{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:TB6OXPBRADJD437S2VNJ7KLEZO","short_pith_number":"pith:TB6OXPBR","canonical_record":{"source":{"id":"2102.08868","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-17T16:58:04Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"78194fd33edcce6e868de4786deee63e75228be3040f5a7f0e26759c67180ea4","abstract_canon_sha256":"0bb07cbb946fa939f3d01dbf04376dfbf29811930475bcc87e5c86e55408bc8e"},"schema_version":"1.0"},"canonical_sha256":"987cebbc3100d23e6ff2d55a9fa964cbaa9a3b1dad8450e31edc8c3fe908d38a","source":{"kind":"arxiv","id":"2102.08868","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.08868","created_at":"2026-07-05T02:46:44Z"},{"alias_kind":"arxiv_version","alias_value":"2102.08868v2","created_at":"2026-07-05T02:46:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.08868","created_at":"2026-07-05T02:46:44Z"},{"alias_kind":"pith_short_12","alias_value":"TB6OXPBRADJD","created_at":"2026-07-05T02:46:44Z"},{"alias_kind":"pith_short_16","alias_value":"TB6OXPBRADJD437S","created_at":"2026-07-05T02:46:44Z"},{"alias_kind":"pith_short_8","alias_value":"TB6OXPBR","created_at":"2026-07-05T02:46:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:TB6OXPBRADJD437S2VNJ7KLEZO","target":"record","payload":{"canonical_record":{"source":{"id":"2102.08868","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-17T16:58:04Z","cross_cats_sorted":["cs.CV","stat.ML"],"title_canon_sha256":"78194fd33edcce6e868de4786deee63e75228be3040f5a7f0e26759c67180ea4","abstract_canon_sha256":"0bb07cbb946fa939f3d01dbf04376dfbf29811930475bcc87e5c86e55408bc8e"},"schema_version":"1.0"},"canonical_sha256":"987cebbc3100d23e6ff2d55a9fa964cbaa9a3b1dad8450e31edc8c3fe908d38a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:46:44.563593Z","signature_b64":"P7ZjJqI1HdVIKhEM7qs8pVZKf3uEmcVqYpfJnSxDvDqBuzHdNKecw3OeceGFCTRMvszs0o+9XUcKjqstOKQaCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"987cebbc3100d23e6ff2d55a9fa964cbaa9a3b1dad8450e31edc8c3fe908d38a","last_reissued_at":"2026-07-05T02:46:44.563040Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:46:44.563040Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2102.08868","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:46:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zow7oR7BOjCaK47L8e4SBHpI6WB9abJuGsVLAgDggGwcbZs7asrK3/pQXEyl7wyQO/TcACRy6a32C+Is127gBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T08:21:53.309713Z"},"content_sha256":"7c152ef548079299993886b5c2f3b30ddb27224e3e25fa153cc04d979f253c3b","schema_version":"1.0","event_id":"sha256:7c152ef548079299993886b5c2f3b30ddb27224e3e25fa153cc04d979f253c3b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:TB6OXPBRADJD437S2VNJ7KLEZO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Bridging the Gap Between Adversarial Robustness and Optimization Bias","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Cristina Vasconcelos, David J. Fleet, Fabian Pedregosa, Fartash Faghri, Nicolas Le Roux, Sven Gowal","submitted_at":"2021-02-17T16:58:04Z","abstract_excerpt":"We demonstrate that the choice of optimizer, neural network architecture, and regularizer significantly affect the adversarial robustness of linear neural networks, providing guarantees without the need for adversarial training. To this end, we revisit a known result linking maximally robust classifiers and minimum norm solutions, and combine it with recent results on the implicit bias of optimizers. First, we show that, under certain conditions, it is possible to achieve both perfect standard accuracy and a certain degree of robustness, simply by training an overparametrized model using the i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.08868","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2102.08868/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:46:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0VJENNMlmjxZAC+KEjV6f5Q12gvh6Jmf5IyzNR24Mbm4OIv030/b8BIGHZZsSrjqH49GJNOdLf5oIBzKNYf4Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T08:21:53.310786Z"},"content_sha256":"fe44efd0e56e9aebb8d828600ea94ccefeef1e9605e296cd65ca4d9d97f99e29","schema_version":"1.0","event_id":"sha256:fe44efd0e56e9aebb8d828600ea94ccefeef1e9605e296cd65ca4d9d97f99e29"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TB6OXPBRADJD437S2VNJ7KLEZO/bundle.json","state_url":"https://pith.science/pith/TB6OXPBRADJD437S2VNJ7KLEZO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TB6OXPBRADJD437S2VNJ7KLEZO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T08:21:53Z","links":{"resolver":"https://pith.science/pith/TB6OXPBRADJD437S2VNJ7KLEZO","bundle":"https://pith.science/pith/TB6OXPBRADJD437S2VNJ7KLEZO/bundle.json","state":"https://pith.science/pith/TB6OXPBRADJD437S2VNJ7KLEZO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TB6OXPBRADJD437S2VNJ7KLEZO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:TB6OXPBRADJD437S2VNJ7KLEZO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0bb07cbb946fa939f3d01dbf04376dfbf29811930475bcc87e5c86e55408bc8e","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-17T16:58:04Z","title_canon_sha256":"78194fd33edcce6e868de4786deee63e75228be3040f5a7f0e26759c67180ea4"},"schema_version":"1.0","source":{"id":"2102.08868","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.08868","created_at":"2026-07-05T02:46:44Z"},{"alias_kind":"arxiv_version","alias_value":"2102.08868v2","created_at":"2026-07-05T02:46:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.08868","created_at":"2026-07-05T02:46:44Z"},{"alias_kind":"pith_short_12","alias_value":"TB6OXPBRADJD","created_at":"2026-07-05T02:46:44Z"},{"alias_kind":"pith_short_16","alias_value":"TB6OXPBRADJD437S","created_at":"2026-07-05T02:46:44Z"},{"alias_kind":"pith_short_8","alias_value":"TB6OXPBR","created_at":"2026-07-05T02:46:44Z"}],"graph_snapshots":[{"event_id":"sha256:fe44efd0e56e9aebb8d828600ea94ccefeef1e9605e296cd65ca4d9d97f99e29","target":"graph","created_at":"2026-07-05T02:46:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2102.08868/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We demonstrate that the choice of optimizer, neural network architecture, and regularizer significantly affect the adversarial robustness of linear neural networks, providing guarantees without the need for adversarial training. To this end, we revisit a known result linking maximally robust classifiers and minimum norm solutions, and combine it with recent results on the implicit bias of optimizers. First, we show that, under certain conditions, it is possible to achieve both perfect standard accuracy and a certain degree of robustness, simply by training an overparametrized model using the i","authors_text":"Cristina Vasconcelos, David J. Fleet, Fabian Pedregosa, Fartash Faghri, Nicolas Le Roux, Sven Gowal","cross_cats":["cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-17T16:58:04Z","title":"Bridging the Gap Between Adversarial Robustness and Optimization Bias"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.08868","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7c152ef548079299993886b5c2f3b30ddb27224e3e25fa153cc04d979f253c3b","target":"record","created_at":"2026-07-05T02:46:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0bb07cbb946fa939f3d01dbf04376dfbf29811930475bcc87e5c86e55408bc8e","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-02-17T16:58:04Z","title_canon_sha256":"78194fd33edcce6e868de4786deee63e75228be3040f5a7f0e26759c67180ea4"},"schema_version":"1.0","source":{"id":"2102.08868","kind":"arxiv","version":2}},"canonical_sha256":"987cebbc3100d23e6ff2d55a9fa964cbaa9a3b1dad8450e31edc8c3fe908d38a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"987cebbc3100d23e6ff2d55a9fa964cbaa9a3b1dad8450e31edc8c3fe908d38a","first_computed_at":"2026-07-05T02:46:44.563040Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:46:44.563040Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"P7ZjJqI1HdVIKhEM7qs8pVZKf3uEmcVqYpfJnSxDvDqBuzHdNKecw3OeceGFCTRMvszs0o+9XUcKjqstOKQaCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:46:44.563593Z","signed_message":"canonical_sha256_bytes"},"source_id":"2102.08868","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7c152ef548079299993886b5c2f3b30ddb27224e3e25fa153cc04d979f253c3b","sha256:fe44efd0e56e9aebb8d828600ea94ccefeef1e9605e296cd65ca4d9d97f99e29"],"state_sha256":"84625c805c498c3427299ee66b6f9ecde13c8d8657ff8f1b1772a9dbce75a93c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6tKVXYgayFZCp2GoOgofRGmgG7nCd7VunJ5SxHP6uUt6or4fcV2cJZHVIuoGbCZ9ZgaAwd/hNMTE+/qVlzNnCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T08:21:53.316396Z","bundle_sha256":"6faf782bc306d3f1f638dbe21cef741d3b6ba62eede4c85752e1298a9ff11121"}}