{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:P3CWHSIR7MOGZO3BS3Z66DQ6R7","short_pith_number":"pith:P3CWHSIR","canonical_record":{"source":{"id":"2103.11257","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-20T22:36:39Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"7f030dd7fc89cdb6f9af8832f0a746d15b41583c0157ace8cdb32f96fe7edeb2","abstract_canon_sha256":"e055e3161e535f9427e9c3a5b0b5df6cbcf5feef27f5ff5f30a601c593bd5acf"},"schema_version":"1.0"},"canonical_sha256":"7ec563c911fb1c6cbb6196f3ef0e1e8fc93d65895d9b68996bd522f9bee51623","source":{"kind":"arxiv","id":"2103.11257","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.11257","created_at":"2026-07-05T03:20:20Z"},{"alias_kind":"arxiv_version","alias_value":"2103.11257v3","created_at":"2026-07-05T03:20:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.11257","created_at":"2026-07-05T03:20:20Z"},{"alias_kind":"pith_short_12","alias_value":"P3CWHSIR7MOG","created_at":"2026-07-05T03:20:20Z"},{"alias_kind":"pith_short_16","alias_value":"P3CWHSIR7MOGZO3B","created_at":"2026-07-05T03:20:20Z"},{"alias_kind":"pith_short_8","alias_value":"P3CWHSIR","created_at":"2026-07-05T03:20:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:P3CWHSIR7MOGZO3BS3Z66DQ6R7","target":"record","payload":{"canonical_record":{"source":{"id":"2103.11257","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-20T22:36:39Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"7f030dd7fc89cdb6f9af8832f0a746d15b41583c0157ace8cdb32f96fe7edeb2","abstract_canon_sha256":"e055e3161e535f9427e9c3a5b0b5df6cbcf5feef27f5ff5f30a601c593bd5acf"},"schema_version":"1.0"},"canonical_sha256":"7ec563c911fb1c6cbb6196f3ef0e1e8fc93d65895d9b68996bd522f9bee51623","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:20:20.233187Z","signature_b64":"YxgU1DePw4yz7Rb27x7GrF+8ZLio+c01cMShmyTSaGzdpNx6PpnKyaZHSY/MR33YcL1acdxKHur02HMv0sGEDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7ec563c911fb1c6cbb6196f3ef0e1e8fc93d65895d9b68996bd522f9bee51623","last_reissued_at":"2026-07-05T03:20:20.232684Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:20:20.232684Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2103.11257","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:20:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TZX3LCkGQvUccAsAB++xHZRRi36+b0qSJC1xvplJBj2sQsefhxjANeEtpyrRJbLuHVU1HWyZOF+jl/8R51qWDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T06:14:11.571049Z"},"content_sha256":"6087f4f9655325a735bfba8e12c7e3e94d04bba59bb89fdc81ce9c4853847dd8","schema_version":"1.0","event_id":"sha256:6087f4f9655325a735bfba8e12c7e3e94d04bba59bb89fdc81ce9c4853847dd8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:P3CWHSIR7MOGZO3BS3Z66DQ6R7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Robust Models Are More Interpretable Because Attributions Look Normal","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Anupam Datta, Matt Fredrikson, Zifan Wang","submitted_at":"2021-03-20T22:36:39Z","abstract_excerpt":"Recent work has found that adversarially-robust deep networks used for image classification are more interpretable: their feature attributions tend to be sharper, and are more concentrated on the objects associated with the image's ground-truth class. We show that smooth decision boundaries play an important role in this enhanced interpretability, as the model's input gradients around data points will more closely align with boundaries' normal vectors when they are smooth. Thus, because robust models have smoother boundaries, the results of gradient-based attribution methods, like Integrated G"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.11257","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2103.11257/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:20:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9JCeis652CHpnjeV/UQgtFFDt5+BZA3Uk8Jq4oSDbG4i1ncxLYchX2oOf1fcX7zITyqC1V3S2QvqD6W3r8cGDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T06:14:11.571525Z"},"content_sha256":"de9ef604ec28068162f8f6c41ba8314fa1b96465233026ce914e7fe433e4c204","schema_version":"1.0","event_id":"sha256:de9ef604ec28068162f8f6c41ba8314fa1b96465233026ce914e7fe433e4c204"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/P3CWHSIR7MOGZO3BS3Z66DQ6R7/bundle.json","state_url":