{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:T2GELXKRCSRXATBN5JYQGPJKCL","short_pith_number":"pith:T2GELXKR","canonical_record":{"source":{"id":"2306.08656","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-14T17:52:02Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"0d15a574bdc46e1365f13332e3c401a70fd61f7d30debc13126a6abbd4589643","abstract_canon_sha256":"112ea935e6edbb323f6e6c2d417b7481db1ca39a6c2065cd38d94dcf5660f6b9"},"schema_version":"1.0"},"canonical_sha256":"9e8c45dd5114a3704c2dea71033d2a12dd24506f13a6d3f382decf34b5907346","source":{"kind":"arxiv","id":"2306.08656","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.08656","created_at":"2026-07-05T09:52:07Z"},{"alias_kind":"arxiv_version","alias_value":"2306.08656v3","created_at":"2026-07-05T09:52:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.08656","created_at":"2026-07-05T09:52:07Z"},{"alias_kind":"pith_short_12","alias_value":"T2GELXKRCSRX","created_at":"2026-07-05T09:52:07Z"},{"alias_kind":"pith_short_16","alias_value":"T2GELXKRCSRXATBN","created_at":"2026-07-05T09:52:07Z"},{"alias_kind":"pith_short_8","alias_value":"T2GELXKR","created_at":"2026-07-05T09:52:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:T2GELXKRCSRXATBN5JYQGPJKCL","target":"record","payload":{"canonical_record":{"source":{"id":"2306.08656","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-14T17:52:02Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"0d15a574bdc46e1365f13332e3c401a70fd61f7d30debc13126a6abbd4589643","abstract_canon_sha256":"112ea935e6edbb323f6e6c2d417b7481db1ca39a6c2065cd38d94dcf5660f6b9"},"schema_version":"1.0"},"canonical_sha256":"9e8c45dd5114a3704c2dea71033d2a12dd24506f13a6d3f382decf34b5907346","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:52:07.903808Z","signature_b64":"HEdVW3hGkvsdjdjm+U900Kix1AL+SENNJChNyRvQYYVreugtIE9J8Hc0HrZUYYYI82Dqe9rKIBKWykHsP5lFBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9e8c45dd5114a3704c2dea71033d2a12dd24506f13a6d3f382decf34b5907346","last_reissued_at":"2026-07-05T09:52:07.903364Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:52:07.903364Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.08656","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:52:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SyJW6iSifybVNwvTcG4Ne86pWIAT6M/0IZxuIY8kkE8XX/8SEiwAlQzX/D9VBbksM+JaK+p5DgPiHT8wGah9Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T21:28:01.669893Z"},"content_sha256":"6917792fdee10db1780fdc8e884c0269f64b57f6db710692038f790be6b89112","schema_version":"1.0","event_id":"sha256:6917792fdee10db1780fdc8e884c0269f64b57f6db710692038f790be6b89112"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:T2GELXKRCSRXATBN5JYQGPJKCL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Augment then Smooth: Reconciling Differential Privacy with Certified Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Atiyeh Ashari Ghomi, David Glukhov, Franziska Boenisch, Jesse C. Cresswell, Jiapeng Wu, Nicolas Papernot","submitted_at":"2023-06-14T17:52:02Z","abstract_excerpt":"Machine learning models are susceptible to a variety of attacks that can erode trust, including attacks against the privacy of training data, and adversarial examples that jeopardize model accuracy. Differential privacy and certified robustness are effective frameworks for combating these two threats respectively, as they each provide future-proof guarantees. However, we show that standard differentially private model training is insufficient for providing strong certified robustness guarantees. Indeed, combining differential privacy and certified robustness in a single system is non-trivial, "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.08656","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.08656/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:52:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zpre8XQoMOj9yJ4claLZNhgtn7xRurOtRFptBN/POiykXirSpTRVbqsb+c7XIwHuXeAjkeAeux1lU+9HkimoDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T21:28:01.674280Z"},"content_sha256":"b66655c6e1258fe61312f12338f429dedbbc0d6fc7f127e7997fdd343ea83645","schema_version":"1.0","event_id":"sha256:b66655c6e1258fe61312f12338f429dedbbc0d6fc7f127e7997fdd343ea83645"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/T2GELXKRCSRXATBN5JYQGPJKCL/bundle.json","state_url":