{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:JYE2AYOQ7PQKLXXRUBJIYO6IPR","short_pith_number":"pith:JYE2AYOQ","canonical_record":{"source":{"id":"2302.01757","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-31T01:40:26Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"444b1b9e1fd84d27bfe3f7cb8e128b05c65854b8f9c309f67cc39c4120244cef","abstract_canon_sha256":"348b99cf8105560688f09e8eb9cc289e808e3e895fdd3c3bcb2b34934c25bdaf"},"schema_version":"1.0"},"canonical_sha256":"4e09a061d0fbe0a5def1a0528c3bc87c60895fa711bc29ca4290f2043adf2542","source":{"kind":"arxiv","id":"2302.01757","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.01757","created_at":"2026-07-05T07:37:10Z"},{"alias_kind":"arxiv_version","alias_value":"2302.01757v3","created_at":"2026-07-05T07:37:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.01757","created_at":"2026-07-05T07:37:10Z"},{"alias_kind":"pith_short_12","alias_value":"JYE2AYOQ7PQK","created_at":"2026-07-05T07:37:10Z"},{"alias_kind":"pith_short_16","alias_value":"JYE2AYOQ7PQKLXXR","created_at":"2026-07-05T07:37:10Z"},{"alias_kind":"pith_short_8","alias_value":"JYE2AYOQ","created_at":"2026-07-05T07:37:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:JYE2AYOQ7PQKLXXRUBJIYO6IPR","target":"record","payload":{"canonical_record":{"source":{"id":"2302.01757","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-31T01:40:26Z","cross_cats_sorted":["cs.LG","stat.ML"],"title_canon_sha256":"444b1b9e1fd84d27bfe3f7cb8e128b05c65854b8f9c309f67cc39c4120244cef","abstract_canon_sha256":"348b99cf8105560688f09e8eb9cc289e808e3e895fdd3c3bcb2b34934c25bdaf"},"schema_version":"1.0"},"canonical_sha256":"4e09a061d0fbe0a5def1a0528c3bc87c60895fa711bc29ca4290f2043adf2542","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:37:10.446312Z","signature_b64":"FzMmA3cJ6UY1OLLX6rJ53a/zGJXWAyeqodG2X8zhFR7XBce5MvOaNh26Xtt9LvbUlYazGHXxBGDnrKpPcwRiDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4e09a061d0fbe0a5def1a0528c3bc87c60895fa711bc29ca4290f2043adf2542","last_reissued_at":"2026-07-05T07:37:10.445866Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:37:10.445866Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2302.01757","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:37:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Agufqx0ea5KQEMtM1vJISV0nKiQoitydgvEWVsTzmV/cKs5YrWxy5m7ZA/s/oimnWGA1E/50DBZ6JdNcrg5tAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T21:12:31.939460Z"},"content_sha256":"4bc208033295cd37c9aa7de1547981d81af412ac8a7166d17fa68a7a0bcf31f4","schema_version":"1.0","event_id":"sha256:4bc208033295cd37c9aa7de1547981d81af412ac8a7166d17fa68a7a0bcf31f4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:JYE2AYOQ7PQKLXXRUBJIYO6IPR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","stat.ML"],"primary_cat":"cs.CR","authors_text":"Benjamin I. P. Rubinstein, Keane Lucas, Lujo Bauer, Neil G. Marchant, Olga Ohrimenko, Zhuoqun Huang","submitted_at":"2023-01-31T01:40:26Z","abstract_excerpt":"Randomized smoothing is a leading approach for constructing classifiers that are certifiably robust against adversarial examples. Existing work on randomized smoothing has focused on classifiers with continuous inputs, such as images, where $\\ell_p$-norm bounded adversaries are commonly studied. However, there has been limited work for classifiers with discrete or variable-size inputs, such as for source code, which require different threat models and smoothing mechanisms. In this work, we adapt randomized smoothing for discrete sequence classifiers to provide certified robustness against edit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.01757","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.01757/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:37:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tahf2azI+HS6Cu6lkBaLv4gJj1YKOCMfKriOH/WgOIQINcK4+6BW5EsTUulJzoNeHCo1XplPsYEk4lyX1uSpDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T21:12:31.940181Z"},"content_sha256":"7384e76928ce3fd2346597ba52929c24cc49218bb8cc040b8178a02857842fa9","schema_version":"1.0","event_id":"sha256:7384e76928ce3fd2346597ba52929c24cc49218bb8cc040b8178a02857842fa9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JYE2AYOQ7PQKLXXRUBJIYO6IPR/bundle.json","state_url":"https