{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:SW75WBO7SHIIAAINKYK3IUIDQF","short_pith_number":"pith:SW75WBO7","canonical_record":{"source":{"id":"2507.23335","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-31T08:31:59Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"d6b51eed49b57446896569f6866cb7e799af12e4dcbde52df9015f9227b093f1","abstract_canon_sha256":"0933120cec1f0445ce06148237f010f661bcb14113a314023d0047a0b4c754ad"},"schema_version":"1.0"},"canonical_sha256":"95bfdb05df91d080010d5615b4510381470e90d970e7a0a14814fc4511cb0ba5","source":{"kind":"arxiv","id":"2507.23335","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.23335","created_at":"2026-07-05T11:46:10Z"},{"alias_kind":"arxiv_version","alias_value":"2507.23335v1","created_at":"2026-07-05T11:46:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.23335","created_at":"2026-07-05T11:46:10Z"},{"alias_kind":"pith_short_12","alias_value":"SW75WBO7SHII","created_at":"2026-07-05T11:46:10Z"},{"alias_kind":"pith_short_16","alias_value":"SW75WBO7SHIIAAIN","created_at":"2026-07-05T11:46:10Z"},{"alias_kind":"pith_short_8","alias_value":"SW75WBO7","created_at":"2026-07-05T11:46:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:SW75WBO7SHIIAAINKYK3IUIDQF","target":"record","payload":{"canonical_record":{"source":{"id":"2507.23335","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-31T08:31:59Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"d6b51eed49b57446896569f6866cb7e799af12e4dcbde52df9015f9227b093f1","abstract_canon_sha256":"0933120cec1f0445ce06148237f010f661bcb14113a314023d0047a0b4c754ad"},"schema_version":"1.0"},"canonical_sha256":"95bfdb05df91d080010d5615b4510381470e90d970e7a0a14814fc4511cb0ba5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:46:10.360203Z","signature_b64":"CeT5HJKYDy2BZFaPPXsxJu8yqmp3mhybdjXfBUagAMEBcD72V3lM1VJYDBQTZ941OPES6UWmU+4nCsEQJqCiAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"95bfdb05df91d080010d5615b4510381470e90d970e7a0a14814fc4511cb0ba5","last_reissued_at":"2026-07-05T11:46:10.359682Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:46:10.359682Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.23335","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:46:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F6MplO0jIPoSw/yxY6CE73Yed+O9wTVrazEwdQIVBqadRk01bxDCYjOaiRLODMAwFfLZ08ztmyMy8Kpij+oPBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T19:53:55.280629Z"},"content_sha256":"039ff5d1d27a5d270068c75755da134ba5e751f4668cfa443e46e5bd02a7dc95","schema_version":"1.0","event_id":"sha256:039ff5d1d27a5d270068c75755da134ba5e751f4668cfa443e46e5bd02a7dc95"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:SW75WBO7SHIIAAINKYK3IUIDQF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Scalable and Precise Patch Robustness Certification for Deep Learning Models with Top-k Predictions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.LG","authors_text":"Haipeng Wang, Qilin Zhou, W.K. Chan, Zhengyuan Wei","submitted_at":"2025-07-31T08:31:59Z","abstract_excerpt":"Patch robustness certification is an emerging verification approach for defending against adversarial patch attacks with provable guarantees for deep learning systems. Certified recovery techniques guarantee the prediction of the sole true label of a certified sample. However, existing techniques, if applicable to top-k predictions, commonly conduct pairwise comparisons on those votes between labels, failing to certify the sole true label within the top k prediction labels precisely due to the inflation on the number of votes controlled by the attacker (i.e., attack budget); yet enumerating al"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.23335","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.23335/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:46:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Qr/Q0DMH/+rLq12XfIjtTUjQy55pT0GjDS8zgWilGVrhZv0s0/Bopv1+vSFZyDxU5KDuZKgKB87i430hfnPRBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T19:53:55.281012Z"},"content_sha256":"5162534ea89943d3e90e7ac6ea6d88fa6164f84283615596d72252c78ffa57a4","schema_version":"1.0","event_id":"sha256:5162534ea89943d3e90e7ac6ea6d88fa6164f84283615596d72252c78ffa57a4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SW75WBO7SHIIAAINKYK3IUIDQF/bundle.json","state_url":"https://