{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:N3W6TVVRXMQP4GCZA7BIR23S5X","short_pith_number":"pith:N3W6TVVR","canonical_record":{"source":{"id":"1703.08245","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-03-23T22:25:05Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"6e6f1510e9044c1024ea0a6a8d671becbfec463a7c7cb2689b79e4702f2cd20d","abstract_canon_sha256":"2962cd9d7d4fe0f5081d0ec03096cde3b9426dc8120114c7930845e8101d6e01"},"schema_version":"1.0"},"canonical_sha256":"6eede9d6b1bb20fe185907c288eb72edd3e912b9200ee7c2d9524d35b9e5201e","source":{"kind":"arxiv","id":"1703.08245","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1703.08245","created_at":"2026-05-18T00:48:00Z"},{"alias_kind":"arxiv_version","alias_value":"1703.08245v1","created_at":"2026-05-18T00:48:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1703.08245","created_at":"2026-05-18T00:48:00Z"},{"alias_kind":"pith_short_12","alias_value":"N3W6TVVRXMQP","created_at":"2026-05-18T12:31:31Z"},{"alias_kind":"pith_short_16","alias_value":"N3W6TVVRXMQP4GCZ","created_at":"2026-05-18T12:31:31Z"},{"alias_kind":"pith_short_8","alias_value":"N3W6TVVR","created_at":"2026-05-18T12:31:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:N3W6TVVRXMQP4GCZA7BIR23S5X","target":"record","payload":{"canonical_record":{"source":{"id":"1703.08245","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-03-23T22:25:05Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"6e6f1510e9044c1024ea0a6a8d671becbfec463a7c7cb2689b79e4702f2cd20d","abstract_canon_sha256":"2962cd9d7d4fe0f5081d0ec03096cde3b9426dc8120114c7930845e8101d6e01"},"schema_version":"1.0"},"canonical_sha256":"6eede9d6b1bb20fe185907c288eb72edd3e912b9200ee7c2d9524d35b9e5201e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:48:00.375452Z","signature_b64":"ahok9Zi6qZHEZixIP359OvclluYTT2ePrlxMwYCy9C/s3qFXlHvx8ah6Vj3s0NaRyFObqzQiVMyNWmSRteZTBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6eede9d6b1bb20fe185907c288eb72edd3e912b9200ee7c2d9524d35b9e5201e","last_reissued_at":"2026-05-18T00:48:00.375027Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:48:00.375027Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1703.08245","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:48:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SMQrOCDg+yLofOLXGrpxxSTAYXCs6kqdd2Sk1O+vjNJdFGoBgtB+a7DnF4Ze9whX4MOl2YEpNS1HS55lHF4TBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-24T02:12:57.426249Z"},"content_sha256":"fcb4d0b5bfb9ad4a95fcbd49c747db5f6c5686ba80f48ff9e3d18ccb8d990555","schema_version":"1.0","event_id":"sha256:fcb4d0b5bfb9ad4a95fcbd49c747db5f6c5686ba80f48ff9e3d18ccb8d990555"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:N3W6TVVRXMQP4GCZA7BIR23S5X","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Robustness of Convolutional Neural Networks to Internal Architecture and Weight Perturbations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Gabriel Kreiman, Martin Schrimpf, Nicholas Cheney","submitted_at":"2017-03-23T22:25:05Z","abstract_excerpt":"Deep convolutional neural networks are generally regarded as robust function approximators. So far, this intuition is based on perturbations to external stimuli such as the images to be classified. Here we explore the robustness of convolutional neural networks to perturbations to the internal weights and architecture of the network itself. We show that convolutional networks are surprisingly robust to a number of internal perturbations in the higher convolutional layers but the bottom convolutional layers are much more fragile. For instance, Alexnet shows less than a 30% decrease in classific"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1703.08245","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:48:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vyg6Oa2+5iAZGqRPBIb7sl0Tgxf9Q9Hi4mV+OT2Z7e1lXGabWplnDppjwhxe8hA+ZSeeKpCxOLHYOswpiP+ODw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-24T02:12:57.426917Z"},"content_sha256":"139c4b15f7c09fa5754a1e435dd5d1de7f9f3fdb067c9b4c636c38fe6acb1bb6","schema_version":"1.0","event_id":"sha256:139c4b15f7c09fa5754a1e435dd5d1de7f9f3fdb067c9b4c636c38fe6acb1bb6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/N3W6TVVRXMQP4GCZA7BIR23S5X/bundle.json","state_url":"https://pith.science/pith/N3W6TVVRXMQP4GCZA7BIR23S5X/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/N3W6TVVRXMQP4GCZA7BIR23S5X/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-24T02:12:57Z","links":{"resolver":"https://pith.science/pith/N3W6TVVRXMQP4GCZA7BIR23S5X","bundle":"https://pith.science/pith/N3W6TVVRXMQP4GCZA7BIR23S5X/bundle.json","state":"https://pith.science/pith/N3W6TVVRXMQP4GCZA7BIR23S5X/state.json","well_known_bundle":"https://pith.science/.well-known/pith/N3W6TVVRXMQP4GCZA7BIR23S5X/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:N3W6TVVRXMQP4GCZA7BIR23S5X","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2962cd9d7d4fe0f5081d0ec03096cde3b9426dc8120114c7930845e8101d6e01","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-03-23T22:25:05Z","title_canon_sha256":"6e6f1510e9044c1024ea0a6a8d671becbfec463a7c7cb2689b79e4702f2cd20d"},"schema_version":"1.0","source":{"id":"1703.08245","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1703.08245","created_at":"2026-05-18T00:48:00Z"},{"alias_kind":"arxiv_version","alias_value":"1703.08245v1","created_at":"2026-05-18T00:48:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1703.08245","created_at":"2026-05-18T00:48:00Z"},{"alias_kind":"pith_short_12","alias_value":"N3W6TVVRXMQP","created_at":"2026-05-18T12:31:31Z"},{"alias_kind":"pith_short_16","alias_value":"N3W6TVVRXMQP4GCZ","created_at":"2026-05-18T12:31:31Z"},{"alias_kind":"pith_short_8","alias_value":"N3W6TVVR","created_at":"2026-05-18T12:31:31Z"}],"graph_snapshots":[{"event_id":"sha256:139c4b15f7c09fa5754a1e435dd5d1de7f9f3fdb067c9b4c636c38fe6acb1bb6","target":"graph","created_at":"2026-05-18T00:48:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Deep convolutional neural networks are generally regarded as robust function approximators. So far, this intuition is based on perturbations to external stimuli such as the images to be classified. Here we explore the robustness of convolutional neural networks to perturbations to the internal weights and architecture of the network itself. We show that convolutional networks are surprisingly robust to a number of internal perturbations in the higher convolutional layers but the bottom convolutional layers are much more fragile. For instance, Alexnet shows less than a 30% decrease in classific","authors_text":"Gabriel Kreiman, Martin Schrimpf, Nicholas Cheney","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-03-23T22:25:05Z","title":"On the Robustness of Convolutional Neural Networks to Internal Architecture and Weight Perturbations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1703.08245","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fcb4d0b5bfb9ad4a95fcbd49c747db5f6c5686ba80f48ff9e3d18ccb8d990555","target":"record","created_at":"2026-05-18T00:48:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2962cd9d7d4fe0f5081d0ec03096cde3b9426dc8120114c7930845e8101d6e01","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-03-23T22:25:05Z","title_canon_sha256":"6e6f1510e9044c1024ea0a6a8d671becbfec463a7c7cb2689b79e4702f2cd20d"},"schema_version":"1.0","source":{"id":"1703.08245","kind":"arxiv","version":1}},"canonical_sha256":"6eede9d6b1bb20fe185907c288eb72edd3e912b9200ee7c2d9524d35b9e5201e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6eede9d6b1bb20fe185907c288eb72edd3e912b9200ee7c2d9524d35b9e5201e","first_computed_at":"2026-05-18T00:48:00.375027Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:48:00.375027Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ahok9Zi6qZHEZixIP359OvclluYTT2ePrlxMwYCy9C/s3qFXlHvx8ah6Vj3s0NaRyFObqzQiVMyNWmSRteZTBw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:48:00.375452Z","signed_message":"canonical_sha256_bytes"},"source_id":"1703.08245","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fcb4d0b5bfb9ad4a95fcbd49c747db5f6c5686ba80f48ff9e3d18ccb8d990555","sha256:139c4b15f7c09fa5754a1e435dd5d1de7f9f3fdb067c9b4c636c38fe6acb1bb6"],"state_sha256":"22d16c169a073dc4ebdbfd32b9ac3aa674f63e2dfac2b7ecdf03e49c2d1175bf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gCUq9Xl1nmXWYlWorSPlR/hcTwUM0KLGuzoTnBuEf+GMUDDeEhEtsJZar+O4uRKpq0f4gjVGxTj/A10EmhxzDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-24T02:12:57.430601Z","bundle_sha256":"9afd0b4017de25af2c42648578f22c4eded040c06b17df4ced941d4a298a386a"}}