{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:PHYKB3NZ5M5SB67UIBGNMPJ6XV","short_pith_number":"pith:PHYKB3NZ","canonical_record":{"source":{"id":"2412.12449","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2024-12-17T01:26:42Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a7ba59d3b1c3bb8a0394d6455f4fda7209c888abb993a6a6cfcc60fd979df462","abstract_canon_sha256":"643b6ef4f8ecbda18b8be510ee5cc0e8b92b3f4f3b178f5e8261c5a8e83a2727"},"schema_version":"1.0"},"canonical_sha256":"79f0a0edb9eb3b20fbf4404cd63d3ebd52762c97fb13b915e88687e91317c9fd","source":{"kind":"arxiv","id":"2412.12449","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.12449","created_at":"2026-07-05T09:50:15Z"},{"alias_kind":"arxiv_version","alias_value":"2412.12449v1","created_at":"2026-07-05T09:50:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.12449","created_at":"2026-07-05T09:50:15Z"},{"alias_kind":"pith_short_12","alias_value":"PHYKB3NZ5M5S","created_at":"2026-07-05T09:50:15Z"},{"alias_kind":"pith_short_16","alias_value":"PHYKB3NZ5M5SB67U","created_at":"2026-07-05T09:50:15Z"},{"alias_kind":"pith_short_8","alias_value":"PHYKB3NZ","created_at":"2026-07-05T09:50:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:PHYKB3NZ5M5SB67UIBGNMPJ6XV","target":"record","payload":{"canonical_record":{"source":{"id":"2412.12449","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2024-12-17T01:26:42Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a7ba59d3b1c3bb8a0394d6455f4fda7209c888abb993a6a6cfcc60fd979df462","abstract_canon_sha256":"643b6ef4f8ecbda18b8be510ee5cc0e8b92b3f4f3b178f5e8261c5a8e83a2727"},"schema_version":"1.0"},"canonical_sha256":"79f0a0edb9eb3b20fbf4404cd63d3ebd52762c97fb13b915e88687e91317c9fd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:50:15.050617Z","signature_b64":"mFsRRKvWjnrDRwq5DhdHaHiDiGIJxL6ZJUwux3LtLkjymu4L6HqV4IwRSBnpl3ht2ALS7e6KBNkbibw7Z0yzBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"79f0a0edb9eb3b20fbf4404cd63d3ebd52762c97fb13b915e88687e91317c9fd","last_reissued_at":"2026-07-05T09:50:15.050218Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:50:15.050218Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.12449","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:50:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"frs4aBjJJkIwK4HmX2A29ESzZGSye94lTSDYyYXNduao8mN9/vA1Y18K+kOHj0xMzcWuluychSzhtrdpaqDoCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T05:23:05.564541Z"},"content_sha256":"8f14185dfafa29328733ba4358bd71b41b04e38eb09b84fde4f8d71bef8d2b32","schema_version":"1.0","event_id":"sha256:8f14185dfafa29328733ba4358bd71b41b04e38eb09b84fde4f8d71bef8d2b32"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:PHYKB3NZ5M5SB67UIBGNMPJ6XV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarially robust generalization theory via Jacobian regularization for deep neural networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"stat.ML","authors_text":"Dongya Wu, Xin Li","submitted_at":"2024-12-17T01:26:42Z","abstract_excerpt":"Powerful deep neural networks are vulnerable to adversarial attacks. To obtain adversarially robust models, researchers have separately developed adversarial training and Jacobian regularization techniques. There are abundant theoretical and empirical studies for adversarial training, but theoretical foundations for Jacobian regularization are still lacking. In this study, we show that Jacobian regularization is closely related to adversarial training in that $\\ell_{2}$ or $\\ell_{1}$ Jacobian regularized loss serves as an approximate upper bound on the adversarially robust loss under $\\ell_{2}"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.12449","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.12449/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:50:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3lS26rsNPLr6JYTKitEkcWrfHzh2aN54oGvDxaKoc3Jkq6CYUWpLtVIes6On4pQtclW46skQ9BbJrNtr8c2fBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T05:23:05.564926Z"},"content_sha256":"a969af663101688f1f69dc999e0246b996dfcca68260495351972e736766c571","schema_version":"1.0","event_id":"sha256:a969af663101688f1f69dc999e0246b996dfcca68260495351972e736766c571"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PHYKB3NZ5M5SB67UIBGNMPJ6XV/bundle.json","state_url":"