{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:UF2QEB72UNNWYQ3QZOAJPKYDPW","short_pith_number":"pith:UF2QEB72","canonical_record":{"source":{"id":"2210.04871","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-10T17:44:11Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ee93f41f38c00056d27a20a387f6aa605545acc56af01611169ee004b38c95e4","abstract_canon_sha256":"5113d718d93e4978ed590d60e8f0e46903335c2eb4a9956df059252af1fa65f8"},"schema_version":"1.0"},"canonical_sha256":"a1750207faa35b6c4370cb8097ab037d9382318594d9def0bd351a31585e18ef","source":{"kind":"arxiv","id":"2210.04871","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.04871","created_at":"2026-07-05T05:49:30Z"},{"alias_kind":"arxiv_version","alias_value":"2210.04871v2","created_at":"2026-07-05T05:49:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.04871","created_at":"2026-07-05T05:49:30Z"},{"alias_kind":"pith_short_12","alias_value":"UF2QEB72UNNW","created_at":"2026-07-05T05:49:30Z"},{"alias_kind":"pith_short_16","alias_value":"UF2QEB72UNNWYQ3Q","created_at":"2026-07-05T05:49:30Z"},{"alias_kind":"pith_short_8","alias_value":"UF2QEB72","created_at":"2026-07-05T05:49:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:UF2QEB72UNNWYQ3QZOAJPKYDPW","target":"record","payload":{"canonical_record":{"source":{"id":"2210.04871","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-10T17:44:11Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ee93f41f38c00056d27a20a387f6aa605545acc56af01611169ee004b38c95e4","abstract_canon_sha256":"5113d718d93e4978ed590d60e8f0e46903335c2eb4a9956df059252af1fa65f8"},"schema_version":"1.0"},"canonical_sha256":"a1750207faa35b6c4370cb8097ab037d9382318594d9def0bd351a31585e18ef","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:49:30.497198Z","signature_b64":"LzxDvcdEx9wZ0ylwfbzWq/Fw1NW+xlJlSbngaZmpiG8GnP46lHZbKSXNqyztoiJfXLqxQhz7FMTbIK5Ag3JjBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a1750207faa35b6c4370cb8097ab037d9382318594d9def0bd351a31585e18ef","last_reissued_at":"2026-07-05T05:49:30.496722Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:49:30.496722Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.04871","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:49:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Y+1s/60GShp+ehfGyUwGqFwzZPinKj+oG2t39pwVU8V8qrfxZfHveZvEA4t+Xsp81AmQWwZQ2OpF9yAv8LjBCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:37:34.589342Z"},"content_sha256":"3b2894f3201e618f1dd1e13ef990b69150541a523bf0703857d1d5908a82101b","schema_version":"1.0","event_id":"sha256:3b2894f3201e618f1dd1e13ef990b69150541a523bf0703857d1d5908a82101b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:UF2QEB72UNNWYQ3QZOAJPKYDPW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Certified Training: Small Boxes are All You Need","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Franziska Eckert, Marc Fischer, Mark Niklas M\\\"uller, Martin Vechev","submitted_at":"2022-10-10T17:44:11Z","abstract_excerpt":"To obtain, deterministic guarantees of adversarial robustness, specialized training methods are used. We propose, SABR, a novel such certified training method, based on the key insight that propagating interval bounds for a small but carefully selected subset of the adversarial input region is sufficient to approximate the worst-case loss over the whole region while significantly reducing approximation errors. We show in an extensive empirical evaluation that SABR outperforms existing certified defenses in terms of both standard and certifiable accuracies across perturbation magnitudes and dat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.04871","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.04871/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:49:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mXtfhRyoi/s5sgBgibsLr95xYTGJZuHm3saHm5/hoqCfdpxM4/5iHriOALobFsCGI75J3FuySv/eIAazXxpnCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:37:34.589720Z"},"content_sha256":"9644494e7da307d9046daeda5cac76d5c97a042449b9877ff14842229402a016","schema_version":"1.0","event_id":"sha256:9644494e7da307d9046daeda5cac76d5c97a042449b9877ff14842229402a016"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UF2QEB72UNNWYQ3QZOAJPKYDPW/bundle.json","state_url":"https://