:00:42Z"},{"alias_kind":"pith_short_12","alias_value":"IMSUZZWRISR7","created_at":"2026-07-05T12:00:42Z"},{"alias_kind":"pith_short_16","alias_value":"IMSUZZWRISR77ZQ2","created_at":"2026-07-05T12:00:42Z"},{"alias_kind":"pith_short_8","alias_value":"IMSUZZWR","created_at":"2026-07-05T12:00:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:IMSUZZWRISR77ZQ2PK6RL6ZWYQ","target":"record","payload":{"canonical_record":{"source":{"id":"2402.14648","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-22T15:53:46Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"3424b4ecfc55be920e1cf75fe8fa9b2a14934af7da0bc183f5a54139ff59ef16","abstract_canon_sha256":"512381e19ec7c3f4a6b77a04ecb4681fb33976bec8e59feaf7169a402ce273e1"},"schema_version":"1.0"},"canonical_sha256":"43254ce6d144a3ffe61a7abd15fb36c401f5d2aa8920eeba3396c4a2da60c38c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:00:42.651806Z","signature_b64":"G4Q1yoSCPO/J6oWEwSzEXo+VBwBsrDco6GUABjBQQ+d35v0yzEjHjxcurTCUyiwzO0+57RzA9azilTE+Jx7fAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"43254ce6d144a3ffe61a7abd15fb36c401f5d2aa8920eeba3396c4a2da60c38c","last_reissued_at":"2026-07-05T12:00:42.651294Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:00:42.651294Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.14648","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:00:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0g1mLmA7/H/HTVBW4Ym0WY6b7Rm+AGncb07lf9IDYhjPbQUkDJ+8oqTecFFD1Eq2QpfKIFNrqV7VLl+r5BvuCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T03:11:43.407990Z"},"content_sha256":"85bc96e872efb7d034225b288b8017904494c84d2f526be7d403f068f03aa9f4","schema_version":"1.0","event_id":"sha256:85bc96e872efb7d034225b288b8017904494c84d2f526be7d403f068f03aa9f4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:IMSUZZWRISR77ZQ2PK6RL6ZWYQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Rethinking Invariance Regularization in Adversarial Training to Improve Robustness-Accuracy Trade-off","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Ching-Chun Chang, Futa Waseda, Isao Echizen","submitted_at":"2024-02-22T15:53:46Z","abstract_excerpt":"Adversarial training often suffers from a robustness-accuracy trade-off, where achieving high robustness comes at the cost of accuracy. One approach to mitigate this trade-off is leveraging invariance regularization, which encourages model invariance under adversarial perturbations; however, it still leads to accuracy loss. In this work, we closely analyze the challenges of using invariance regularization in adversarial training and understand how to address them. Our analysis identifies two key issues: (1) a ``gradient conflict\" between invariance and classification objectives, leading to sub"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.14648","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.14648/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:00:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZFvyf/VZFIFCsDhZ0P2tJ9XV3dUQmaerpSd07ETKB4+nzdTTT6pHOv0PapUhnRu24au0bflfkuaYq2oQY1qrAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T03:11:43.408371Z"},"content_sha256":"2c66f2fd684cc7cb3c7fb71da44d7e8cf837a7fe6b2cfea54ca0b3e7186fdd5a","schema_version":"1.0","event_id":"sha256:2c66f2fd684cc7cb3c7fb71da44d7e8cf837a7fe6b2cfea54ca0b3e7186fdd5a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IMSUZZWRISR77ZQ2PK6RL6ZWYQ/bundle.json","state_url":"https://pith.science/pith/IMSUZZWRISR77ZQ2PK6RL6ZWYQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IMSUZZWRISR77ZQ2PK6RL6ZWYQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T03:11:43Z","links":{"resolver":"https://pith.science/pith/IMSUZZWRISR77ZQ2PK6RL6ZWYQ","bundle":"https://pith.science/pith/IMSUZZWRISR77ZQ2PK6RL6ZWYQ/bundle.json","state":"https://pith.science/pith/IMSUZZWRISR77ZQ2PK6RL6ZWYQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