pith.science/pith/SW75WBO7SHIIAAINKYK3IUIDQF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SW75WBO7SHIIAAINKYK3IUIDQF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-09T19:53:55Z","links":{"resolver":"https://pith.science/pith/SW75WBO7SHIIAAINKYK3IUIDQF","bundle":"https://pith.science/pith/SW75WBO7SHIIAAINKYK3IUIDQF/bundle.json","state":"https://pith.science/pith/SW75WBO7SHIIAAINKYK3IUIDQF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SW75WBO7SHIIAAINKYK3IUIDQF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:SW75WBO7SHIIAAINKYK3IUIDQF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0933120cec1f0445ce06148237f010f661bcb14113a314023d0047a0b4c754ad","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-31T08:31:59Z","title_canon_sha256":"d6b51eed49b57446896569f6866cb7e799af12e4dcbde52df9015f9227b093f1"},"schema_version":"1.0","source":{"id":"2507.23335","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.23335","created_at":"2026-07-05T11:46:10Z"},{"alias_kind":"arxiv_version","alias_value":"2507.23335v1","created_at":"2026-07-05T11:46:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.23335","created_at":"2026-07-05T11:46:10Z"},{"alias_kind":"pith_short_12","alias_value":"SW75WBO7SHII","created_at":"2026-07-05T11:46:10Z"},{"alias_kind":"pith_short_16","alias_value":"SW75WBO7SHIIAAIN","created_at":"2026-07-05T11:46:10Z"},{"alias_kind":"pith_short_8","alias_value":"SW75WBO7","created_at":"2026-07-05T11:46:10Z"}],"graph_snapshots":[{"event_id":"sha256:5162534ea89943d3e90e7ac6ea6d88fa6164f84283615596d72252c78ffa57a4","target":"graph","created_at":"2026-07-05T11:46:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.23335/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Patch robustness certification is an emerging verification approach for defending against adversarial patch attacks with provable guarantees for deep learning systems. Certified recovery techniques guarantee the prediction of the sole true label of a certified sample. However, existing techniques, if applicable to top-k predictions, commonly conduct pairwise comparisons on those votes between labels, failing to certify the sole true label within the top k prediction labels precisely due to the inflation on the number of votes controlled by the attacker (i.e., attack budget); yet enumerating al","authors_text":"Haipeng Wang, Qilin Zhou, W.K. Chan, Zhengyuan Wei","cross_cats":["cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-31T08:31:59Z","title":"Scalable and Precise Patch Robustness Certification for Deep Learning Models with Top-k Predictions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.23335","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:039ff5d1d27a5d270068c75755da134ba5e751f4668cfa443e46e5bd02a7dc95","target":"record","created_at":"2026-07-05T11:46:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0933120cec1f0445ce06148237f010f661bcb14113a314023d0047a0b4c754ad","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-07-31T08:31:59Z","title_canon_sha256":"d6b51eed49b57446896569f6866cb7e799af12e4dcbde52df9015f9227b093f1"},"schema_version":"1.0","source":{"id":"2507.23335","kind":"arxiv","version":1}},"canonical_sha256":"95bfdb05df91d080010d5615b4510381470e90d970e7a0a14814fc4511cb0ba5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"95bfdb05df91d080010d5615b4510381470e90d970e7a0a14814fc4511cb0ba5","first_computed_at":"2026-07-05T11:46:10.359682Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:46:10.359682Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CeT5HJKYDy2BZFaPPXsxJu8yqmp3mhybdjXfBUagAMEBcD72V3lM1VJYDBQTZ941OPES6UWmU+4nCsEQJqCiAA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:46:10.360203Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.23335","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:039ff5d1d27a5d270068c75755da134ba5e751f4668cfa443e46e5bd02a7dc95","sha256:5162534ea89943d3e90e7ac6ea6d88fa6164f84283615596d72252c78ffa57a4"],"state_sha256":"46c73941c5771117cf23fc074bbfc479c0244e1a34020592bb05685c4541d013"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tfhyBzB27HRpKuxwmxOJ7OwmHEwSaKSgrowEk/5S6/O8Gq77ymrV2HY8rGltcWgBO8DqD36S2m7Hz3noHlQRDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-09T19:53:55.283165Z","bundle_sha256":"84b10372b577bde0ad956770e725fd3744d6534c56da12a50460688334b614f8"}}