"https://pith.science/pith/P3CWHSIR7MOGZO3BS3Z66DQ6R7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/P3CWHSIR7MOGZO3BS3Z66DQ6R7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T06:14:11Z","links":{"resolver":"https://pith.science/pith/P3CWHSIR7MOGZO3BS3Z66DQ6R7","bundle":"https://pith.science/pith/P3CWHSIR7MOGZO3BS3Z66DQ6R7/bundle.json","state":"https://pith.science/pith/P3CWHSIR7MOGZO3BS3Z66DQ6R7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/P3CWHSIR7MOGZO3BS3Z66DQ6R7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:P3CWHSIR7MOGZO3BS3Z66DQ6R7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e055e3161e535f9427e9c3a5b0b5df6cbcf5feef27f5ff5f30a601c593bd5acf","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-20T22:36:39Z","title_canon_sha256":"7f030dd7fc89cdb6f9af8832f0a746d15b41583c0157ace8cdb32f96fe7edeb2"},"schema_version":"1.0","source":{"id":"2103.11257","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.11257","created_at":"2026-07-05T03:20:20Z"},{"alias_kind":"arxiv_version","alias_value":"2103.11257v3","created_at":"2026-07-05T03:20:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.11257","created_at":"2026-07-05T03:20:20Z"},{"alias_kind":"pith_short_12","alias_value":"P3CWHSIR7MOG","created_at":"2026-07-05T03:20:20Z"},{"alias_kind":"pith_short_16","alias_value":"P3CWHSIR7MOGZO3B","created_at":"2026-07-05T03:20:20Z"},{"alias_kind":"pith_short_8","alias_value":"P3CWHSIR","created_at":"2026-07-05T03:20:20Z"}],"graph_snapshots":[{"event_id":"sha256:de9ef604ec28068162f8f6c41ba8314fa1b96465233026ce914e7fe433e4c204","target":"graph","created_at":"2026-07-05T03:20:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.11257/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent work has found that adversarially-robust deep networks used for image classification are more interpretable: their feature attributions tend to be sharper, and are more concentrated on the objects associated with the image's ground-truth class. We show that smooth decision boundaries play an important role in this enhanced interpretability, as the model's input gradients around data points will more closely align with boundaries' normal vectors when they are smooth. Thus, because robust models have smoother boundaries, the results of gradient-based attribution methods, like Integrated G","authors_text":"Anupam Datta, Matt Fredrikson, Zifan Wang","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-20T22:36:39Z","title":"Robust Models Are More Interpretable Because Attributions Look Normal"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.11257","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6087f4f9655325a735bfba8e12c7e3e94d04bba59bb89fdc81ce9c4853847dd8","target":"record","created_at":"2026-07-05T03:20:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e055e3161e535f9427e9c3a5b0b5df6cbcf5feef27f5ff5f30a601c593bd5acf","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-03-20T22:36:39Z","title_canon_sha256":"7f030dd7fc89cdb6f9af8832f0a746d15b41583c0157ace8cdb32f96fe7edeb2"},"schema_version":"1.0","source":{"id":"2103.11257","kind":"arxiv","version":3}},"canonical_sha256":"7ec563c911fb1c6cbb6196f3ef0e1e8fc93d65895d9b68996bd522f9bee51623","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7ec563c911fb1c6cbb6196f3ef0e1e8fc93d65895d9b68996bd522f9bee51623","first_computed_at":"2026-07-05T03:20:20.232684Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:20:20.232684Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YxgU1DePw4yz7Rb27x7GrF+8ZLio+c01cMShmyTSaGzdpNx6PpnKyaZHSY/MR33YcL1acdxKHur02HMv0sGEDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:20:20.233187Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.11257","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6087f4f9655325a735bfba8e12c7e3e94d04bba59bb89fdc81ce9c4853847dd8","sha256:de9ef604ec28068162f8f6c41ba8314fa1b96465233026ce914e7fe433e4c204"],"state_sha256":"669222be27097b981858f09171de73195cc856ea2fa907cc32facd1fa19d35f3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GWVi0+2WPUFwzas7x/T7JurNsuSJIPOyDW/B6g4SshDc/BXiM9WXVKdYjTFA9/waExkaKuGNFSepJsWplgaVAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T06:14:11.575673Z","bundle_sha256":"dd242531fea64397ee03d46e5ce259e70770681a73141a80bdadb6bc7e448f9f"}}