{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:JPPVOBZUGYNVKZOG2H33WCXIP7","short_pith_number":"pith:JPPVOBZU","canonical_record":{"source":{"id":"2206.04316","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-06-09T07:26:46Z","cross_cats_sorted":["cs.AI","stat.ML"],"title_canon_sha256":"c97f0cd15ea5c0bd13616fe3b2744be295feeb4f4eaefb0311babd5e55788086","abstract_canon_sha256":"78253277c74a50526c810f6e537ecf37e424472c9ec6194477c2d0d7e2902291"},"schema_version":"1.0"},"canonical_sha256":"4bdf570734361b5565c6d1f7bb0ae87ff2a14e9089cb3ada28497df08eb5fde4","source":{"kind":"arxiv","id":"2206.04316","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2206.04316","created_at":"2026-07-05T04:30:25Z"},{"alias_kind":"arxiv_version","alias_value":"2206.04316v1","created_at":"2026-07-05T04:30:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2206.04316","created_at":"2026-07-05T04:30:25Z"},{"alias_kind":"pith_short_12","alias_value":"JPPVOBZUGYNV","created_at":"2026-07-05T04:30:25Z"},{"alias_kind":"pith_short_16","alias_value":"JPPVOBZUGYNVKZOG","created_at":"2026-07-05T04:30:25Z"},{"alias_kind":"pith_short_8","alias_value":"JPPVOBZU","created_at":"2026-07-05T04:30:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:JPPVOBZUGYNVKZOG2H33WCXIP7","target":"record","payload":{"canonical_record":{"source":{"id":"2206.04316","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-06-09T07:26:46Z","cross_cats_sorted":["cs.AI","stat.ML"],"title_canon_sha256":"c97f0cd15ea5c0bd13616fe3b2744be295feeb4f4eaefb0311babd5e55788086","abstract_canon_sha256":"78253277c74a50526c810f6e537ecf37e424472c9ec6194477c2d0d7e2902291"},"schema_version":"1.0"},"canonical_sha256":"4bdf570734361b5565c6d1f7bb0ae87ff2a14e9089cb3ada28497df08eb5fde4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:30:25.582232Z","signature_b64":"mhCF/SYqCV10lovfrfoQXgYGTk4CWgvMPIgaQy0TvNtv+HwdRfgwEoDUynZTxm/s0jaA0qXVGySNRSk7U3VdAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4bdf570734361b5565c6d1f7bb0ae87ff2a14e9089cb3ada28497df08eb5fde4","last_reissued_at":"2026-07-05T04:30:25.581704Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:30:25.581704Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2206.04316","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:30:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UB/vKwPtqGOmhioHF2oX8DsEQE4I4gOPQgbxhnABzbFHDat/eK4SMyVxdGVIdM6NEMkdkUTCQROb4i1EGTIsBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:15:57.893577Z"},"content_sha256":"0b5b963ec565a5f67e281f500cc4db3cde698d6d38858bc0bd4bc50511072a39","schema_version":"1.0","event_id":"sha256:0b5b963ec565a5f67e281f500cc4db3cde698d6d38858bc0bd4bc50511072a39"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:JPPVOBZUGYNVKZOG2H33WCXIP7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Noises Are Linearly Separable for (Nearly) Random Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","stat.ML"],"primary_cat":"cs.LG","authors_text":"Da Yu, Di He, Huishuai Zhang, Yiping Lu","submitted_at":"2022-06-09T07:26:46Z","abstract_excerpt":"Adversarial examples, which are usually generated for specific inputs with a specific model, are ubiquitous for neural networks. In this paper we unveil a surprising property of adversarial noises when they are put together, i.e., adversarial noises crafted by one-step gradient methods are linearly separable if equipped with the corresponding labels. We theoretically prove this property for a two-layer network with randomly initialized entries and the neural tangent kernel setup where the parameters are not far from initialization. The proof idea is to show the label information can be efficie"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2206.04316","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2206.04316/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:30:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CH0s+u5hougfO1DBjL6weoEkLBhnOD4ciearg5rafTvl7o8mELD3H+OZKdmr+zuD/RenH5/7fevQSz6qNIkaAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T09:15:57.894092Z"},"content_sha256":"4e514cd809a43b6998a6817e33d245407bf4d5d5ee9b78faf93bba4431f3fc83","schema_version":"1.0","event_id":"sha256:4e514cd809a43b6998a6817e33d245407bf4d5d5ee9b78faf93bba4431f3fc83"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JPPVOBZUGYNVKZOG2H33WCXIP7/bundle.json","state_url":"https://pith.science