{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:NP6SB6ZWRWMRH5TJE4RYNQ3HZZ","short_pith_number":"pith:NP6SB6ZW","canonical_record":{"source":{"id":"2302.10164","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-20T18:50:18Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"7d6888ca2d98ed4bf21dc88144e5643ad8bf4332190d6187c091dad2602a02fb","abstract_canon_sha256":"00501ee2133b338ca0b79f4589e120b5a50599682e61e00d1bd7fdf574f9bd07"},"schema_version":"1.0"},"canonical_sha256":"6bfd20fb368d9913f669272386c367ce43f8013a50aea03bac29bb88a21d77e3","source":{"kind":"arxiv","id":"2302.10164","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.10164","created_at":"2026-07-05T05:43:33Z"},{"alias_kind":"arxiv_version","alias_value":"2302.10164v1","created_at":"2026-07-05T05:43:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.10164","created_at":"2026-07-05T05:43:33Z"},{"alias_kind":"pith_short_12","alias_value":"NP6SB6ZWRWMR","created_at":"2026-07-05T05:43:33Z"},{"alias_kind":"pith_short_16","alias_value":"NP6SB6ZWRWMRH5TJ","created_at":"2026-07-05T05:43:33Z"},{"alias_kind":"pith_short_8","alias_value":"NP6SB6ZW","created_at":"2026-07-05T05:43:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:NP6SB6ZWRWMRH5TJE4RYNQ3HZZ","target":"record","payload":{"canonical_record":{"source":{"id":"2302.10164","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-20T18:50:18Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"7d6888ca2d98ed4bf21dc88144e5643ad8bf4332190d6187c091dad2602a02fb","abstract_canon_sha256":"00501ee2133b338ca0b79f4589e120b5a50599682e61e00d1bd7fdf574f9bd07"},"schema_version":"1.0"},"canonical_sha256":"6bfd20fb368d9913f669272386c367ce43f8013a50aea03bac29bb88a21d77e3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:43:33.921411Z","signature_b64":"CQ9nFo/2ZV8dMZSv5W6zaMpSN2n1tPuFwR9besmzslOxHZE8ZR5IYthJs0OyZFnYivddnBFaMv833jD5LbLYCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6bfd20fb368d9913f669272386c367ce43f8013a50aea03bac29bb88a21d77e3","last_reissued_at":"2026-07-05T05:43:33.920839Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:43:33.920839Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2302.10164","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:43:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FDt/7gVroxW+ffL65BlJMfCf3gOvxFMSz3yypn0UPWHniv36Q4HN+6jDFmfIMSKpmYUrWZMrMkHgCF5bgmoTAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T04:41:00.909789Z"},"content_sha256":"5397c6aeb23ce3cdd96ded5a5bfb9b47e67a3cac386760958d2086949d13b20e","schema_version":"1.0","event_id":"sha256:5397c6aeb23ce3cdd96ded5a5bfb9b47e67a3cac386760958d2086949d13b20e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:NP6SB6ZWRWMRH5TJE4RYNQ3HZZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Seasoning Model Soups for Robustness to Adversarial and Natural Distribution Shifts","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Evan Shelhamer, Francesco Croce, Sven Gowal, Sylvestre-Alvise Rebuffi","submitted_at":"2023-02-20T18:50:18Z","abstract_excerpt":"Adversarial training is widely used to make classifiers robust to a specific threat or adversary, such as $\\ell_p$-norm bounded perturbations of a given $p$-norm. However, existing methods for training classifiers robust to multiple threats require knowledge of all attacks during training and remain vulnerable to unseen distribution shifts. In this work, we describe how to obtain adversarially-robust model soups (i.e., linear combinations of parameters) that smoothly trade-off robustness to different $\\ell_p$-norm bounded adversaries. We demonstrate that such soups allow us to control the type"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.10164","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.10164/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:43:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6lHNHJEb0YgSEBHYkK9qYxhppCmhBHeUQ23oVP2o9SfdIwVaJm+IJGOUjLvSz7jGcTYOUFj2rmjgh2mG1E0CBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T04:41:00.910848Z"},"content_sha256":"68091d8b80b20f261c0a20e52f26ddebd8f8fe9102ec9d7e4f02cd34dc4476be","schema_version":"1.0","event_id":"sha256:68091d8b80b20f261c0a20e52f26ddebd8f8fe9102ec9d7e4f02cd34dc4476be"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NP6SB6ZWRWMRH5TJE4RYNQ3HZZ/bundle.json","state_url