{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:PFFT726S2JCH7EO3XXS2KKGGVP","short_pith_number":"pith:PFFT726S","canonical_record":{"source":{"id":"2212.07016","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2022-12-14T04:08:56Z","cross_cats_sorted":[],"title_canon_sha256":"64f04c2575bd958366ef0778e68cc36dc1133e83b0ec77a09a48554a8f09a78b","abstract_canon_sha256":"bcef528c763c5c144ca08e484e74336059503aca45c65e39dbfe5f9ac58f0390"},"schema_version":"1.0"},"canonical_sha256":"794b3febd2d2447f91dbbde5a528c6abc6a3fbdfa46aeb510f474f5819107d61","source":{"kind":"arxiv","id":"2212.07016","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.07016","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"arxiv_version","alias_value":"2212.07016v2","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.07016","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"pith_short_12","alias_value":"PFFT726S2JCH","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"pith_short_16","alias_value":"PFFT726S2JCH7EO3","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"pith_short_8","alias_value":"PFFT726S","created_at":"2026-07-05T06:03:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:PFFT726S2JCH7EO3XXS2KKGGVP","target":"record","payload":{"canonical_record":{"source":{"id":"2212.07016","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2022-12-14T04:08:56Z","cross_cats_sorted":[],"title_canon_sha256":"64f04c2575bd958366ef0778e68cc36dc1133e83b0ec77a09a48554a8f09a78b","abstract_canon_sha256":"bcef528c763c5c144ca08e484e74336059503aca45c65e39dbfe5f9ac58f0390"},"schema_version":"1.0"},"canonical_sha256":"794b3febd2d2447f91dbbde5a528c6abc6a3fbdfa46aeb510f474f5819107d61","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:03:10.768114Z","signature_b64":"DWvcXLQwZ37RJJVa5x9ft/ClVxNu0MRriV0m60gSm1rWlAaJgST8Ch3vtJVj3tMtVrrYsNmfSSzysCfo/apNAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"794b3febd2d2447f91dbbde5a528c6abc6a3fbdfa46aeb510f474f5819107d61","last_reissued_at":"2026-07-05T06:03:10.767587Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:03:10.767587Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2212.07016","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:03:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dO1tTI8p3j7Sg+lE+bK72pNoZVGy9u6eOmHqJLa/Nm3WwhQoKljPe75QiWFTChzAI22Y9SVQfRKRLf0ZjbYTAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T19:07:51.532682Z"},"content_sha256":"f3d56a92a67f94204e2ad439879a9cc16669dc12f363b8848ad4271f038c0e27","schema_version":"1.0","event_id":"sha256:f3d56a92a67f94204e2ad439879a9cc16669dc12f363b8848ad4271f038c0e27"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:PFFT726S2JCH7EO3XXS2KKGGVP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Understanding Zero-Shot Adversarial Robustness for Large-Scale Models","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Carl Vondrick, Chengzhi Mao, Junfeng Yang, Scott Geng, Xin Wang","submitted_at":"2022-12-14T04:08:56Z","abstract_excerpt":"Pretrained large-scale vision-language models like CLIP have exhibited strong generalization over unseen tasks. Yet imperceptible adversarial perturbations can significantly reduce CLIP's performance on new tasks. In this work, we identify and explore the problem of \\emph{adapting large-scale models for zero-shot adversarial robustness}. We first identify two key factors during model adaption -- training losses and adaptation methods -- that affect the model's zero-shot adversarial robustness. We then propose a text-guided contrastive adversarial training loss, which aligns the text embeddings"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.07016","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2212.07016/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:03:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p3ItiJQs56nwKNh4ruOuMT8HsU6jvv5CTof3BhdQD54tLBFjwJe/NX/p2uYkNxMEI/R/sxrid6iP2+rOml6ACQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T19:07:51.533218Z"},"content_sha256":"9a229357369aed8cef16f96f0827ab2e235879b7ec71c637b35f8d7ee110e059","schema_version":"1.0","event_id":"sha256:9a229357369aed8cef16f96f0827ab2e235879b7ec71c637b35f8d7ee110e059"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PFFT726S2JCH7EO3XXS2KKGGVP/bundle.json","state_url":"https