/pith/JPPVOBZUGYNVKZOG2H33WCXIP7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JPPVOBZUGYNVKZOG2H33WCXIP7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T09:15:57Z","links":{"resolver":"https://pith.science/pith/JPPVOBZUGYNVKZOG2H33WCXIP7","bundle":"https://pith.science/pith/JPPVOBZUGYNVKZOG2H33WCXIP7/bundle.json","state":"https://pith.science/pith/JPPVOBZUGYNVKZOG2H33WCXIP7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JPPVOBZUGYNVKZOG2H33WCXIP7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:JPPVOBZUGYNVKZOG2H33WCXIP7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"78253277c74a50526c810f6e537ecf37e424472c9ec6194477c2d0d7e2902291","cross_cats_sorted":["cs.AI","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-06-09T07:26:46Z","title_canon_sha256":"c97f0cd15ea5c0bd13616fe3b2744be295feeb4f4eaefb0311babd5e55788086"},"schema_version":"1.0","source":{"id":"2206.04316","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2206.04316","created_at":"2026-07-05T04:30:25Z"},{"alias_kind":"arxiv_version","alias_value":"2206.04316v1","created_at":"2026-07-05T04:30:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2206.04316","created_at":"2026-07-05T04:30:25Z"},{"alias_kind":"pith_short_12","alias_value":"JPPVOBZUGYNV","created_at":"2026-07-05T04:30:25Z"},{"alias_kind":"pith_short_16","alias_value":"JPPVOBZUGYNVKZOG","created_at":"2026-07-05T04:30:25Z"},{"alias_kind":"pith_short_8","alias_value":"JPPVOBZU","created_at":"2026-07-05T04:30:25Z"}],"graph_snapshots":[{"event_id":"sha256:4e514cd809a43b6998a6817e33d245407bf4d5d5ee9b78faf93bba4431f3fc83","target":"graph","created_at":"2026-07-05T04:30:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2206.04316/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial examples, which are usually generated for specific inputs with a specific model, are ubiquitous for neural networks. In this paper we unveil a surprising property of adversarial noises when they are put together, i.e., adversarial noises crafted by one-step gradient methods are linearly separable if equipped with the corresponding labels. We theoretically prove this property for a two-layer network with randomly initialized entries and the neural tangent kernel setup where the parameters are not far from initialization. The proof idea is to show the label information can be efficie","authors_text":"Da Yu, Di He, Huishuai Zhang, Yiping Lu","cross_cats":["cs.AI","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-06-09T07:26:46Z","title":"Adversarial Noises Are Linearly Separable for (Nearly) Random Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2206.04316","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0b5b963ec565a5f67e281f500cc4db3cde698d6d38858bc0bd4bc50511072a39","target":"record","created_at":"2026-07-05T04:30:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"78253277c74a50526c810f6e537ecf37e424472c9ec6194477c2d0d7e2902291","cross_cats_sorted":["cs.AI","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-06-09T07:26:46Z","title_canon_sha256":"c97f0cd15ea5c0bd13616fe3b2744be295feeb4f4eaefb0311babd5e55788086"},"schema_version":"1.0","source":{"id":"2206.04316","kind":"arxiv","version":1}},"canonical_sha256":"4bdf570734361b5565c6d1f7bb0ae87ff2a14e9089cb3ada28497df08eb5fde4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4bdf570734361b5565c6d1f7bb0ae87ff2a14e9089cb3ada28497df08eb5fde4","first_computed_at":"2026-07-05T04:30:25.581704Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:30:25.581704Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mhCF/SYqCV10lovfrfoQXgYGTk4CWgvMPIgaQy0TvNtv+HwdRfgwEoDUynZTxm/s0jaA0qXVGySNRSk7U3VdAA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:30:25.582232Z","signed_message":"canonical_sha256_bytes"},"source_id":"2206.04316","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0b5b963ec565a5f67e281f500cc4db3cde698d6d38858bc0bd4bc50511072a39","sha256:4e514cd809a43b6998a6817e33d245407bf4d5d5ee9b78faf93bba4431f3fc83"],"state_sha256":"83f5577669630ca414b67008c51a1d411e14c2713279185b9cbad24fd76e5c16"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qb0Vrnh9xJRaLUo985Pt1eYaySlGKTWZHk8wCFdwmyYbY3xAg6PVRKrHpN946jO49iEPiTr077pMc3Kp4wu+Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T09:15:57.898415Z","bundle_sha256":"6692e9041db9eb3583f6c0e43e5d8733ec509f94c4ab01456102406f933c0f4e"}}