{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:JPVKEIQUKUHSUKQFZXUA3LJUQB","short_pith_number":"pith:JPVKEIQU","canonical_record":{"source":{"id":"2404.09349","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-04-14T20:14:38Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"0ac77e19f713226404d8c8b3198191eaf4f31671ee1de93248b609f15fb911d8","abstract_canon_sha256":"4ffde72d3def2ac9a8cab36b7f82930213b3a0b08a9f386be4662a6b3c98f070"},"schema_version":"1.0"},"canonical_sha256":"4beaa22214550f2a2a05cde80dad3480452d8d2d29c5ae2c110c3174d501ff5e","source":{"kind":"arxiv","id":"2404.09349","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.09349","created_at":"2026-07-05T08:42:22Z"},{"alias_kind":"arxiv_version","alias_value":"2404.09349v2","created_at":"2026-07-05T08:42:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.09349","created_at":"2026-07-05T08:42:22Z"},{"alias_kind":"pith_short_12","alias_value":"JPVKEIQUKUHS","created_at":"2026-07-05T08:42:22Z"},{"alias_kind":"pith_short_16","alias_value":"JPVKEIQUKUHSUKQF","created_at":"2026-07-05T08:42:22Z"},{"alias_kind":"pith_short_8","alias_value":"JPVKEIQU","created_at":"2026-07-05T08:42:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:JPVKEIQUKUHSUKQFZXUA3LJUQB","target":"record","payload":{"canonical_record":{"source":{"id":"2404.09349","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-04-14T20:14:38Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"0ac77e19f713226404d8c8b3198191eaf4f31671ee1de93248b609f15fb911d8","abstract_canon_sha256":"4ffde72d3def2ac9a8cab36b7f82930213b3a0b08a9f386be4662a6b3c98f070"},"schema_version":"1.0"},"canonical_sha256":"4beaa22214550f2a2a05cde80dad3480452d8d2d29c5ae2c110c3174d501ff5e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:42:22.459967Z","signature_b64":"lGZUr+T5Q2784OVRYrJL6PTqJpNAyLKpV1EQbx9gdx4bUXcNVIDamaf/3/mebRiXgdHS1lVWmkna4UsWg95eAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4beaa22214550f2a2a05cde80dad3480452d8d2d29c5ae2c110c3174d501ff5e","last_reissued_at":"2026-07-05T08:42:22.459496Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:42:22.459496Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.09349","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:42:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vUN+rjdjhyxAsvU1WB8Q4295Dod49n8adAg+SJ2XdAvIBIcf+x6igt5e1HOM0MTpDfzOsjNL2iwTDwXRDLuIBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T08:31:04.150741Z"},"content_sha256":"003681761a4af0be117a1686071f626c61be21eae958d83cf547a258124b1034","schema_version":"1.0","event_id":"sha256:003681761a4af0be117a1686071f626c61be21eae958d83cf547a258124b1034"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:JPVKEIQUKUHSUKQFZXUA3LJUQB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Robustness Limits via Scaling-Law and Human-Alignment Studies","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Bhavya Kailkhura, Brian R. Bartoldson, James Diffenderfer, Konstantinos Parasyris","submitted_at":"2024-04-14T20:14:38Z","abstract_excerpt":"This paper revisits the simple, long-studied, yet still unsolved problem of making image classifiers robust to imperceptible perturbations. Taking CIFAR10 as an example, SOTA clean accuracy is about $100$%, but SOTA robustness to $\\ell_{\\infty}$-norm bounded perturbations barely exceeds $70$%. To understand this gap, we analyze how model size, dataset size, and synthetic data quality affect robustness by developing the first scaling laws for adversarial training. Our scaling laws reveal inefficiencies in prior art and provide actionable feedback to advance the field. For instance, we discovere"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.09349","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.09349/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:42:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f2B/LFq78E80vI+XM6Wf09soG8CLSSn700gTb4MCrdDlocEAKh+AqByK9nIlOma6fivjbX7pTQ6jlBA+1FHXCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T08:31:04.151122Z"},"content_sha256":"52a0915117d0a675d82ec3fd4b726c922a56de6ec52e42e1442f45cfba5c4c27","schema_version":"1.0","event_id":"sha256:52a0915117d0a675d82ec3fd4b726c922a56de6ec52e42e1442f45cfba5c4c27"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JPVKEIQUKUHSUKQFZXUA3LJUQB/bundle.json","state_url":"https://