{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:NHCJ5R3CSWLWRBVFZQNXNOYY6P","short_pith_number":"pith:NHCJ5R3C","canonical_record":{"source":{"id":"2002.12920","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-28T18:47:43Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"ae712917d741b31e598d967e54a8ea0fed3e596768e87f24de4c26dba7ea88d7","abstract_canon_sha256":"64afa351d1342136dfb2130da43ef8c4e424e539af854fd1a9a3b2aa0acebdfe"},"schema_version":"1.0"},"canonical_sha256":"69c49ec76295976886a5cc1b76bb18f3d059dd37f432ee6fb2ea4da0e752bc58","source":{"kind":"arxiv","id":"2002.12920","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.12920","created_at":"2026-07-05T01:46:00Z"},{"alias_kind":"arxiv_version","alias_value":"2002.12920v3","created_at":"2026-07-05T01:46:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.12920","created_at":"2026-07-05T01:46:00Z"},{"alias_kind":"pith_short_12","alias_value":"NHCJ5R3CSWLW","created_at":"2026-07-05T01:46:00Z"},{"alias_kind":"pith_short_16","alias_value":"NHCJ5R3CSWLWRBVF","created_at":"2026-07-05T01:46:00Z"},{"alias_kind":"pith_short_8","alias_value":"NHCJ5R3C","created_at":"2026-07-05T01:46:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:NHCJ5R3CSWLWRBVFZQNXNOYY6P","target":"record","payload":{"canonical_record":{"source":{"id":"2002.12920","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-28T18:47:43Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"ae712917d741b31e598d967e54a8ea0fed3e596768e87f24de4c26dba7ea88d7","abstract_canon_sha256":"64afa351d1342136dfb2130da43ef8c4e424e539af854fd1a9a3b2aa0acebdfe"},"schema_version":"1.0"},"canonical_sha256":"69c49ec76295976886a5cc1b76bb18f3d059dd37f432ee6fb2ea4da0e752bc58","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:46:00.443489Z","signature_b64":"056nj+/qt0fcHg5I3Em6fRg8wpRxj6oVkLqbwcVq26Tjeh25TC2cUDBwZo5N3LZTnY1WiMhsdq6toGZ3ftGGDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"69c49ec76295976886a5cc1b76bb18f3d059dd37f432ee6fb2ea4da0e752bc58","last_reissued_at":"2026-07-05T01:46:00.442993Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:46:00.442993Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2002.12920","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:46:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Eo+ae/zBWOwraZLoBMigNkzBrJPTU0tCG4zTHiLNXB65SDImNkfAll3dq3Mhkpl/l18+d+FYOZSkMpLLNm7HAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T08:19:10.579957Z"},"content_sha256":"7fca348118fce5ba536685c180b58298e8adcd58e4b9eaf9e554421332ed41b4","schema_version":"1.0","event_id":"sha256:7fca348118fce5ba536685c180b58298e8adcd58e4b9eaf9e554421332ed41b4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:NHCJ5R3CSWLWRBVFZQNXNOYY6P","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Automatic Perturbation Analysis for Scalable Certified Robustness and Beyond","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Bhavya Kailkhura, Cho-Jui Hsieh, Huan Zhang, Kaidi Xu, Kai-Wei Chang, Minlie Huang, Xue Lin, Yihan Wang, Zhouxing Shi","submitted_at":"2020-02-28T18:47:43Z","abstract_excerpt":"Linear relaxation based perturbation analysis (LiRPA) for neural networks, which computes provable linear bounds of output neurons given a certain amount of input perturbation, has become a core component in robustness verification and certified defense. The majority of LiRPA-based methods focus on simple feed-forward networks and need particular manual derivations and implementations when extended to other architectures. In this paper, we develop an automatic framework to enable perturbation analysis on any neural network structures, by generalizing existing LiRPA algorithms such as CROWN to "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.12920","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2002.12920/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:46:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JK6tm8cWfDVu2z2h0mAaiTOQszAdpfOPXbFdf/cv4/1bT7mdoKUjuyMHx9S652dmv9asr5yoKs7F4zEudn0PCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T08:19:10.580924Z"},"content_sha256":"0859f66738c680c001daf5e1c12a9ae2ee180b66d77cf9bd1ea94f3fb18c9288","schema_version":"1.0","event_id":"sha256:0859f66738c680c001daf5e1c12a9ae2ee180b66d77cf9bd1ea94f3fb18c9288"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NHCJ5R3CSWLWRBVFZQNXNOYY6P/bundle.json","state_url":"https