{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:S7H3Q3SFCC2JTPJWZBCNKDPAJ3","short_pith_number":"pith:S7H3Q3SF","canonical_record":{"source":{"id":"2305.10388","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-17T17:29:10Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"c36613e3d548aac7f58a7f6d4fed0f3c77b8e834413322350a091eb306f9bad1","abstract_canon_sha256":"8fc717c9c79095a098635b5cd4377c91c30d223f50e5c83c68b2dd8e93565135"},"schema_version":"1.0"},"canonical_sha256":"97cfb86e4510b499bd36c844d50de04ecafdaaf97910b3a09aa6e035b0aef8fa","source":{"kind":"arxiv","id":"2305.10388","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.10388","created_at":"2026-07-05T06:11:13Z"},{"alias_kind":"arxiv_version","alias_value":"2305.10388v1","created_at":"2026-07-05T06:11:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.10388","created_at":"2026-07-05T06:11:13Z"},{"alias_kind":"pith_short_12","alias_value":"S7H3Q3SFCC2J","created_at":"2026-07-05T06:11:13Z"},{"alias_kind":"pith_short_16","alias_value":"S7H3Q3SFCC2JTPJW","created_at":"2026-07-05T06:11:13Z"},{"alias_kind":"pith_short_8","alias_value":"S7H3Q3SF","created_at":"2026-07-05T06:11:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:S7H3Q3SFCC2JTPJWZBCNKDPAJ3","target":"record","payload":{"canonical_record":{"source":{"id":"2305.10388","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-17T17:29:10Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"c36613e3d548aac7f58a7f6d4fed0f3c77b8e834413322350a091eb306f9bad1","abstract_canon_sha256":"8fc717c9c79095a098635b5cd4377c91c30d223f50e5c83c68b2dd8e93565135"},"schema_version":"1.0"},"canonical_sha256":"97cfb86e4510b499bd36c844d50de04ecafdaaf97910b3a09aa6e035b0aef8fa","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:11:13.876979Z","signature_b64":"Xl8/dCDXqQ8PNHwunl/Y4l++lLOISG5iZakgM6J5QL7bsrfMo3k9WNzUbXL2mZ0k48U5SkYL/aRLJKWePApqAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"97cfb86e4510b499bd36c844d50de04ecafdaaf97910b3a09aa6e035b0aef8fa","last_reissued_at":"2026-07-05T06:11:13.876463Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:11:13.876463Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.10388","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:11:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iVF5eVhHXOF7VuSxB8fDbn9zqfsKEBu/yRijVA1U+OYFFa9PK3uRLNiT+greEVb+DGjTyZ2oznwWhpAbosoJCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T15:20:58.944962Z"},"content_sha256":"b756ba4daa4d3b235ed44c68864c68be69a7d5dc27c23ae9e8d87ad58c067f08","schema_version":"1.0","event_id":"sha256:b756ba4daa4d3b235ed44c68864c68be69a7d5dc27c23ae9e8d87ad58c067f08"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:S7H3Q3SFCC2JTPJWZBCNKDPAJ3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Raising the Bar for Certified Adversarial Robustness with Diffusion Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Bj\\\"orn Eskofier, David Dobre, Gauthier Gidel, Leo Schwinn, Thomas Altstidl","submitted_at":"2023-05-17T17:29:10Z","abstract_excerpt":"Certified defenses against adversarial attacks offer formal guarantees on the robustness of a model, making them more reliable than empirical methods such as adversarial training, whose effectiveness is often later reduced by unseen attacks. Still, the limited certified robustness that is currently achievable has been a bottleneck for their practical adoption. Gowal et al. and Wang et al. have shown that generating additional training data using state-of-the-art diffusion models can considerably improve the robustness of adversarial training. In this work, we demonstrate that a similar approac"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.10388","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.10388/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:11:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KNZDUDKYibbduN5CMjM/baqwL/2uy0Hjy1kNkh+Kf6gwRX3xQjOiu6m9v+7xLOU60y8hfMW/xnK5KDgcuNx4AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T15:20:58.945884Z"},"content_sha256":"108464c317a745c81aae19fbaf6a72b083ee0358f7bd492603b429cbbb6cbe86","schema_version":"1.0","event_id":"sha256:108464c317a745c81aae19fbaf6a72b083ee0358f7bd492603b429cbbb6cbe86"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/S7H3Q3SFCC2JTPJWZBCNKDPAJ3/bundle.json","state_url":