{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:MVFEAAIKLIRE3DRJICWD7Q6BT2","short_pith_number":"pith:MVFEAAIK","canonical_record":{"source":{"id":"2306.15427","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-27T12:38:11Z","cross_cats_sorted":[],"title_canon_sha256":"1409fb707892dffe273a70f465eb26fdbce58a95bbc6c1442371de49ed677c8b","abstract_canon_sha256":"76014147e5ceca8a477ebb4662fa1970db5ad34229a1ba6eb843923ce45d901d"},"schema_version":"1.0"},"canonical_sha256":"654a40010a5a224d8e2940ac3fc3c19ea0f3fc78bcbb4fabd94b0e728c586696","source":{"kind":"arxiv","id":"2306.15427","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.15427","created_at":"2026-07-05T07:19:20Z"},{"alias_kind":"arxiv_version","alias_value":"2306.15427v2","created_at":"2026-07-05T07:19:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.15427","created_at":"2026-07-05T07:19:20Z"},{"alias_kind":"pith_short_12","alias_value":"MVFEAAIKLIRE","created_at":"2026-07-05T07:19:20Z"},{"alias_kind":"pith_short_16","alias_value":"MVFEAAIKLIRE3DRJ","created_at":"2026-07-05T07:19:20Z"},{"alias_kind":"pith_short_8","alias_value":"MVFEAAIK","created_at":"2026-07-05T07:19:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:MVFEAAIKLIRE3DRJICWD7Q6BT2","target":"record","payload":{"canonical_record":{"source":{"id":"2306.15427","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-27T12:38:11Z","cross_cats_sorted":[],"title_canon_sha256":"1409fb707892dffe273a70f465eb26fdbce58a95bbc6c1442371de49ed677c8b","abstract_canon_sha256":"76014147e5ceca8a477ebb4662fa1970db5ad34229a1ba6eb843923ce45d901d"},"schema_version":"1.0"},"canonical_sha256":"654a40010a5a224d8e2940ac3fc3c19ea0f3fc78bcbb4fabd94b0e728c586696","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:19:20.585988Z","signature_b64":"EOT+C3tQo7+p7abICr7kVrfBSEUfq705BeW+VS40YDEhWS02QrUWwTNbKSMnIqzCek6Oih8WX8XGqWfL3rCyCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"654a40010a5a224d8e2940ac3fc3c19ea0f3fc78bcbb4fabd94b0e728c586696","last_reissued_at":"2026-07-05T07:19:20.585472Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:19:20.585472Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.15427","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:19:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tojYrLKqn1RvtpIenZBAwAfdt6ClVS6kdql3a1zfLKr8p19MbCYbSGbbhljTJrhmLgn1CT+xH86CfB50huprDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T22:02:13.596038Z"},"content_sha256":"423548289d64bd93b26a17b6728c47fca0403733a4be70c283d812c1c2ca31ae","schema_version":"1.0","event_id":"sha256:423548289d64bd93b26a17b6728c47fca0403733a4be70c283d812c1c2ca31ae"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:MVFEAAIKLIRE3DRJICWD7Q6BT2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Training for Graph Neural Networks: Pitfalls, Solutions, and New Directions","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Bertrand Charpentier, Daniel Sturm, Daniel Z\\\"ugner, Lukas Gosch, Simon Geisler, Stephan G\\\"unnemann","submitted_at":"2023-06-27T12:38:11Z","abstract_excerpt":"Despite its success in the image domain, adversarial training did not (yet) stand out as an effective defense for Graph Neural Networks (GNNs) against graph structure perturbations. In the pursuit of fixing adversarial training (1) we show and overcome fundamental theoretical as well as practical limitations of the adopted graph learning setting in prior work; (2) we reveal that more flexible GNNs based on learnable graph diffusion are able to adjust to adversarial perturbations, while the learned message passing scheme is naturally interpretable; (3) we introduce the first attack for structur"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.15427","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.15427/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:19:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gCGZRMEEnNhH7dUQto1UXco5z5GPMNhdamXIfFPDzdwaHV0ZpjFigaYOZEkYVsr+lLsNm6cOp+oSQ9tKJlp2AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T22:02:13.597024Z"},"content_sha256":"02443d50c408969ff4d92ab7cb5d48a2b4dece606586c0c85e3e835626d67b91","schema_version":"1.0","event_id":"sha256:02443d50c408969ff4d92ab7cb5d48a2b4dece606586c0c85e3e835626d67b91"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MVFEAAIKLIRE3DRJICWD7Q6BT2/bundle.json","state_url":"https://pith.science/pith/MVFEAAIKLIRE3DRJICWD7Q6BT2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MVFEAAIKLIRE3DRJICWD7Q6BT2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T22:02:13Z","links":{"resolver":"https://pith.science/pith/MVFEAAIKLIRE3DRJICWD7Q6BT2","bundle":"https://pith.science/pith/MVFEAAIKLIRE3DRJICWD7Q6BT2/bundle.json","state":"https://pith.science/pith/MVFEAAIKLIRE3DRJICWD7Q6BT2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MVFEAAIKLIRE3DRJICWD7Q6BT2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:MVFEAAIKLIRE3DRJICWD7Q6BT2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"76014147e5ceca8a477ebb4662fa1970db5ad34229a1ba6eb843923ce45d901d","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-27T12:38:11Z","title_canon_sha256":"1409fb707892dffe273a70f465eb26fdbce58a95bbc6c1442371de49ed677c8b"},"schema_version":"1.0","source":{"id":"2306.15427","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.15427","created_at":"2026-07-05T07:19:20Z"},{"alias_kind":"arxiv_version","alias_value":"2306.15427v2","created_at":"2026-07-05T07:19:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.15427","created_at":"2026-07-05T07:19:20Z"},{"alias_kind":"pith_short_12","alias_value":"MVFEAAIKLIRE","created_at":"2026-07-05T07:19:20Z"},{"alias_kind":"pith_short_16","alias_value":"MVFEAAIKLIRE3DRJ","created_at":"2026-07-05T07:19:20Z"},{"alias_kind":"pith_short_8","alias_value":"MVFEAAIK","created_at":"2026-07-05T07:19:20Z"}],"graph_snapshots":[{"event_id":"sha256:02443d50c408969ff4d92ab7cb5d48a2b4dece606586c0c85e3e835626d67b91","target":"graph","created_at":"2026-07-05T07:19:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.15427/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite its success in the image domain, adversarial training did not (yet) stand out as an effective defense for Graph Neural Networks (GNNs) against graph structure perturbations. In the pursuit of fixing adversarial training (1) we show and overcome fundamental theoretical as well as practical limitations of the adopted graph learning setting in prior work; (2) we reveal that more flexible GNNs based on learnable graph diffusion are able to adjust to adversarial perturbations, while the learned message passing scheme is naturally interpretable; (3) we introduce the first attack for structur","authors_text":"Bertrand Charpentier, Daniel Sturm, Daniel Z\\\"ugner, Lukas Gosch, Simon Geisler, Stephan G\\\"unnemann","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-27T12:38:11Z","title":"Adversarial Training for Graph Neural Networks: Pitfalls, Solutions, and New Directions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.15427","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:423548289d64bd93b26a17b6728c47fca0403733a4be70c283d812c1c2ca31ae","target":"record","created_at":"2026-07-05T07:19:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"76014147e5ceca8a477ebb4662fa1970db5ad34229a1ba6eb843923ce45d901d","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-27T12:38:11Z","title_canon_sha256":"1409fb707892dffe273a70f465eb26fdbce58a95bbc6c1442371de49ed677c8b"},"schema_version":"1.0","source":{"id":"2306.15427","kind":"arxiv","version":2}},"canonical_sha256":"654a40010a5a224d8e2940ac3fc3c19ea0f3fc78bcbb4fabd94b0e728c586696","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"654a40010a5a224d8e2940ac3fc3c19ea0f3fc78bcbb4fabd94b0e728c586696","first_computed_at":"2026-07-05T07:19:20.585472Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:19:20.585472Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EOT+C3tQo7+p7abICr7kVrfBSEUfq705BeW+VS40YDEhWS02QrUWwTNbKSMnIqzCek6Oih8WX8XGqWfL3rCyCg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:19:20.585988Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.15427","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:423548289d64bd93b26a17b6728c47fca0403733a4be70c283d812c1c2ca31ae","sha256:02443d50c408969ff4d92ab7cb5d48a2b4dece606586c0c85e3e835626d67b91"],"state_sha256":"9d3362105dad42ccda235797d45f49ae3ac760caea724ad7397edf62b1e1cef7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NWe3sGho87meV3LOtKExJ88gU4zCEvyVC0JxipIEvQ6vprbRQH4jfFBsqzQEllmf9YO9xwRL25HtrWQNVj1vDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T22:02:13.611047Z","bundle_sha256":"c595a8c9ee7e730a15ab2a79789b788a21379839d7d3e9b167519e9e242b9144"}}