https://pith.science/pith/PHYKB3NZ5M5SB67UIBGNMPJ6XV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PHYKB3NZ5M5SB67UIBGNMPJ6XV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-24T05:23:05Z","links":{"resolver":"https://pith.science/pith/PHYKB3NZ5M5SB67UIBGNMPJ6XV","bundle":"https://pith.science/pith/PHYKB3NZ5M5SB67UIBGNMPJ6XV/bundle.json","state":"https://pith.science/pith/PHYKB3NZ5M5SB67UIBGNMPJ6XV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PHYKB3NZ5M5SB67UIBGNMPJ6XV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:PHYKB3NZ5M5SB67UIBGNMPJ6XV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"643b6ef4f8ecbda18b8be510ee5cc0e8b92b3f4f3b178f5e8261c5a8e83a2727","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2024-12-17T01:26:42Z","title_canon_sha256":"a7ba59d3b1c3bb8a0394d6455f4fda7209c888abb993a6a6cfcc60fd979df462"},"schema_version":"1.0","source":{"id":"2412.12449","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.12449","created_at":"2026-07-05T09:50:15Z"},{"alias_kind":"arxiv_version","alias_value":"2412.12449v1","created_at":"2026-07-05T09:50:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.12449","created_at":"2026-07-05T09:50:15Z"},{"alias_kind":"pith_short_12","alias_value":"PHYKB3NZ5M5S","created_at":"2026-07-05T09:50:15Z"},{"alias_kind":"pith_short_16","alias_value":"PHYKB3NZ5M5SB67U","created_at":"2026-07-05T09:50:15Z"},{"alias_kind":"pith_short_8","alias_value":"PHYKB3NZ","created_at":"2026-07-05T09:50:15Z"}],"graph_snapshots":[{"event_id":"sha256:a969af663101688f1f69dc999e0246b996dfcca68260495351972e736766c571","target":"graph","created_at":"2026-07-05T09:50:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.12449/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Powerful deep neural networks are vulnerable to adversarial attacks. To obtain adversarially robust models, researchers have separately developed adversarial training and Jacobian regularization techniques. There are abundant theoretical and empirical studies for adversarial training, but theoretical foundations for Jacobian regularization are still lacking. In this study, we show that Jacobian regularization is closely related to adversarial training in that $\\ell_{2}$ or $\\ell_{1}$ Jacobian regularized loss serves as an approximate upper bound on the adversarially robust loss under $\\ell_{2}","authors_text":"Dongya Wu, Xin Li","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2024-12-17T01:26:42Z","title":"Adversarially robust generalization theory via Jacobian regularization for deep neural networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.12449","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8f14185dfafa29328733ba4358bd71b41b04e38eb09b84fde4f8d71bef8d2b32","target":"record","created_at":"2026-07-05T09:50:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"643b6ef4f8ecbda18b8be510ee5cc0e8b92b3f4f3b178f5e8261c5a8e83a2727","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2024-12-17T01:26:42Z","title_canon_sha256":"a7ba59d3b1c3bb8a0394d6455f4fda7209c888abb993a6a6cfcc60fd979df462"},"schema_version":"1.0","source":{"id":"2412.12449","kind":"arxiv","version":1}},"canonical_sha256":"79f0a0edb9eb3b20fbf4404cd63d3ebd52762c97fb13b915e88687e91317c9fd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"79f0a0edb9eb3b20fbf4404cd63d3ebd52762c97fb13b915e88687e91317c9fd","first_computed_at":"2026-07-05T09:50:15.050218Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:50:15.050218Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mFsRRKvWjnrDRwq5DhdHaHiDiGIJxL6ZJUwux3LtLkjymu4L6HqV4IwRSBnpl3ht2ALS7e6KBNkbibw7Z0yzBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:50:15.050617Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.12449","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8f14185dfafa29328733ba4358bd71b41b04e38eb09b84fde4f8d71bef8d2b32","sha256:a969af663101688f1f69dc999e0246b996dfcca68260495351972e736766c571"],"state_sha256":"cc9155a018b40723630890528b42149569dad61bbabb3784b676239a441722ce"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CCTWydBXPzp0HrsrNEv1fpid834wUXiTRaSSKOYSp1DM/wjpKJ6bEi/5esJbmGiNwrxV/L/u5GQAD5BbwJlzAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-24T05:23:05.567656Z","bundle_sha256":"9ca0dff6d2dbaf9d4fb069cd1914ae103d37ad2f303ca2d80d0ea146c0166c09"}}