{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:O2DRTY44AY5OGKMJ77TU6ST3DY","short_pith_number":"pith:O2DRTY44","canonical_record":{"source":{"id":"2308.00452","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-01T11:05:13Z","cross_cats_sorted":["cs.CV","cs.SE"],"title_canon_sha256":"ba61884b70ec5e5008cf35e34c23598f3a7e4ea28a8812e51f23610ec571b9f5","abstract_canon_sha256":"f92676c29c09d20f1ac11f8d706f0506859f155ed2bc7b90991a579fd67f1819"},"schema_version":"1.0"},"canonical_sha256":"768719e39c063ae32989ffe74f4a7b1e18a06bc9c2a24a5c824eaadc3b679fdb","source":{"kind":"arxiv","id":"2308.00452","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.00452","created_at":"2026-07-05T06:48:36Z"},{"alias_kind":"arxiv_version","alias_value":"2308.00452v2","created_at":"2026-07-05T06:48:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.00452","created_at":"2026-07-05T06:48:36Z"},{"alias_kind":"pith_short_12","alias_value":"O2DRTY44AY5O","created_at":"2026-07-05T06:48:36Z"},{"alias_kind":"pith_short_16","alias_value":"O2DRTY44AY5OGKMJ","created_at":"2026-07-05T06:48:36Z"},{"alias_kind":"pith_short_8","alias_value":"O2DRTY44","created_at":"2026-07-05T06:48:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:O2DRTY44AY5OGKMJ77TU6ST3DY","target":"record","payload":{"canonical_record":{"source":{"id":"2308.00452","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-01T11:05:13Z","cross_cats_sorted":["cs.CV","cs.SE"],"title_canon_sha256":"ba61884b70ec5e5008cf35e34c23598f3a7e4ea28a8812e51f23610ec571b9f5","abstract_canon_sha256":"f92676c29c09d20f1ac11f8d706f0506859f155ed2bc7b90991a579fd67f1819"},"schema_version":"1.0"},"canonical_sha256":"768719e39c063ae32989ffe74f4a7b1e18a06bc9c2a24a5c824eaadc3b679fdb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:48:36.055665Z","signature_b64":"vtNQT9GwpQZgheV/JgSD3R5iDdFcKDC1zVZyagawlMSKVf/WfsO7DzfvN75O5BVaFoL6PofyziqzSt71kD6wDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"768719e39c063ae32989ffe74f4a7b1e18a06bc9c2a24a5c824eaadc3b679fdb","last_reissued_at":"2026-07-05T06:48:36.055182Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:48:36.055182Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2308.00452","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:48:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"X94KYMKweW7zBYKrG1xisbdX3LrZEBSA/6bwM95A4ZFHx5Lu+7F2wejIpKhNLKbDiJoCOZHicNJcL39DwwW5Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T01:39:38.723044Z"},"content_sha256":"a02ed977221c96619519eacd879eb61a853762d7b1dc2cc9c339a971eeb50324","schema_version":"1.0","event_id":"sha256:a02ed977221c96619519eacd879eb61a853762d7b1dc2cc9c339a971eeb50324"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:O2DRTY44AY5OGKMJ77TU6ST3DY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Majority Invariant Approach to Patch Robustness Certification for Deep Learning Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.SE"],"primary_cat":"cs.LG","authors_text":"Haipeng Wang, Qilin Zhou, W.K. Chan, Zhengyuan Wei","submitted_at":"2023-08-01T11:05:13Z","abstract_excerpt":"Patch robustness certification ensures no patch within a given bound on a sample can manipulate a deep learning model to predict a different label. However, existing techniques cannot certify samples that cannot meet their strict bars at the classifier or patch region levels. This paper proposes MajorCert. MajorCert firstly finds all possible label sets manipulatable by the same patch region on the same sample across the underlying classifiers, then enumerates their combinations element-wise, and finally checks whether the majority invariant of all these combinations is intact to certify sampl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.00452","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2308.00452/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:48:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CKGQwERtMFnoMQXkJ0/8SeY8666OLA49Wbd87RKozajuA019odb0tX27Hn66qyvnZPohm0pCWz7zxbMbkxfNAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T01:39:38.723439Z"},"content_sha256":"2d54d8f764ad19b0788fc5e9ade0f0411a46099bb8b588e90fecc8edb7f72f32","schema_version":"1.0","event_id":"sha256:2d54d8f764ad19b0788fc5e9ade0f0411a46099bb8b588e90fecc8edb7f72f32"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/O2DRTY44AY5OGKMJ77TU6ST3DY/bundle.json","state_url":"https://pith.science/pith/O2DRTY44AY5OGKMJ77TU6ST3DY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/O2DRTY44AY5OGKMJ77TU6ST3DY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-09T01:39:38Z","links":{"resolver":"https://pith.science/pith/O2DRTY44AY5OGKMJ77TU6ST3DY","bundle":"https://pith.science/pith/O2DRTY44AY5OGKMJ77TU6ST3DY/bundle.json","state":"https://pith.science/pith/O2DRTY44AY5OGKMJ77TU6ST3DY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/O2DRTY44AY5OGKMJ77TU6ST3DY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:O2DRTY44AY5OGKMJ77TU6ST3DY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f92676c29c09d20f1ac11f8d706f0506859f155ed2bc7b90991a579fd67f1819","cross_cats_sorted":["cs.CV","cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-01T11:05:13Z","title_canon_sha256":"ba61884b70ec5e5008cf35e34c23598f3a7e4ea28a8812e51f23610ec571b9f5"},"schema_version":"1.0","source":{"id":"2308.00452","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.00452","created_at":"2026-07-05T06:48:36Z"},{"alias_kind":"arxiv_version","alias_value":"2308.00452v2","created_at":"2026-07-05T06:48:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.00452","created_at":"2026-07-05T06:48:36Z"},{"alias_kind":"pith_short_12","alias_value":"O2DRTY44AY5O","created_at":"2026-07-05T06:48:36Z"},{"alias_kind":"pith_short_16","alias_value":"O2DRTY44AY5OGKMJ","created_at":"2026-07-05T06:48:36Z"},{"alias_kind":"pith_short_8","alias_value":"O2DRTY44","created_at":"2026-07-05T06:48:36Z"}],"graph_snapshots":[{"event_id":"sha256:2d54d8f764ad19b0788fc5e9ade0f0411a46099bb8b588e90fecc8edb7f72f32","target":"graph","created_at":"2026-07-05T06:48:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2308.00452/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Patch robustness certification ensures no patch within a given bound on a sample can manipulate a deep learning model to predict a different label. However, existing techniques cannot certify samples that cannot meet their strict bars at the classifier or patch region levels. This paper proposes MajorCert. MajorCert firstly finds all possible label sets manipulatable by the same patch region on the same sample across the underlying classifiers, then enumerates their combinations element-wise, and finally checks whether the majority invariant of all these combinations is intact to certify sampl","authors_text":"Haipeng Wang, Qilin Zhou, W.K. Chan, Zhengyuan Wei","cross_cats":["cs.CV","cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-01T11:05:13Z","title":"A Majority Invariant Approach to Patch Robustness Certification for Deep Learning Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.00452","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a02ed977221c96619519eacd879eb61a853762d7b1dc2cc9c339a971eeb50324","target":"record","created_at":"2026-07-05T06:48:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f92676c29c09d20f1ac11f8d706f0506859f155ed2bc7b90991a579fd67f1819","cross_cats_sorted":["cs.CV","cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-08-01T11:05:13Z","title_canon_sha256":"ba61884b70ec5e5008cf35e34c23598f3a7e4ea28a8812e51f23610ec571b9f5"},"schema_version":"1.0","source":{"id":"2308.00452","kind":"arxiv","version":2}},"canonical_sha256":"768719e39c063ae32989ffe74f4a7b1e18a06bc9c2a24a5c824eaadc3b679fdb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"768719e39c063ae32989ffe74f4a7b1e18a06bc9c2a24a5c824eaadc3b679fdb","first_computed_at":"2026-07-05T06:48:36.055182Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:48:36.055182Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vtNQT9GwpQZgheV/JgSD3R5iDdFcKDC1zVZyagawlMSKVf/WfsO7DzfvN75O5BVaFoL6PofyziqzSt71kD6wDA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:48:36.055665Z","signed_message":"canonical_sha256_bytes"},"source_id":"2308.00452","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a02ed977221c96619519eacd879eb61a853762d7b1dc2cc9c339a971eeb50324","sha256:2d54d8f764ad19b0788fc5e9ade0f0411a46099bb8b588e90fecc8edb7f72f32"],"state_sha256":"f6b77a99212966b959cbbe052e26734a0af03b0e4e00fa07c15e2ff0160a5cc6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hsced6hWCF3qBqcOmOvYe2JSNSDXfufT3Jl27bLeuGuR01cf0E8itIsm0V5XZHsaMZOjC6GVrogCHhejCvLgAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-09T01:39:38.725657Z","bundle_sha256":"d09b14153379003b757989337051aaa9272333cd6571f0837b33c6c8d7d43b2d"}}