pith.science/pith/UF2QEB72UNNWYQ3QZOAJPKYDPW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UF2QEB72UNNWYQ3QZOAJPKYDPW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T11:37:34Z","links":{"resolver":"https://pith.science/pith/UF2QEB72UNNWYQ3QZOAJPKYDPW","bundle":"https://pith.science/pith/UF2QEB72UNNWYQ3QZOAJPKYDPW/bundle.json","state":"https://pith.science/pith/UF2QEB72UNNWYQ3QZOAJPKYDPW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UF2QEB72UNNWYQ3QZOAJPKYDPW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:UF2QEB72UNNWYQ3QZOAJPKYDPW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5113d718d93e4978ed590d60e8f0e46903335c2eb4a9956df059252af1fa65f8","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-10T17:44:11Z","title_canon_sha256":"ee93f41f38c00056d27a20a387f6aa605545acc56af01611169ee004b38c95e4"},"schema_version":"1.0","source":{"id":"2210.04871","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.04871","created_at":"2026-07-05T05:49:30Z"},{"alias_kind":"arxiv_version","alias_value":"2210.04871v2","created_at":"2026-07-05T05:49:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.04871","created_at":"2026-07-05T05:49:30Z"},{"alias_kind":"pith_short_12","alias_value":"UF2QEB72UNNW","created_at":"2026-07-05T05:49:30Z"},{"alias_kind":"pith_short_16","alias_value":"UF2QEB72UNNWYQ3Q","created_at":"2026-07-05T05:49:30Z"},{"alias_kind":"pith_short_8","alias_value":"UF2QEB72","created_at":"2026-07-05T05:49:30Z"}],"graph_snapshots":[{"event_id":"sha256:9644494e7da307d9046daeda5cac76d5c97a042449b9877ff14842229402a016","target":"graph","created_at":"2026-07-05T05:49:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.04871/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"To obtain, deterministic guarantees of adversarial robustness, specialized training methods are used. We propose, SABR, a novel such certified training method, based on the key insight that propagating interval bounds for a small but carefully selected subset of the adversarial input region is sufficient to approximate the worst-case loss over the whole region while significantly reducing approximation errors. We show in an extensive empirical evaluation that SABR outperforms existing certified defenses in terms of both standard and certifiable accuracies across perturbation magnitudes and dat","authors_text":"Franziska Eckert, Marc Fischer, Mark Niklas M\\\"uller, Martin Vechev","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-10T17:44:11Z","title":"Certified Training: Small Boxes are All You Need"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.04871","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3b2894f3201e618f1dd1e13ef990b69150541a523bf0703857d1d5908a82101b","target":"record","created_at":"2026-07-05T05:49:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5113d718d93e4978ed590d60e8f0e46903335c2eb4a9956df059252af1fa65f8","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-10-10T17:44:11Z","title_canon_sha256":"ee93f41f38c00056d27a20a387f6aa605545acc56af01611169ee004b38c95e4"},"schema_version":"1.0","source":{"id":"2210.04871","kind":"arxiv","version":2}},"canonical_sha256":"a1750207faa35b6c4370cb8097ab037d9382318594d9def0bd351a31585e18ef","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a1750207faa35b6c4370cb8097ab037d9382318594d9def0bd351a31585e18ef","first_computed_at":"2026-07-05T05:49:30.496722Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:49:30.496722Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LzxDvcdEx9wZ0ylwfbzWq/Fw1NW+xlJlSbngaZmpiG8GnP46lHZbKSXNqyztoiJfXLqxQhz7FMTbIK5Ag3JjBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:49:30.497198Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.04871","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3b2894f3201e618f1dd1e13ef990b69150541a523bf0703857d1d5908a82101b","sha256:9644494e7da307d9046daeda5cac76d5c97a042449b9877ff14842229402a016"],"state_sha256":"993378819a1e66eaeb1843b9c1321323e61196381a1a608df0e7fcb02e77b835"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GxC7X+dgvn9JCUMni7X7ccS+u/3UdRHngWDn/oe0m8B7r/WkLF0nbhC+jhJ/fOSRkXV7jKSAG+FU9caffoMvBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T11:37:34.591682Z","bundle_sha256":"399d6c171184196a086b6c878585d0546af1cbc41abe3733dfd0feb49165a7df"}}