{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:NP72PPS2H5B7D4STL2PZQR3IK2","short_pith_number":"pith:NP72PPS2","canonical_record":{"source":{"id":"2603.22590","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-03-23T21:29:33Z","cross_cats_sorted":["cs.CR","eess.AS"],"title_canon_sha256":"20f3861799bd5749ef90c5e7a5bc981bc61d22add2ac7c550017e0fa3dace5a6","abstract_canon_sha256":"847b7f80022e03236942433521a8f6a9e159c69b2684ee5186f1cc10386c3761"},"schema_version":"1.0"},"canonical_sha256":"6bffa7be5a3f43f1f2535e9f98476856a5fb51a9fd1a12f3dbba0bfd55feb187","source":{"kind":"arxiv","id":"2603.22590","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2603.22590","created_at":"2026-07-21T02:21:33Z"},{"alias_kind":"arxiv_version","alias_value":"2603.22590v2","created_at":"2026-07-21T02:21:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2603.22590","created_at":"2026-07-21T02:21:33Z"},{"alias_kind":"pith_short_12","alias_value":"NP72PPS2H5B7","created_at":"2026-07-21T02:21:33Z"},{"alias_kind":"pith_short_16","alias_value":"NP72PPS2H5B7D4ST","created_at":"2026-07-21T02:21:33Z"},{"alias_kind":"pith_short_8","alias_value":"NP72PPS2","created_at":"2026-07-21T02:21:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:NP72PPS2H5B7D4STL2PZQR3IK2","target":"record","payload":{"canonical_record":{"source":{"id":"2603.22590","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-03-23T21:29:33Z","cross_cats_sorted":["cs.CR","eess.AS"],"title_canon_sha256":"20f3861799bd5749ef90c5e7a5bc981bc61d22add2ac7c550017e0fa3dace5a6","abstract_canon_sha256":"847b7f80022e03236942433521a8f6a9e159c69b2684ee5186f1cc10386c3761"},"schema_version":"1.0"},"canonical_sha256":"6bffa7be5a3f43f1f2535e9f98476856a5fb51a9fd1a12f3dbba0bfd55feb187","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-21T02:21:33.740916Z","signature_b64":"nRl7aV44PbmdIP2JXM/K1X+9bX462Q5p+0rVZsF4bSN6cYAKOtXbw/s/HNTJ+zA7a12yvuRVdn8pHkZWj9CVAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6bffa7be5a3f43f1f2535e9f98476856a5fb51a9fd1a12f3dbba0bfd55feb187","last_reissued_at":"2026-07-21T02:21:33.739969Z","signature_status":"signed_v1","first_computed_at":"2026-07-21T02:21:33.739969Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2603.22590","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T02:21:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"acB9NbQaZd0FBtbMRDNI7Pscd3iYnIANiGo3eLiwRrHsKV+oA+/6SU/VKvUiw+W/1pUUcm96J57tdI0ctBq8AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T03:29:41.630487Z"},"content_sha256":"ea73874f523cc3d21d68f685d92e0de2cc1d958447ae29fa80c92772ff644ac4","schema_version":"1.0","event_id":"sha256:ea73874f523cc3d21d68f685d92e0de2cc1d958447ae29fa80c92772ff644ac4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:NP72PPS2H5B7D4STL2PZQR3IK2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Precision-Varying Prediction (PVP): Robustifying ASR systems against adversarial attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","eess.AS"],"primary_cat":"cs.LG","authors_text":"Asja Fischer, Jonas Killian, Mat\\'ias Pizarro, Raghavan Narasimhan","submitted_at":"2026-03-23T21:29:33Z","abstract_excerpt":"With the increasing deployment of automated and agentic systems, ensuring the adversarial robustness of automatic speech recognition (ASR) models has become highly relevant. We observe that changing the precision of an ASR model during inference reduces the likelihood of adversarial attacks to succeed. We take advantage of this fact to make models more robust simply by randomly sampling the precision during prediction. Moreover, this insight can be turned into an adversarial example detection strategy by implementing a simple Gaussian classifier that thresholds the differences between outputs "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2603.22590","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2603.22590/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T02:21:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"C6fgb4yGePsVYOutsD7JQTpsXJwAQxYWBTtNqn/e6oib/2Ydgdxyt+grTe5BkZjlJTJKjnqaUO1JgsDe5RYNDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T03:29:41.631030Z"},"content_sha256":"152af06df6ee5f5433115c4078fdac657cc929474d5db771498f489e641454f3","schema_version":"1.0","event_id":"sha256:152af06df6ee5f5433115c4078fdac657cc929474d5db771498f489e641454f3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NP72PPS2H5B7D4STL2PZQR3IK2/bundle.json","state_url":"https://pith.science