{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:J4OVTRKFVLSA4INYOPVI6BSGPI","short_pith_number":"pith:J4OVTRKF","canonical_record":{"source":{"id":"2201.02504","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-12-29T03:57:02Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"18e010f0f61b327d9d7ad4ec6cdefceb6f5aa9a42dc8630fb6c1ac880a53c1ca","abstract_canon_sha256":"ca7239d123750c2c2e0c52ad02b175aaa790ee2ea64683f161976dce56446a95"},"schema_version":"1.0"},"canonical_sha256":"4f1d59c545aae40e21b873ea8f06467a32f1f6f6c948e89cdc407c566f8a0c99","source":{"kind":"arxiv","id":"2201.02504","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.02504","created_at":"2026-07-05T03:46:41Z"},{"alias_kind":"arxiv_version","alias_value":"2201.02504v1","created_at":"2026-07-05T03:46:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.02504","created_at":"2026-07-05T03:46:41Z"},{"alias_kind":"pith_short_12","alias_value":"J4OVTRKFVLSA","created_at":"2026-07-05T03:46:41Z"},{"alias_kind":"pith_short_16","alias_value":"J4OVTRKFVLSA4INY","created_at":"2026-07-05T03:46:41Z"},{"alias_kind":"pith_short_8","alias_value":"J4OVTRKF","created_at":"2026-07-05T03:46:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:J4OVTRKFVLSA4INYOPVI6BSGPI","target":"record","payload":{"canonical_record":{"source":{"id":"2201.02504","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-12-29T03:57:02Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"18e010f0f61b327d9d7ad4ec6cdefceb6f5aa9a42dc8630fb6c1ac880a53c1ca","abstract_canon_sha256":"ca7239d123750c2c2e0c52ad02b175aaa790ee2ea64683f161976dce56446a95"},"schema_version":"1.0"},"canonical_sha256":"4f1d59c545aae40e21b873ea8f06467a32f1f6f6c948e89cdc407c566f8a0c99","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:46:41.775375Z","signature_b64":"bBhjhFn53UvfD4yP1kDLZv91xI8nkEHznx9RydqpqNPs0CpOtQI+E3G2DWxGzhIHK2gq9oJb6FQGhSVaID/SDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4f1d59c545aae40e21b873ea8f06467a32f1f6f6c948e89cdc407c566f8a0c99","last_reissued_at":"2026-07-05T03:46:41.774995Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:46:41.774995Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2201.02504","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:46:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8tkzKUYhlLPHUJRUv2kjGS/OSgIOgp3+y8YCRxM0EtIvClFBhgdNDOwbK2UtYCHF1SjAdQVdGJKMgQYRVvKTCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-12T23:41:36.444062Z"},"content_sha256":"cc120508699d48c8ae6fe8ed866547dcb67c1857eb21b425b611b52702881ca3","schema_version":"1.0","event_id":"sha256:cc120508699d48c8ae6fe8ed866547dcb67c1857eb21b425b611b52702881ca3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:J4OVTRKFVLSA4INYOPVI6BSGPI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Repairing Adversarial Texts through Perturbation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.CL","authors_text":"Guoliang Dong, Jie Shi, Jingyi Wang, Jin Song Dong, Jun Sun, Sudipta Chattopadhyay, Ting Dai, Xinyu Wang","submitted_at":"2021-12-29T03:57:02Z","abstract_excerpt":"It is known that neural networks are subject to attacks through adversarial perturbations, i.e., inputs which are maliciously crafted through perturbations to induce wrong predictions. Furthermore, such attacks are impossible to eliminate, i.e., the adversarial perturbation is still possible after applying mitigation methods such as adversarial training. Multiple approaches have been developed to detect and reject such adversarial inputs, mostly in the image domain. Rejecting suspicious inputs however may not be always feasible or ideal. First, normal inputs may be rejected due to false alarms"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.02504","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2201.02504/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:46:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZomjltSnRoxToSYXxZabbuT/uqem8RgrfTJ8lajk6SjOnxa/sp5xuhNd4cXhZ/x9yzuYwZfeWcOfT0HGjyfCBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-12T23:41:36.444459Z"},"content_sha256":"b13d9e2f34d452e94826180b0b4be969bcd7c23849f7a7a80decd6fad130a651","schema_version":"1.0","event_id":"sha256:b13d9e2f34d452e94826180b0b4be969bcd7c23849f7a7a80decd6fad130a651"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/J4OVTRKFVLSA4INYOPVI6BSGPI/bundle.json","state