{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:QPDZQFDMTJQRBV4RD7TKHTLAO5","short_pith_number":"pith:QPDZQFDM","canonical_record":{"source":{"id":"2105.04070","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2021-05-10T01:56:03Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"3f4d2ad652cff8279fdcc124474ceb3f2d6567020d5c34835e4b43c8d8f189fb","abstract_canon_sha256":"a01d4331223f9dc57067602fab476893a57c71fb454044c59e67d53e488456aa"},"schema_version":"1.0"},"canonical_sha256":"83c798146c9a6110d7911fe6a3cd60777496dbe66946fb85ec530ca0847615a1","source":{"kind":"arxiv","id":"2105.04070","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.04070","created_at":"2026-07-05T02:38:41Z"},{"alias_kind":"arxiv_version","alias_value":"2105.04070v1","created_at":"2026-07-05T02:38:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.04070","created_at":"2026-07-05T02:38:41Z"},{"alias_kind":"pith_short_12","alias_value":"QPDZQFDMTJQR","created_at":"2026-07-05T02:38:41Z"},{"alias_kind":"pith_short_16","alias_value":"QPDZQFDMTJQRBV4R","created_at":"2026-07-05T02:38:41Z"},{"alias_kind":"pith_short_8","alias_value":"QPDZQFDM","created_at":"2026-07-05T02:38:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:QPDZQFDMTJQRBV4RD7TKHTLAO5","target":"record","payload":{"canonical_record":{"source":{"id":"2105.04070","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2021-05-10T01:56:03Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"3f4d2ad652cff8279fdcc124474ceb3f2d6567020d5c34835e4b43c8d8f189fb","abstract_canon_sha256":"a01d4331223f9dc57067602fab476893a57c71fb454044c59e67d53e488456aa"},"schema_version":"1.0"},"canonical_sha256":"83c798146c9a6110d7911fe6a3cd60777496dbe66946fb85ec530ca0847615a1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:38:41.387623Z","signature_b64":"IBsE0kW6/wt8J6hEAniJk1qpTNpF+tea+m+o3OlOTJgxuXJu/hAeH0fDAzWLVn1kKb/Ov5PPVh5ws4CwUxF7DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"83c798146c9a6110d7911fe6a3cd60777496dbe66946fb85ec530ca0847615a1","last_reissued_at":"2026-07-05T02:38:41.387147Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:38:41.387147Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2105.04070","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:38:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bTD7g9px9moHr1pAbITv1Gl/TWrxqc45l4NQg2vGMhWvKDtHz+IPJElPbOPXl9532KdXjA4LBNtM1Utbsi36CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T21:36:59.053734Z"},"content_sha256":"dd4aef05283bd9968e5b456b5a15db3e16173a895c6d726d0eb4d7594d0cdc32","schema_version":"1.0","event_id":"sha256:dd4aef05283bd9968e5b456b5a15db3e16173a895c6d726d0eb4d7594d0cdc32"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:QPDZQFDMTJQRBV4RD7TKHTLAO5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Robust Training Using Natural Transformation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Carsten Rudolph, Kristen Moore, Lingjuan Lyu, Marthie Grobler, Shuo Wang, Surya Nepal","submitted_at":"2021-05-10T01:56:03Z","abstract_excerpt":"Previous robustness approaches for deep learning models such as data augmentation techniques via data transformation or adversarial training cannot capture real-world variations that preserve the semantics of the input, such as a change in lighting conditions. To bridge this gap, we present NaTra, an adversarial training scheme that is designed to improve the robustness of image classification algorithms. We target attributes of the input images that are independent of the class identification, and manipulate those attributes to mimic real-world natural transformations (NaTra) of the inputs, w"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.04070","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2105.04070/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:38:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wLPQ7/LCgi2iwEUBerYHjfgzr8duJ274/jdsZA95N2LLe+MOT0fvQO0ly8lv1wozpU8QgF0a+hK29cE9WE0DDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T21:36:59.054745Z"},"content_sha256":"becc7569f5092b1ed4ec54460e5c1041a38031d08f604d5a850a782e4e539ccb","schema_version":"1.0","event_id":"sha256:becc7569f5092b1ed4ec54460e5c1041a38031d08f604d5a850a782e4e539ccb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QPDZQFDMTJQRBV4RD7TKHTLAO5/bundle.json","state_url":"https://pith.science/pith/QPDZQFDMTJQRBV4RD7TKHTLAO5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QPDZQFDMTJQRBV4RD7TKHTLAO5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T21:36:59Z","links":{"resolver":"https://pith.science/pith/QPDZQFDMTJQRBV4RD7TKHTLAO5","bundle":"https://pith.science/pith/QPDZQFDMTJQRBV4RD7TKHTLAO5/bundle.json","state":"https://pith.science/pith/QPDZQFDMTJQRBV4RD7TKHTLAO5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QPDZQFDMTJQRBV4RD7TKHTLAO5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:QPDZQFDMTJQRBV4RD7TKHTLAO5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a01d4331223f9dc57067602fab476893a57c71fb454044c59e67d53e488456aa","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2021-05-10T01:56:03Z","title_canon_sha256":"3f4d2ad652cff8279fdcc124474ceb3f2d6567020d5c34835e4b43c8d8f189fb"},"schema_version":"1.0","source":{"id":"2105.04070","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.04070","created_at":"2026-07-05T02:38:41Z"},{"alias_kind":"arxiv_version","alias_value":"2105.04070v1","created_at":"2026-07-05T02:38:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.04070","created_at":"2026-07-05T02:38:41Z"},{"alias_kind":"pith_short_12","alias_value":"QPDZQFDMTJQR","created_at":"2026-07-05T02:38:41Z"},{"alias_kind":"pith_short_16","alias_value":"QPDZQFDMTJQRBV4R","created_at":"2026-07-05T02:38:41Z"},{"alias_kind":"pith_short_8","alias_value":"QPDZQFDM","created_at":"2026-07-05T02:38:41Z"}],"graph_snapshots":[{"event_id":"sha256:becc7569f5092b1ed4ec54460e5c1041a38031d08f604d5a850a782e4e539ccb","target":"graph","created_at":"2026-07-05T02:38:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2105.04070/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Previous robustness approaches for deep learning models such as data augmentation techniques via data transformation or adversarial training cannot capture real-world variations that preserve the semantics of the input, such as a change in lighting conditions. To bridge this gap, we present NaTra, an adversarial training scheme that is designed to improve the robustness of image classification algorithms. We target attributes of the input images that are independent of the class identification, and manipulate those attributes to mimic real-world natural transformations (NaTra) of the inputs, w","authors_text":"Carsten Rudolph, Kristen Moore, Lingjuan Lyu, Marthie Grobler, Shuo Wang, Surya Nepal","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2021-05-10T01:56:03Z","title":"Robust Training Using Natural Transformation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.04070","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dd4aef05283bd9968e5b456b5a15db3e16173a895c6d726d0eb4d7594d0cdc32","target":"record","created_at":"2026-07-05T02:38:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a01d4331223f9dc57067602fab476893a57c71fb454044c59e67d53e488456aa","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2021-05-10T01:56:03Z","title_canon_sha256":"3f4d2ad652cff8279fdcc124474ceb3f2d6567020d5c34835e4b43c8d8f189fb"},"schema_version":"1.0","source":{"id":"2105.04070","kind":"arxiv","version":1}},"canonical_sha256":"83c798146c9a6110d7911fe6a3cd60777496dbe66946fb85ec530ca0847615a1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"83c798146c9a6110d7911fe6a3cd60777496dbe66946fb85ec530ca0847615a1","first_computed_at":"2026-07-05T02:38:41.387147Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:38:41.387147Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IBsE0kW6/wt8J6hEAniJk1qpTNpF+tea+m+o3OlOTJgxuXJu/hAeH0fDAzWLVn1kKb/Ov5PPVh5ws4CwUxF7DA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:38:41.387623Z","signed_message":"canonical_sha256_bytes"},"source_id":"2105.04070","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dd4aef05283bd9968e5b456b5a15db3e16173a895c6d726d0eb4d7594d0cdc32","sha256:becc7569f5092b1ed4ec54460e5c1041a38031d08f604d5a850a782e4e539ccb"],"state_sha256":"6c75a7279cae278db69ac1c602e8d6c29c610567a551c64923fdf4e3ca0f9254"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZO5fC2UflNqLudxUOb6yIFcGlYH4hjaVcm5zAOA5iVUT2WNOMr+PXWRUIBhOLf3vpI1Nos0s9KvHl17CVS0eDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T21:36:59.060653Z","bundle_sha256":"4cde4db1f4cb171b0132324508e17a634f2a543e8b36dc850e8aaf8ac6a8d336"}}