{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:URZF4Y5MLXZ5EF2U6FEIRPHAVU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e5805ed657ecdf50d0d4f7aaffa1e50b1922797377bb13c7eb2dc508fbd23731","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-09-15T19:58:01Z","title_canon_sha256":"f7a12d9122b2b3ed9dfc795b81763f86bd271f82c7456f11b0992fcf25df29bc"},"schema_version":"1.0","source":{"id":"2209.07592","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2209.07592","created_at":"2026-07-05T04:58:07Z"},{"alias_kind":"arxiv_version","alias_value":"2209.07592v1","created_at":"2026-07-05T04:58:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2209.07592","created_at":"2026-07-05T04:58:07Z"},{"alias_kind":"pith_short_12","alias_value":"URZF4Y5MLXZ5","created_at":"2026-07-05T04:58:07Z"},{"alias_kind":"pith_short_16","alias_value":"URZF4Y5MLXZ5EF2U","created_at":"2026-07-05T04:58:07Z"},{"alias_kind":"pith_short_8","alias_value":"URZF4Y5M","created_at":"2026-07-05T04:58:07Z"}],"graph_snapshots":[{"event_id":"sha256:4b4c493db9cb6d6598eb8908f544a86b6b8b463bac1a96864f9172ffe728cf01","target":"graph","created_at":"2026-07-05T04:58:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2209.07592/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Several existing works study either adversarial or natural distributional robustness of deep neural networks separately. In practice, however, models need to enjoy both types of robustness to ensure reliability. In this work, we bridge this gap and show that in fact, explicit tradeoffs exist between adversarial and natural distributional robustness. We first consider a simple linear regression setting on Gaussian data with disjoint sets of core and spurious features. In this setting, through theoretical and empirical analysis, we show that (i) adversarial training with $\\ell_1$ and $\\ell_2$ no","authors_text":"Kiarash Banihashem, Mazda Moayeri, Soheil Feizi","cross_cats":["cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-09-15T19:58:01Z","title":"Explicit Tradeoffs between Adversarial and Natural Distributional Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2209.07592","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4171ad93139c97bf3fd2a883098e9932d252962e14a2dfdc91eba0acb0a59df1","target":"record","created_at":"2026-07-05T04:58:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e5805ed657ecdf50d0d4f7aaffa1e50b1922797377bb13c7eb2dc508fbd23731","cross_cats_sorted":["cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-09-15T19:58:01Z","title_canon_sha256":"f7a12d9122b2b3ed9dfc795b81763f86bd271f82c7456f11b0992fcf25df29bc"},"schema_version":"1.0","source":{"id":"2209.07592","kind":"arxiv","version":1}},"canonical_sha256":"a4725e63ac5df3d21754f14888bce0ad3ea99f67188d7f09cb753b6bf98a7053","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a4725e63ac5df3d21754f14888bce0ad3ea99f67188d7f09cb753b6bf98a7053","first_computed_at":"2026-07-05T04:58:07.785738Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:58:07.785738Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Zkkp9PHsKqXYoUsedcUxhcOHO/BtrJmOMn1O1ravUkJme/7hr7zzPi/a7gn/DgrBKkDfj09vShxEzRvHdQeADw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:58:07.786159Z","signed_message":"canonical_sha256_bytes"},"source_id":"2209.07592","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4171ad93139c97bf3fd2a883098e9932d252962e14a2dfdc91eba0acb0a59df1","sha256:4b4c493db9cb6d6598eb8908f544a86b6b8b463bac1a96864f9172ffe728cf01"],"state_sha256":"4773ff2d45a9f2c22be1307efcdac81ff452addb4087ce73cf4df382677b132f"}