://pith.science/pith/PFFT726S2JCH7EO3XXS2KKGGVP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PFFT726S2JCH7EO3XXS2KKGGVP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T19:07:51Z","links":{"resolver":"https://pith.science/pith/PFFT726S2JCH7EO3XXS2KKGGVP","bundle":"https://pith.science/pith/PFFT726S2JCH7EO3XXS2KKGGVP/bundle.json","state":"https://pith.science/pith/PFFT726S2JCH7EO3XXS2KKGGVP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PFFT726S2JCH7EO3XXS2KKGGVP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:PFFT726S2JCH7EO3XXS2KKGGVP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bcef528c763c5c144ca08e484e74336059503aca45c65e39dbfe5f9ac58f0390","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2022-12-14T04:08:56Z","title_canon_sha256":"64f04c2575bd958366ef0778e68cc36dc1133e83b0ec77a09a48554a8f09a78b"},"schema_version":"1.0","source":{"id":"2212.07016","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.07016","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"arxiv_version","alias_value":"2212.07016v2","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.07016","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"pith_short_12","alias_value":"PFFT726S2JCH","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"pith_short_16","alias_value":"PFFT726S2JCH7EO3","created_at":"2026-07-05T06:03:10Z"},{"alias_kind":"pith_short_8","alias_value":"PFFT726S","created_at":"2026-07-05T06:03:10Z"}],"graph_snapshots":[{"event_id":"sha256:9a229357369aed8cef16f96f0827ab2e235879b7ec71c637b35f8d7ee110e059","target":"graph","created_at":"2026-07-05T06:03:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2212.07016/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Pretrained large-scale vision-language models like CLIP have exhibited strong generalization over unseen tasks. Yet imperceptible adversarial perturbations can significantly reduce CLIP's performance on new tasks. In this work, we identify and explore the problem of \\emph{adapting large-scale models for zero-shot adversarial robustness}. We first identify two key factors during model adaption -- training losses and adaptation methods -- that affect the model's zero-shot adversarial robustness. We then propose a text-guided contrastive adversarial training loss, which aligns the text embeddings","authors_text":"Carl Vondrick, Chengzhi Mao, Junfeng Yang, Scott Geng, Xin Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2022-12-14T04:08:56Z","title":"Understanding Zero-Shot Adversarial Robustness for Large-Scale Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.07016","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f3d56a92a67f94204e2ad439879a9cc16669dc12f363b8848ad4271f038c0e27","target":"record","created_at":"2026-07-05T06:03:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bcef528c763c5c144ca08e484e74336059503aca45c65e39dbfe5f9ac58f0390","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2022-12-14T04:08:56Z","title_canon_sha256":"64f04c2575bd958366ef0778e68cc36dc1133e83b0ec77a09a48554a8f09a78b"},"schema_version":"1.0","source":{"id":"2212.07016","kind":"arxiv","version":2}},"canonical_sha256":"794b3febd2d2447f91dbbde5a528c6abc6a3fbdfa46aeb510f474f5819107d61","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"794b3febd2d2447f91dbbde5a528c6abc6a3fbdfa46aeb510f474f5819107d61","first_computed_at":"2026-07-05T06:03:10.767587Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:03:10.767587Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DWvcXLQwZ37RJJVa5x9ft/ClVxNu0MRriV0m60gSm1rWlAaJgST8Ch3vtJVj3tMtVrrYsNmfSSzysCfo/apNAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:03:10.768114Z","signed_message":"canonical_sha256_bytes"},"source_id":"2212.07016","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f3d56a92a67f94204e2ad439879a9cc16669dc12f363b8848ad4271f038c0e27","sha256:9a229357369aed8cef16f96f0827ab2e235879b7ec71c637b35f8d7ee110e059"],"state_sha256":"887d35bcec2bd04634be57694b1e861948661935e06e0ea97fac2513e586daf5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IC+u1aTD6+AItLDUUdDYNpkpaPAy2LL6T7Do9GrQcXkOrxrQ09jJ1zAz21UO0hFxPe61ZBGQzsKs/Ci5dAREDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T19:07:51.537046Z","bundle_sha256":"255ec7af88077403c565a7b4ebb6a9ff640ae0665274eea1f8935e68474d2ff3"}}