"https://pith.science/pith/S7H3Q3SFCC2JTPJWZBCNKDPAJ3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/S7H3Q3SFCC2JTPJWZBCNKDPAJ3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T15:20:58Z","links":{"resolver":"https://pith.science/pith/S7H3Q3SFCC2JTPJWZBCNKDPAJ3","bundle":"https://pith.science/pith/S7H3Q3SFCC2JTPJWZBCNKDPAJ3/bundle.json","state":"https://pith.science/pith/S7H3Q3SFCC2JTPJWZBCNKDPAJ3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/S7H3Q3SFCC2JTPJWZBCNKDPAJ3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:S7H3Q3SFCC2JTPJWZBCNKDPAJ3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8fc717c9c79095a098635b5cd4377c91c30d223f50e5c83c68b2dd8e93565135","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-17T17:29:10Z","title_canon_sha256":"c36613e3d548aac7f58a7f6d4fed0f3c77b8e834413322350a091eb306f9bad1"},"schema_version":"1.0","source":{"id":"2305.10388","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.10388","created_at":"2026-07-05T06:11:13Z"},{"alias_kind":"arxiv_version","alias_value":"2305.10388v1","created_at":"2026-07-05T06:11:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.10388","created_at":"2026-07-05T06:11:13Z"},{"alias_kind":"pith_short_12","alias_value":"S7H3Q3SFCC2J","created_at":"2026-07-05T06:11:13Z"},{"alias_kind":"pith_short_16","alias_value":"S7H3Q3SFCC2JTPJW","created_at":"2026-07-05T06:11:13Z"},{"alias_kind":"pith_short_8","alias_value":"S7H3Q3SF","created_at":"2026-07-05T06:11:13Z"}],"graph_snapshots":[{"event_id":"sha256:108464c317a745c81aae19fbaf6a72b083ee0358f7bd492603b429cbbb6cbe86","target":"graph","created_at":"2026-07-05T06:11:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.10388/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Certified defenses against adversarial attacks offer formal guarantees on the robustness of a model, making them more reliable than empirical methods such as adversarial training, whose effectiveness is often later reduced by unseen attacks. Still, the limited certified robustness that is currently achievable has been a bottleneck for their practical adoption. Gowal et al. and Wang et al. have shown that generating additional training data using state-of-the-art diffusion models can considerably improve the robustness of adversarial training. In this work, we demonstrate that a similar approac","authors_text":"Bj\\\"orn Eskofier, David Dobre, Gauthier Gidel, Leo Schwinn, Thomas Altstidl","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-17T17:29:10Z","title":"Raising the Bar for Certified Adversarial Robustness with Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.10388","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b756ba4daa4d3b235ed44c68864c68be69a7d5dc27c23ae9e8d87ad58c067f08","target":"record","created_at":"2026-07-05T06:11:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8fc717c9c79095a098635b5cd4377c91c30d223f50e5c83c68b2dd8e93565135","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-05-17T17:29:10Z","title_canon_sha256":"c36613e3d548aac7f58a7f6d4fed0f3c77b8e834413322350a091eb306f9bad1"},"schema_version":"1.0","source":{"id":"2305.10388","kind":"arxiv","version":1}},"canonical_sha256":"97cfb86e4510b499bd36c844d50de04ecafdaaf97910b3a09aa6e035b0aef8fa","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"97cfb86e4510b499bd36c844d50de04ecafdaaf97910b3a09aa6e035b0aef8fa","first_computed_at":"2026-07-05T06:11:13.876463Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:11:13.876463Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Xl8/dCDXqQ8PNHwunl/Y4l++lLOISG5iZakgM6J5QL7bsrfMo3k9WNzUbXL2mZ0k48U5SkYL/aRLJKWePApqAA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:11:13.876979Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.10388","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b756ba4daa4d3b235ed44c68864c68be69a7d5dc27c23ae9e8d87ad58c067f08","sha256:108464c317a745c81aae19fbaf6a72b083ee0358f7bd492603b429cbbb6cbe86"],"state_sha256":"5a7be407ad3bb704d2095ab2ded99ff97b905cad5ff70a12ab1b214ae92eed0d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rjdQkJBfMQzZHO8wSRFRuSzZq2tFOLjcNOiHIUJ8Csy0iAWK2A7ppd3iBT+MqAIHaXOmqvrune5O0kyPGyMBAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T15:20:58.952968Z","bundle_sha256":"fcf4cda8a8dd43ce6377aed35c8fbe9bff7ffd340fd4bc4dcb640b3edc466d25"}}