://pith.science/pith/JYE2AYOQ7PQKLXXRUBJIYO6IPR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JYE2AYOQ7PQKLXXRUBJIYO6IPR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T21:12:31Z","links":{"resolver":"https://pith.science/pith/JYE2AYOQ7PQKLXXRUBJIYO6IPR","bundle":"https://pith.science/pith/JYE2AYOQ7PQKLXXRUBJIYO6IPR/bundle.json","state":"https://pith.science/pith/JYE2AYOQ7PQKLXXRUBJIYO6IPR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JYE2AYOQ7PQKLXXRUBJIYO6IPR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:JYE2AYOQ7PQKLXXRUBJIYO6IPR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"348b99cf8105560688f09e8eb9cc289e808e3e895fdd3c3bcb2b34934c25bdaf","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-31T01:40:26Z","title_canon_sha256":"444b1b9e1fd84d27bfe3f7cb8e128b05c65854b8f9c309f67cc39c4120244cef"},"schema_version":"1.0","source":{"id":"2302.01757","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.01757","created_at":"2026-07-05T07:37:10Z"},{"alias_kind":"arxiv_version","alias_value":"2302.01757v3","created_at":"2026-07-05T07:37:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.01757","created_at":"2026-07-05T07:37:10Z"},{"alias_kind":"pith_short_12","alias_value":"JYE2AYOQ7PQK","created_at":"2026-07-05T07:37:10Z"},{"alias_kind":"pith_short_16","alias_value":"JYE2AYOQ7PQKLXXR","created_at":"2026-07-05T07:37:10Z"},{"alias_kind":"pith_short_8","alias_value":"JYE2AYOQ","created_at":"2026-07-05T07:37:10Z"}],"graph_snapshots":[{"event_id":"sha256:7384e76928ce3fd2346597ba52929c24cc49218bb8cc040b8178a02857842fa9","target":"graph","created_at":"2026-07-05T07:37:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.01757/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Randomized smoothing is a leading approach for constructing classifiers that are certifiably robust against adversarial examples. Existing work on randomized smoothing has focused on classifiers with continuous inputs, such as images, where $\\ell_p$-norm bounded adversaries are commonly studied. However, there has been limited work for classifiers with discrete or variable-size inputs, such as for source code, which require different threat models and smoothing mechanisms. In this work, we adapt randomized smoothing for discrete sequence classifiers to provide certified robustness against edit","authors_text":"Benjamin I. P. Rubinstein, Keane Lucas, Lujo Bauer, Neil G. Marchant, Olga Ohrimenko, Zhuoqun Huang","cross_cats":["cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-31T01:40:26Z","title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.01757","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4bc208033295cd37c9aa7de1547981d81af412ac8a7166d17fa68a7a0bcf31f4","target":"record","created_at":"2026-07-05T07:37:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"348b99cf8105560688f09e8eb9cc289e808e3e895fdd3c3bcb2b34934c25bdaf","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-31T01:40:26Z","title_canon_sha256":"444b1b9e1fd84d27bfe3f7cb8e128b05c65854b8f9c309f67cc39c4120244cef"},"schema_version":"1.0","source":{"id":"2302.01757","kind":"arxiv","version":3}},"canonical_sha256":"4e09a061d0fbe0a5def1a0528c3bc87c60895fa711bc29ca4290f2043adf2542","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4e09a061d0fbe0a5def1a0528c3bc87c60895fa711bc29ca4290f2043adf2542","first_computed_at":"2026-07-05T07:37:10.445866Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:37:10.445866Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FzMmA3cJ6UY1OLLX6rJ53a/zGJXWAyeqodG2X8zhFR7XBce5MvOaNh26Xtt9LvbUlYazGHXxBGDnrKpPcwRiDw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:37:10.446312Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.01757","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4bc208033295cd37c9aa7de1547981d81af412ac8a7166d17fa68a7a0bcf31f4","sha256:7384e76928ce3fd2346597ba52929c24cc49218bb8cc040b8178a02857842fa9"],"state_sha256":"2a6f08df6ab3c87024f604f5bc4af3eda6cf39e0f6b913b12c9594b9b396d928"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"T7Iq1Q4KG19Nxl2XyK2E2oQX6O3Vgzlsavj4RteNJ0Clj9q+PH30bvT23m5SIyQ3ci9yQoHB+GonNslmG45dAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T21:12:31.944555Z","bundle_sha256":"a4804e8457db36a2f8a5c0661323017742e70e55b435b9a7a9281b4c4b1466ac"}}