IMSUZZWRISR77ZQ2PK6RL6ZWYQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:IMSUZZWRISR77ZQ2PK6RL6ZWYQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"512381e19ec7c3f4a6b77a04ecb4681fb33976bec8e59feaf7169a402ce273e1","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-22T15:53:46Z","title_canon_sha256":"3424b4ecfc55be920e1cf75fe8fa9b2a14934af7da0bc183f5a54139ff59ef16"},"schema_version":"1.0","source":{"id":"2402.14648","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.14648","created_at":"2026-07-05T12:00:42Z"},{"alias_kind":"arxiv_version","alias_value":"2402.14648v4","created_at":"2026-07-05T12:00:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.14648","created_at":"2026-07-05T12:00:42Z"},{"alias_kind":"pith_short_12","alias_value":"IMSUZZWRISR7","created_at":"2026-07-05T12:00:42Z"},{"alias_kind":"pith_short_16","alias_value":"IMSUZZWRISR77ZQ2","created_at":"2026-07-05T12:00:42Z"},{"alias_kind":"pith_short_8","alias_value":"IMSUZZWR","created_at":"2026-07-05T12:00:42Z"}],"graph_snapshots":[{"event_id":"sha256:2c66f2fd684cc7cb3c7fb71da44d7e8cf837a7fe6b2cfea54ca0b3e7186fdd5a","target":"graph","created_at":"2026-07-05T12:00:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.14648/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial training often suffers from a robustness-accuracy trade-off, where achieving high robustness comes at the cost of accuracy. One approach to mitigate this trade-off is leveraging invariance regularization, which encourages model invariance under adversarial perturbations; however, it still leads to accuracy loss. In this work, we closely analyze the challenges of using invariance regularization in adversarial training and understand how to address them. Our analysis identifies two key issues: (1) a ``gradient conflict\" between invariance and classification objectives, leading to sub","authors_text":"Ching-Chun Chang, Futa Waseda, Isao Echizen","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-22T15:53:46Z","title":"Rethinking Invariance Regularization in Adversarial Training to Improve Robustness-Accuracy Trade-off"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.14648","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:85bc96e872efb7d034225b288b8017904494c84d2f526be7d403f068f03aa9f4","target":"record","created_at":"2026-07-05T12:00:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"512381e19ec7c3f4a6b77a04ecb4681fb33976bec8e59feaf7169a402ce273e1","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2024-02-22T15:53:46Z","title_canon_sha256":"3424b4ecfc55be920e1cf75fe8fa9b2a14934af7da0bc183f5a54139ff59ef16"},"schema_version":"1.0","source":{"id":"2402.14648","kind":"arxiv","version":4}},"canonical_sha256":"43254ce6d144a3ffe61a7abd15fb36c401f5d2aa8920eeba3396c4a2da60c38c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"43254ce6d144a3ffe61a7abd15fb36c401f5d2aa8920eeba3396c4a2da60c38c","first_computed_at":"2026-07-05T12:00:42.651294Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:00:42.651294Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"G4Q1yoSCPO/J6oWEwSzEXo+VBwBsrDco6GUABjBQQ+d35v0yzEjHjxcurTCUyiwzO0+57RzA9azilTE+Jx7fAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:00:42.651806Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.14648","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:85bc96e872efb7d034225b288b8017904494c84d2f526be7d403f068f03aa9f4","sha256:2c66f2fd684cc7cb3c7fb71da44d7e8cf837a7fe6b2cfea54ca0b3e7186fdd5a"],"state_sha256":"6b8f8bcf97e9aeff73cc644c36585963fd49ffff9fcff808585d99a6f42f8f9a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xFsXDdfYpNXfxI4kKQALZXzLD3aoAf/s/kf1Oucq4zFh88J8EDEWs3IBiTZflPvtN/HJmgD/4hu8zw7r0LE8DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T03:11:43.412284Z","bundle_sha256":"576597feb1ec9113bc71e0656b8a323aa2f3770cb1ef5033b2d12c57fa0461c9"}}