/pith/NP72PPS2H5B7D4STL2PZQR3IK2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NP72PPS2H5B7D4STL2PZQR3IK2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T03:29:41Z","links":{"resolver":"https://pith.science/pith/NP72PPS2H5B7D4STL2PZQR3IK2","bundle":"https://pith.science/pith/NP72PPS2H5B7D4STL2PZQR3IK2/bundle.json","state":"https://pith.science/pith/NP72PPS2H5B7D4STL2PZQR3IK2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NP72PPS2H5B7D4STL2PZQR3IK2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:NP72PPS2H5B7D4STL2PZQR3IK2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"847b7f80022e03236942433521a8f6a9e159c69b2684ee5186f1cc10386c3761","cross_cats_sorted":["cs.CR","eess.AS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-03-23T21:29:33Z","title_canon_sha256":"20f3861799bd5749ef90c5e7a5bc981bc61d22add2ac7c550017e0fa3dace5a6"},"schema_version":"1.0","source":{"id":"2603.22590","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2603.22590","created_at":"2026-07-21T02:21:33Z"},{"alias_kind":"arxiv_version","alias_value":"2603.22590v2","created_at":"2026-07-21T02:21:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2603.22590","created_at":"2026-07-21T02:21:33Z"},{"alias_kind":"pith_short_12","alias_value":"NP72PPS2H5B7","created_at":"2026-07-21T02:21:33Z"},{"alias_kind":"pith_short_16","alias_value":"NP72PPS2H5B7D4ST","created_at":"2026-07-21T02:21:33Z"},{"alias_kind":"pith_short_8","alias_value":"NP72PPS2","created_at":"2026-07-21T02:21:33Z"}],"graph_snapshots":[{"event_id":"sha256:152af06df6ee5f5433115c4078fdac657cc929474d5db771498f489e641454f3","target":"graph","created_at":"2026-07-21T02:21:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2603.22590/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the increasing deployment of automated and agentic systems, ensuring the adversarial robustness of automatic speech recognition (ASR) models has become highly relevant. We observe that changing the precision of an ASR model during inference reduces the likelihood of adversarial attacks to succeed. We take advantage of this fact to make models more robust simply by randomly sampling the precision during prediction. Moreover, this insight can be turned into an adversarial example detection strategy by implementing a simple Gaussian classifier that thresholds the differences between outputs ","authors_text":"Asja Fischer, Jonas Killian, Mat\\'ias Pizarro, Raghavan Narasimhan","cross_cats":["cs.CR","eess.AS"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-03-23T21:29:33Z","title":"Precision-Varying Prediction (PVP): Robustifying ASR systems against adversarial attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2603.22590","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ea73874f523cc3d21d68f685d92e0de2cc1d958447ae29fa80c92772ff644ac4","target":"record","created_at":"2026-07-21T02:21:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"847b7f80022e03236942433521a8f6a9e159c69b2684ee5186f1cc10386c3761","cross_cats_sorted":["cs.CR","eess.AS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2026-03-23T21:29:33Z","title_canon_sha256":"20f3861799bd5749ef90c5e7a5bc981bc61d22add2ac7c550017e0fa3dace5a6"},"schema_version":"1.0","source":{"id":"2603.22590","kind":"arxiv","version":2}},"canonical_sha256":"6bffa7be5a3f43f1f2535e9f98476856a5fb51a9fd1a12f3dbba0bfd55feb187","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6bffa7be5a3f43f1f2535e9f98476856a5fb51a9fd1a12f3dbba0bfd55feb187","first_computed_at":"2026-07-21T02:21:33.739969Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-21T02:21:33.739969Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nRl7aV44PbmdIP2JXM/K1X+9bX462Q5p+0rVZsF4bSN6cYAKOtXbw/s/HNTJ+zA7a12yvuRVdn8pHkZWj9CVAg==","signature_status":"signed_v1","signed_at":"2026-07-21T02:21:33.740916Z","signed_message":"canonical_sha256_bytes"},"source_id":"2603.22590","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ea73874f523cc3d21d68f685d92e0de2cc1d958447ae29fa80c92772ff644ac4","sha256:152af06df6ee5f5433115c4078fdac657cc929474d5db771498f489e641454f3"],"state_sha256":"14155d3ffebc3cdb1f567ac8a33d21984a3f9928e4200bbcdc156b2f06d21bcb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"c9F2ohdA0Qeio+ms8WdbGZD4fwZh4WnzeT/sIrnMvbdrt0sbIwS9fJ3JG/+1ixfygrOqaejSObx2OwwRAhQHCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T03:29:41.634951Z","bundle_sha256":"4507985eb1ef9bc4b293cc9e94bdf9c2b82e5ea3490cb32866cc3904de337c9b"}}