://pith.science/pith/NHCJ5R3CSWLWRBVFZQNXNOYY6P/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NHCJ5R3CSWLWRBVFZQNXNOYY6P/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T08:19:10Z","links":{"resolver":"https://pith.science/pith/NHCJ5R3CSWLWRBVFZQNXNOYY6P","bundle":"https://pith.science/pith/NHCJ5R3CSWLWRBVFZQNXNOYY6P/bundle.json","state":"https://pith.science/pith/NHCJ5R3CSWLWRBVFZQNXNOYY6P/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NHCJ5R3CSWLWRBVFZQNXNOYY6P/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:NHCJ5R3CSWLWRBVFZQNXNOYY6P","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"64afa351d1342136dfb2130da43ef8c4e424e539af854fd1a9a3b2aa0acebdfe","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-28T18:47:43Z","title_canon_sha256":"ae712917d741b31e598d967e54a8ea0fed3e596768e87f24de4c26dba7ea88d7"},"schema_version":"1.0","source":{"id":"2002.12920","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.12920","created_at":"2026-07-05T01:46:00Z"},{"alias_kind":"arxiv_version","alias_value":"2002.12920v3","created_at":"2026-07-05T01:46:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.12920","created_at":"2026-07-05T01:46:00Z"},{"alias_kind":"pith_short_12","alias_value":"NHCJ5R3CSWLW","created_at":"2026-07-05T01:46:00Z"},{"alias_kind":"pith_short_16","alias_value":"NHCJ5R3CSWLWRBVF","created_at":"2026-07-05T01:46:00Z"},{"alias_kind":"pith_short_8","alias_value":"NHCJ5R3C","created_at":"2026-07-05T01:46:00Z"}],"graph_snapshots":[{"event_id":"sha256:0859f66738c680c001daf5e1c12a9ae2ee180b66d77cf9bd1ea94f3fb18c9288","target":"graph","created_at":"2026-07-05T01:46:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.12920/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Linear relaxation based perturbation analysis (LiRPA) for neural networks, which computes provable linear bounds of output neurons given a certain amount of input perturbation, has become a core component in robustness verification and certified defense. The majority of LiRPA-based methods focus on simple feed-forward networks and need particular manual derivations and implementations when extended to other architectures. In this paper, we develop an automatic framework to enable perturbation analysis on any neural network structures, by generalizing existing LiRPA algorithms such as CROWN to ","authors_text":"Bhavya Kailkhura, Cho-Jui Hsieh, Huan Zhang, Kaidi Xu, Kai-Wei Chang, Minlie Huang, Xue Lin, Yihan Wang, Zhouxing Shi","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-28T18:47:43Z","title":"Automatic Perturbation Analysis for Scalable Certified Robustness and Beyond"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.12920","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7fca348118fce5ba536685c180b58298e8adcd58e4b9eaf9e554421332ed41b4","target":"record","created_at":"2026-07-05T01:46:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"64afa351d1342136dfb2130da43ef8c4e424e539af854fd1a9a3b2aa0acebdfe","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-28T18:47:43Z","title_canon_sha256":"ae712917d741b31e598d967e54a8ea0fed3e596768e87f24de4c26dba7ea88d7"},"schema_version":"1.0","source":{"id":"2002.12920","kind":"arxiv","version":3}},"canonical_sha256":"69c49ec76295976886a5cc1b76bb18f3d059dd37f432ee6fb2ea4da0e752bc58","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"69c49ec76295976886a5cc1b76bb18f3d059dd37f432ee6fb2ea4da0e752bc58","first_computed_at":"2026-07-05T01:46:00.442993Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:46:00.442993Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"056nj+/qt0fcHg5I3Em6fRg8wpRxj6oVkLqbwcVq26Tjeh25TC2cUDBwZo5N3LZTnY1WiMhsdq6toGZ3ftGGDg==","signature_status":"signed_v1","signed_at":"2026-07-05T01:46:00.443489Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.12920","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7fca348118fce5ba536685c180b58298e8adcd58e4b9eaf9e554421332ed41b4","sha256:0859f66738c680c001daf5e1c12a9ae2ee180b66d77cf9bd1ea94f3fb18c9288"],"state_sha256":"566718e35884d814f378235c36229600f8b32bfa143b572dd161072ae23ee8e0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iWnyvBKyoXz7SFXuAwUxlYc2Rq/dHD0yyoZFSDlxFeIA7Uhs6IHstH+rPlCEOLEsF/qz78fK+vNvljvoHoo9DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T08:19:10.587633Z","bundle_sha256":"db8becf196ed006c07491427e11025fbb13a174afe8623d90769a7cb53be0e6f"}}