"https://pith.science/pith/T2GELXKRCSRXATBN5JYQGPJKCL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/T2GELXKRCSRXATBN5JYQGPJKCL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T21:28:01Z","links":{"resolver":"https://pith.science/pith/T2GELXKRCSRXATBN5JYQGPJKCL","bundle":"https://pith.science/pith/T2GELXKRCSRXATBN5JYQGPJKCL/bundle.json","state":"https://pith.science/pith/T2GELXKRCSRXATBN5JYQGPJKCL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/T2GELXKRCSRXATBN5JYQGPJKCL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:T2GELXKRCSRXATBN5JYQGPJKCL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"112ea935e6edbb323f6e6c2d417b7481db1ca39a6c2065cd38d94dcf5660f6b9","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-14T17:52:02Z","title_canon_sha256":"0d15a574bdc46e1365f13332e3c401a70fd61f7d30debc13126a6abbd4589643"},"schema_version":"1.0","source":{"id":"2306.08656","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.08656","created_at":"2026-07-05T09:52:07Z"},{"alias_kind":"arxiv_version","alias_value":"2306.08656v3","created_at":"2026-07-05T09:52:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.08656","created_at":"2026-07-05T09:52:07Z"},{"alias_kind":"pith_short_12","alias_value":"T2GELXKRCSRX","created_at":"2026-07-05T09:52:07Z"},{"alias_kind":"pith_short_16","alias_value":"T2GELXKRCSRXATBN","created_at":"2026-07-05T09:52:07Z"},{"alias_kind":"pith_short_8","alias_value":"T2GELXKR","created_at":"2026-07-05T09:52:07Z"}],"graph_snapshots":[{"event_id":"sha256:b66655c6e1258fe61312f12338f429dedbbc0d6fc7f127e7997fdd343ea83645","target":"graph","created_at":"2026-07-05T09:52:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.08656/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning models are susceptible to a variety of attacks that can erode trust, including attacks against the privacy of training data, and adversarial examples that jeopardize model accuracy. Differential privacy and certified robustness are effective frameworks for combating these two threats respectively, as they each provide future-proof guarantees. However, we show that standard differentially private model training is insufficient for providing strong certified robustness guarantees. Indeed, combining differential privacy and certified robustness in a single system is non-trivial, ","authors_text":"Atiyeh Ashari Ghomi, David Glukhov, Franziska Boenisch, Jesse C. Cresswell, Jiapeng Wu, Nicolas Papernot","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-14T17:52:02Z","title":"Augment then Smooth: Reconciling Differential Privacy with Certified Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.08656","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6917792fdee10db1780fdc8e884c0269f64b57f6db710692038f790be6b89112","target":"record","created_at":"2026-07-05T09:52:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"112ea935e6edbb323f6e6c2d417b7481db1ca39a6c2065cd38d94dcf5660f6b9","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-06-14T17:52:02Z","title_canon_sha256":"0d15a574bdc46e1365f13332e3c401a70fd61f7d30debc13126a6abbd4589643"},"schema_version":"1.0","source":{"id":"2306.08656","kind":"arxiv","version":3}},"canonical_sha256":"9e8c45dd5114a3704c2dea71033d2a12dd24506f13a6d3f382decf34b5907346","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9e8c45dd5114a3704c2dea71033d2a12dd24506f13a6d3f382decf34b5907346","first_computed_at":"2026-07-05T09:52:07.903364Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:52:07.903364Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HEdVW3hGkvsdjdjm+U900Kix1AL+SENNJChNyRvQYYVreugtIE9J8Hc0HrZUYYYI82Dqe9rKIBKWykHsP5lFBg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:52:07.903808Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.08656","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6917792fdee10db1780fdc8e884c0269f64b57f6db710692038f790be6b89112","sha256:b66655c6e1258fe61312f12338f429dedbbc0d6fc7f127e7997fdd343ea83645"],"state_sha256":"d51d9b302480114e9ec154480b6c8def2bff49d270d37151e8cda363ca7b448b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fsJp7B7XLuY63nvnOZQJQloVs2kMyeKg1CDsNQ2+Q/sHd855nojO+LYusLnUrx8k1OsSLaHa2JfTDEpCFc6QBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T21:28:01.705824Z","bundle_sha256":"bccc80b07b9b4b7d848d3d2b030a4b59402a6d42861cdff22fb2ab0eb015a290"}}