_url":"https://pith.science/pith/J4OVTRKFVLSA4INYOPVI6BSGPI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/J4OVTRKFVLSA4INYOPVI6BSGPI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-12T23:41:36Z","links":{"resolver":"https://pith.science/pith/J4OVTRKFVLSA4INYOPVI6BSGPI","bundle":"https://pith.science/pith/J4OVTRKFVLSA4INYOPVI6BSGPI/bundle.json","state":"https://pith.science/pith/J4OVTRKFVLSA4INYOPVI6BSGPI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/J4OVTRKFVLSA4INYOPVI6BSGPI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:J4OVTRKFVLSA4INYOPVI6BSGPI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ca7239d123750c2c2e0c52ad02b175aaa790ee2ea64683f161976dce56446a95","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-12-29T03:57:02Z","title_canon_sha256":"18e010f0f61b327d9d7ad4ec6cdefceb6f5aa9a42dc8630fb6c1ac880a53c1ca"},"schema_version":"1.0","source":{"id":"2201.02504","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.02504","created_at":"2026-07-05T03:46:41Z"},{"alias_kind":"arxiv_version","alias_value":"2201.02504v1","created_at":"2026-07-05T03:46:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.02504","created_at":"2026-07-05T03:46:41Z"},{"alias_kind":"pith_short_12","alias_value":"J4OVTRKFVLSA","created_at":"2026-07-05T03:46:41Z"},{"alias_kind":"pith_short_16","alias_value":"J4OVTRKFVLSA4INY","created_at":"2026-07-05T03:46:41Z"},{"alias_kind":"pith_short_8","alias_value":"J4OVTRKF","created_at":"2026-07-05T03:46:41Z"}],"graph_snapshots":[{"event_id":"sha256:b13d9e2f34d452e94826180b0b4be969bcd7c23849f7a7a80decd6fad130a651","target":"graph","created_at":"2026-07-05T03:46:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.02504/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"It is known that neural networks are subject to attacks through adversarial perturbations, i.e., inputs which are maliciously crafted through perturbations to induce wrong predictions. Furthermore, such attacks are impossible to eliminate, i.e., the adversarial perturbation is still possible after applying mitigation methods such as adversarial training. Multiple approaches have been developed to detect and reject such adversarial inputs, mostly in the image domain. Rejecting suspicious inputs however may not be always feasible or ideal. First, normal inputs may be rejected due to false alarms","authors_text":"Guoliang Dong, Jie Shi, Jingyi Wang, Jin Song Dong, Jun Sun, Sudipta Chattopadhyay, Ting Dai, Xinyu Wang","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-12-29T03:57:02Z","title":"Repairing Adversarial Texts through Perturbation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.02504","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cc120508699d48c8ae6fe8ed866547dcb67c1857eb21b425b611b52702881ca3","target":"record","created_at":"2026-07-05T03:46:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ca7239d123750c2c2e0c52ad02b175aaa790ee2ea64683f161976dce56446a95","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2021-12-29T03:57:02Z","title_canon_sha256":"18e010f0f61b327d9d7ad4ec6cdefceb6f5aa9a42dc8630fb6c1ac880a53c1ca"},"schema_version":"1.0","source":{"id":"2201.02504","kind":"arxiv","version":1}},"canonical_sha256":"4f1d59c545aae40e21b873ea8f06467a32f1f6f6c948e89cdc407c566f8a0c99","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4f1d59c545aae40e21b873ea8f06467a32f1f6f6c948e89cdc407c566f8a0c99","first_computed_at":"2026-07-05T03:46:41.774995Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:46:41.774995Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bBhjhFn53UvfD4yP1kDLZv91xI8nkEHznx9RydqpqNPs0CpOtQI+E3G2DWxGzhIHK2gq9oJb6FQGhSVaID/SDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:46:41.775375Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.02504","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cc120508699d48c8ae6fe8ed866547dcb67c1857eb21b425b611b52702881ca3","sha256:b13d9e2f34d452e94826180b0b4be969bcd7c23849f7a7a80decd6fad130a651"],"state_sha256":"6022ad5c97ee07c996e662bafb42e214c2dcc0927e59066fd1d2c4051ae0f973"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HuaPVvhDTDDj4j8XPUlJgl2GkXBD3n+B6WnwQG/snfLDhKmUgNbMe1Ey2Sn1GAR4FJj6x8yNpKm4hLvmTn0IBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-12T23:41:36.446819Z","bundle_sha256":"e45a994de6d81b106a16208eb4d49eedba38dc95ddd79334e011da3ddb39f39a"}}