":"https://pith.science/pith/NP6SB6ZWRWMRH5TJE4RYNQ3HZZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NP6SB6ZWRWMRH5TJE4RYNQ3HZZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T04:41:00Z","links":{"resolver":"https://pith.science/pith/NP6SB6ZWRWMRH5TJE4RYNQ3HZZ","bundle":"https://pith.science/pith/NP6SB6ZWRWMRH5TJE4RYNQ3HZZ/bundle.json","state":"https://pith.science/pith/NP6SB6ZWRWMRH5TJE4RYNQ3HZZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NP6SB6ZWRWMRH5TJE4RYNQ3HZZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:NP6SB6ZWRWMRH5TJE4RYNQ3HZZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"00501ee2133b338ca0b79f4589e120b5a50599682e61e00d1bd7fdf574f9bd07","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-20T18:50:18Z","title_canon_sha256":"7d6888ca2d98ed4bf21dc88144e5643ad8bf4332190d6187c091dad2602a02fb"},"schema_version":"1.0","source":{"id":"2302.10164","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.10164","created_at":"2026-07-05T05:43:33Z"},{"alias_kind":"arxiv_version","alias_value":"2302.10164v1","created_at":"2026-07-05T05:43:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.10164","created_at":"2026-07-05T05:43:33Z"},{"alias_kind":"pith_short_12","alias_value":"NP6SB6ZWRWMR","created_at":"2026-07-05T05:43:33Z"},{"alias_kind":"pith_short_16","alias_value":"NP6SB6ZWRWMRH5TJ","created_at":"2026-07-05T05:43:33Z"},{"alias_kind":"pith_short_8","alias_value":"NP6SB6ZW","created_at":"2026-07-05T05:43:33Z"}],"graph_snapshots":[{"event_id":"sha256:68091d8b80b20f261c0a20e52f26ddebd8f8fe9102ec9d7e4f02cd34dc4476be","target":"graph","created_at":"2026-07-05T05:43:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.10164/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial training is widely used to make classifiers robust to a specific threat or adversary, such as $\\ell_p$-norm bounded perturbations of a given $p$-norm. However, existing methods for training classifiers robust to multiple threats require knowledge of all attacks during training and remain vulnerable to unseen distribution shifts. In this work, we describe how to obtain adversarially-robust model soups (i.e., linear combinations of parameters) that smoothly trade-off robustness to different $\\ell_p$-norm bounded adversaries. We demonstrate that such soups allow us to control the type","authors_text":"Evan Shelhamer, Francesco Croce, Sven Gowal, Sylvestre-Alvise Rebuffi","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-20T18:50:18Z","title":"Seasoning Model Soups for Robustness to Adversarial and Natural Distribution Shifts"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.10164","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5397c6aeb23ce3cdd96ded5a5bfb9b47e67a3cac386760958d2086949d13b20e","target":"record","created_at":"2026-07-05T05:43:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"00501ee2133b338ca0b79f4589e120b5a50599682e61e00d1bd7fdf574f9bd07","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-20T18:50:18Z","title_canon_sha256":"7d6888ca2d98ed4bf21dc88144e5643ad8bf4332190d6187c091dad2602a02fb"},"schema_version":"1.0","source":{"id":"2302.10164","kind":"arxiv","version":1}},"canonical_sha256":"6bfd20fb368d9913f669272386c367ce43f8013a50aea03bac29bb88a21d77e3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6bfd20fb368d9913f669272386c367ce43f8013a50aea03bac29bb88a21d77e3","first_computed_at":"2026-07-05T05:43:33.920839Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:43:33.920839Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CQ9nFo/2ZV8dMZSv5W6zaMpSN2n1tPuFwR9besmzslOxHZE8ZR5IYthJs0OyZFnYivddnBFaMv833jD5LbLYCw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:43:33.921411Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.10164","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5397c6aeb23ce3cdd96ded5a5bfb9b47e67a3cac386760958d2086949d13b20e","sha256:68091d8b80b20f261c0a20e52f26ddebd8f8fe9102ec9d7e4f02cd34dc4476be"],"state_sha256":"9e0a966aa11562c71691c0819e7d3d81f4e15a959bc72e553af77bcd2458c0f5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EK6iCPIgrR5NQRAjygT6y9Kc7z8rZ1tiof4JVKxdoGd8HY9JKTCMBuYRw9l4BVIbebbV3WmYYOgBIAluwowUDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T04:41:00.917754Z","bundle_sha256":"b35841f7121a362e8953cac505d1b0e24abb7ccab0c44ea5b163a94a9a18f18d"}}