pith.science/pith/JPVKEIQUKUHSUKQFZXUA3LJUQB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JPVKEIQUKUHSUKQFZXUA3LJUQB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T08:31:04Z","links":{"resolver":"https://pith.science/pith/JPVKEIQUKUHSUKQFZXUA3LJUQB","bundle":"https://pith.science/pith/JPVKEIQUKUHSUKQFZXUA3LJUQB/bundle.json","state":"https://pith.science/pith/JPVKEIQUKUHSUKQFZXUA3LJUQB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JPVKEIQUKUHSUKQFZXUA3LJUQB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:JPVKEIQUKUHSUKQFZXUA3LJUQB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4ffde72d3def2ac9a8cab36b7f82930213b3a0b08a9f386be4662a6b3c98f070","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-04-14T20:14:38Z","title_canon_sha256":"0ac77e19f713226404d8c8b3198191eaf4f31671ee1de93248b609f15fb911d8"},"schema_version":"1.0","source":{"id":"2404.09349","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.09349","created_at":"2026-07-05T08:42:22Z"},{"alias_kind":"arxiv_version","alias_value":"2404.09349v2","created_at":"2026-07-05T08:42:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.09349","created_at":"2026-07-05T08:42:22Z"},{"alias_kind":"pith_short_12","alias_value":"JPVKEIQUKUHS","created_at":"2026-07-05T08:42:22Z"},{"alias_kind":"pith_short_16","alias_value":"JPVKEIQUKUHSUKQF","created_at":"2026-07-05T08:42:22Z"},{"alias_kind":"pith_short_8","alias_value":"JPVKEIQU","created_at":"2026-07-05T08:42:22Z"}],"graph_snapshots":[{"event_id":"sha256:52a0915117d0a675d82ec3fd4b726c922a56de6ec52e42e1442f45cfba5c4c27","target":"graph","created_at":"2026-07-05T08:42:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.09349/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper revisits the simple, long-studied, yet still unsolved problem of making image classifiers robust to imperceptible perturbations. Taking CIFAR10 as an example, SOTA clean accuracy is about $100$%, but SOTA robustness to $\\ell_{\\infty}$-norm bounded perturbations barely exceeds $70$%. To understand this gap, we analyze how model size, dataset size, and synthetic data quality affect robustness by developing the first scaling laws for adversarial training. Our scaling laws reveal inefficiencies in prior art and provide actionable feedback to advance the field. For instance, we discovere","authors_text":"Bhavya Kailkhura, Brian R. Bartoldson, James Diffenderfer, Konstantinos Parasyris","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-04-14T20:14:38Z","title":"Adversarial Robustness Limits via Scaling-Law and Human-Alignment Studies"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.09349","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:003681761a4af0be117a1686071f626c61be21eae958d83cf547a258124b1034","target":"record","created_at":"2026-07-05T08:42:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4ffde72d3def2ac9a8cab36b7f82930213b3a0b08a9f386be4662a6b3c98f070","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-04-14T20:14:38Z","title_canon_sha256":"0ac77e19f713226404d8c8b3198191eaf4f31671ee1de93248b609f15fb911d8"},"schema_version":"1.0","source":{"id":"2404.09349","kind":"arxiv","version":2}},"canonical_sha256":"4beaa22214550f2a2a05cde80dad3480452d8d2d29c5ae2c110c3174d501ff5e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4beaa22214550f2a2a05cde80dad3480452d8d2d29c5ae2c110c3174d501ff5e","first_computed_at":"2026-07-05T08:42:22.459496Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:42:22.459496Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lGZUr+T5Q2784OVRYrJL6PTqJpNAyLKpV1EQbx9gdx4bUXcNVIDamaf/3/mebRiXgdHS1lVWmkna4UsWg95eAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:42:22.459967Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.09349","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:003681761a4af0be117a1686071f626c61be21eae958d83cf547a258124b1034","sha256:52a0915117d0a675d82ec3fd4b726c922a56de6ec52e42e1442f45cfba5c4c27"],"state_sha256":"7b02fc288c7cb7764a86f70f22bec41310455862e55d262c5eb2dd134270d901"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ONpdQRqLQCHYRjmrX5++gtpJxLdpq6Ise9rmhyPOLEGGj9+0z9hbR/gxumRLDaYmYnzTiZLFIvOrbDI72/3JCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T08:31:04.154859Z","bundle_sha256":"551e8bef2f5fd03df8ae8683bf4a807fa0b9856b5c6bdfb6e025e4dd7dbb9012"}}