{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:RRSRGWQF66SNHOTCYAD6PXZMOH","short_pith_number":"pith:RRSRGWQF","canonical_record":{"source":{"id":"2301.12554","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-01-29T22:05:28Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"20b37bd0e4e75544f249466bca5376089b81843ae54c8d795a2bbade3506348b","abstract_canon_sha256":"cd9280fb532b40fed62ad5cdb46187354649755d425b9cb124102839c9187483"},"schema_version":"1.0"},"canonical_sha256":"8c65135a05f7a4d3ba62c007e7df2c71eb408ccfab8afdb4f0cc773c42dae429","source":{"kind":"arxiv","id":"2301.12554","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.12554","created_at":"2026-07-05T08:46:16Z"},{"alias_kind":"arxiv_version","alias_value":"2301.12554v5","created_at":"2026-07-05T08:46:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.12554","created_at":"2026-07-05T08:46:16Z"},{"alias_kind":"pith_short_12","alias_value":"RRSRGWQF66SN","created_at":"2026-07-05T08:46:16Z"},{"alias_kind":"pith_short_16","alias_value":"RRSRGWQF66SNHOTC","created_at":"2026-07-05T08:46:16Z"},{"alias_kind":"pith_short_8","alias_value":"RRSRGWQF","created_at":"2026-07-05T08:46:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:RRSRGWQF66SNHOTCYAD6PXZMOH","target":"record","payload":{"canonical_record":{"source":{"id":"2301.12554","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-01-29T22:05:28Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"20b37bd0e4e75544f249466bca5376089b81843ae54c8d795a2bbade3506348b","abstract_canon_sha256":"cd9280fb532b40fed62ad5cdb46187354649755d425b9cb124102839c9187483"},"schema_version":"1.0"},"canonical_sha256":"8c65135a05f7a4d3ba62c007e7df2c71eb408ccfab8afdb4f0cc773c42dae429","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:46:16.005074Z","signature_b64":"RqhMFiqPPppEswAzn9I2mH5yph+ypYUorDVCqOVX7e6PW/6Cz/QBWfvamiQWMi0I7I+B4shPpRtEd+FumfxgDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8c65135a05f7a4d3ba62c007e7df2c71eb408ccfab8afdb4f0cc773c42dae429","last_reissued_at":"2026-07-05T08:46:16.004598Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:46:16.004598Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2301.12554","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:46:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aesnMrH/XQfRZboCc5ibs/fVp4ONmsDTKFcd+vqntZVHYJLVxzrH6k0j15WxfrETpusdSD5ivchSaWKYRMfCAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T03:09:58.441966Z"},"content_sha256":"d0e8b8fbfe040a15dd827406ad5c2ff6931823722b880086d1fa5ca0dc8ff498","schema_version":"1.0","event_id":"sha256:d0e8b8fbfe040a15dd827406ad5c2ff6931823722b880086d1fa5ca0dc8ff498"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:RRSRGWQF66SNHOTCYAD6PXZMOH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Aerin Kim, Brendon G. Anderson, Somayeh Sojoudi, Yatong Bai","submitted_at":"2023-01-29T22:05:28Z","abstract_excerpt":"While prior research has proposed a plethora of methods that build neural classifiers robust against adversarial robustness, practitioners are still reluctant to adopt them due to their unacceptably severe clean accuracy penalties. This paper significantly alleviates this accuracy-robustness trade-off by mixing the output probabilities of a standard classifier and a robust classifier, where the standard network is optimized for clean accuracy and is not robust in general. We show that the robust base classifier's confidence difference for correct and incorrect examples is the key to this impro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.12554","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2301.12554/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:46:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"g3Wj/RIvAxR82jikqvRpgfB0wBRW7pkQrNAk96Vx8iRkZgqiUu2RFY9J3+iGUzqU3LS+Ngg/AUw3W+4KRXJCCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T03:09:58.442487Z"},"content_sha256":"8966a677c6f3cca6d4d501c6cc38e33308680c0e909a900b1cced0c3c8420e1d","schema_version":"1.0","event_id":"sha256:8966a677c6f3cca6d4d501c6cc38e33308680c0e909a900b1cced0c3c8420e1d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RRSRGWQF66SNHOTCYAD6PXZMOH/bundle.json","state_url":"https://pith.science/pith/RRSRGWQF66SNHOTCYAD6PXZMOH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RRSRGWQF66SNHOTCYAD6PXZMOH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T03:09:58Z","links":{"resolver":"https://pith.science/pith/RRSRGWQF66SNHOTCYAD6PXZMOH","bundle":"https://pith.science/pith/RRSRGWQF66SNHOTCYAD6PXZMOH/bundle.json","state":"https://pith.science/pith/RRSRGWQF66SNHOTCYAD6PXZMOH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RRSRGWQF66SNHOTCYAD6PXZMOH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:RRSRGWQF66SNHOTCYAD6PXZMOH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cd9280fb532b40fed62ad5cdb46187354649755d425b9cb124102839c9187483","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-01-29T22:05:28Z","title_canon_sha256":"20b37bd0e4e75544f249466bca5376089b81843ae54c8d795a2bbade3506348b"},"schema_version":"1.0","source":{"id":"2301.12554","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.12554","created_at":"2026-07-05T08:46:16Z"},{"alias_kind":"arxiv_version","alias_value":"2301.12554v5","created_at":"2026-07-05T08:46:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.12554","created_at":"2026-07-05T08:46:16Z"},{"alias_kind":"pith_short_12","alias_value":"RRSRGWQF66SN","created_at":"2026-07-05T08:46:16Z"},{"alias_kind":"pith_short_16","alias_value":"RRSRGWQF66SNHOTC","created_at":"2026-07-05T08:46:16Z"},{"alias_kind":"pith_short_8","alias_value":"RRSRGWQF","created_at":"2026-07-05T08:46:16Z"}],"graph_snapshots":[{"event_id":"sha256:8966a677c6f3cca6d4d501c6cc38e33308680c0e909a900b1cced0c3c8420e1d","target":"graph","created_at":"2026-07-05T08:46:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2301.12554/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While prior research has proposed a plethora of methods that build neural classifiers robust against adversarial robustness, practitioners are still reluctant to adopt them due to their unacceptably severe clean accuracy penalties. This paper significantly alleviates this accuracy-robustness trade-off by mixing the output probabilities of a standard classifier and a robust classifier, where the standard network is optimized for clean accuracy and is not robust in general. We show that the robust base classifier's confidence difference for correct and incorrect examples is the key to this impro","authors_text":"Aerin Kim, Brendon G. Anderson, Somayeh Sojoudi, Yatong Bai","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-01-29T22:05:28Z","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.12554","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d0e8b8fbfe040a15dd827406ad5c2ff6931823722b880086d1fa5ca0dc8ff498","target":"record","created_at":"2026-07-05T08:46:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cd9280fb532b40fed62ad5cdb46187354649755d425b9cb124102839c9187483","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-01-29T22:05:28Z","title_canon_sha256":"20b37bd0e4e75544f249466bca5376089b81843ae54c8d795a2bbade3506348b"},"schema_version":"1.0","source":{"id":"2301.12554","kind":"arxiv","version":5}},"canonical_sha256":"8c65135a05f7a4d3ba62c007e7df2c71eb408ccfab8afdb4f0cc773c42dae429","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8c65135a05f7a4d3ba62c007e7df2c71eb408ccfab8afdb4f0cc773c42dae429","first_computed_at":"2026-07-05T08:46:16.004598Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:46:16.004598Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RqhMFiqPPppEswAzn9I2mH5yph+ypYUorDVCqOVX7e6PW/6Cz/QBWfvamiQWMi0I7I+B4shPpRtEd+FumfxgDA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:46:16.005074Z","signed_message":"canonical_sha256_bytes"},"source_id":"2301.12554","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d0e8b8fbfe040a15dd827406ad5c2ff6931823722b880086d1fa5ca0dc8ff498","sha256:8966a677c6f3cca6d4d501c6cc38e33308680c0e909a900b1cced0c3c8420e1d"],"state_sha256":"cddccf5718763ff6afe51dc7531992eea2693e64444941d3dc8c8e161bee0bd5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P/iS7Pzcxyo7KcxCfa0OYsrxMMxvhxxVXrdSx1mXFpkF+sMTX4/WTBHZvDK2RbL0VKdNe+apdSAzHyktvs/4Cw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T03:09:58.448834Z","bundle_sha256":"ac238b1c1253b2eb52683283ad6b7323e4d25dda2a42ab8fc72e3f0784158ed8"}}