{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:UT6AIYYDH4FLV636OVSYLNNHRW","short_pith_number":"pith:UT6AIYYD","canonical_record":{"source":{"id":"2511.17688","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-11-21T14:00:01Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"2a64eccbb2185f1280bb2b3b9d9f3fd064fe2ee0064a023ae98f682b30d61803","abstract_canon_sha256":"ceb07f6ad22637d67059d2afbf9762fed363cabfa0b3cd8d2c2a2cf2ca125b85"},"schema_version":"1.0"},"canonical_sha256":"a4fc0463033f0abafb7e756585b5a78db29c6b172b66891736bf828417be0d13","source":{"kind":"arxiv","id":"2511.17688","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2511.17688","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"arxiv_version","alias_value":"2511.17688v2","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2511.17688","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"pith_short_12","alias_value":"UT6AIYYDH4FL","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"pith_short_16","alias_value":"UT6AIYYDH4FLV636","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"pith_short_8","alias_value":"UT6AIYYD","created_at":"2026-07-14T01:22:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:UT6AIYYDH4FLV636OVSYLNNHRW","target":"record","payload":{"canonical_record":{"source":{"id":"2511.17688","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-11-21T14:00:01Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"2a64eccbb2185f1280bb2b3b9d9f3fd064fe2ee0064a023ae98f682b30d61803","abstract_canon_sha256":"ceb07f6ad22637d67059d2afbf9762fed363cabfa0b3cd8d2c2a2cf2ca125b85"},"schema_version":"1.0"},"canonical_sha256":"a4fc0463033f0abafb7e756585b5a78db29c6b172b66891736bf828417be0d13","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-14T01:22:02.317400Z","signature_b64":"p/PfVDNWLB1vKIEZTEnMCManx7i3gKluyMxk6nswzEZGaDnsMPibhpi9WhrdHIYrpQjfJDF5ATePA69utXo2CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a4fc0463033f0abafb7e756585b5a78db29c6b172b66891736bf828417be0d13","last_reissued_at":"2026-07-14T01:22:02.316415Z","signature_status":"signed_v1","first_computed_at":"2026-07-14T01:22:02.316415Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2511.17688","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-14T01:22:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AIp9C53opc8mNF1EBncsW9WQa3idi1W+oXWLl0/sCBxEUqaZ7c+IeNVpO7dYZndbax+1NfjrzqXC03O63w/wBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T22:02:03.906167Z"},"content_sha256":"480200be2d7fcb72c43b6238cf7739297231ac5636583902ef699c80ea8b7ce5","schema_version":"1.0","event_id":"sha256:480200be2d7fcb72c43b6238cf7739297231ac5636583902ef699c80ea8b7ce5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:UT6AIYYDH4FLV636OVSYLNNHRW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Enhancing Adversarial Transferability through Block Stretch and Shrink","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Chenhao Lu, Feng Ye, Guanliang Huang, Lunzhe Chen, Quan Liu, Shuming Zhen, Xudong Ke","submitted_at":"2025-11-21T14:00:01Z","abstract_excerpt":"Input transformation-based attacks improve adversarial transferability by aggregating gradients over transformed inputs. Existing analyses mainly explain their efficacy from image diversity, semantic preservation, attention variance or hypothesis space augmentation, yet overlook the critical role of model frontend responses.\n  In this paper, we revisit transformation-based attacks from an implicit ensemble perspective: each transformation can be viewed as a pre-processing operator before the surrogate model, inducing a distinct frontend response for gradient aggregation. Based on this view, we"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2511.17688","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2511.17688/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-14T01:22:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"slCSs5i9CtXEN9oWq7BLx4xch1TPE+glwNsLZRRqLASU/JLekiPRj+DvzesaMXxv/N6y0egXYatLZnJ8RpWUBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T22:02:03.906676Z"},"content_sha256":"6f5fe978af3587140bcebd3eea3fb06b82d2ab25467b696c1e56bb639777b0ba","schema_version":"1.0","event_id":"sha256:6f5fe978af3587140bcebd3eea3fb06b82d2ab25467b696c1e56bb639777b0ba"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UT6AIYYDH4FLV636OVSYLNNHRW/bundle.json","state_url":"https://pith.science/pith/UT6AIYYDH4FLV636OVSYLNNHRW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UT6AIYYDH4FLV636OVSYLNNHRW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T22:02:03Z","links":{"resolver":"https://pith.science/pith/UT6AIYYDH4FLV636OVSYLNNHRW","bundle":"https://pith.science/pith/UT6AIYYDH4FLV636OVSYLNNHRW/bundle.json","state":"https://pith.science/pith/UT6AIYYDH4FLV636OVSYLNNHRW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UT6AIYYDH4FLV636OVSYLNNHRW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:UT6AIYYDH4FLV636OVSYLNNHRW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ceb07f6ad22637d67059d2afbf9762fed363cabfa0b3cd8d2c2a2cf2ca125b85","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-11-21T14:00:01Z","title_canon_sha256":"2a64eccbb2185f1280bb2b3b9d9f3fd064fe2ee0064a023ae98f682b30d61803"},"schema_version":"1.0","source":{"id":"2511.17688","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2511.17688","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"arxiv_version","alias_value":"2511.17688v2","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2511.17688","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"pith_short_12","alias_value":"UT6AIYYDH4FL","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"pith_short_16","alias_value":"UT6AIYYDH4FLV636","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"pith_short_8","alias_value":"UT6AIYYD","created_at":"2026-07-14T01:22:02Z"}],"graph_snapshots":[{"event_id":"sha256:6f5fe978af3587140bcebd3eea3fb06b82d2ab25467b696c1e56bb639777b0ba","target":"graph","created_at":"2026-07-14T01:22:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2511.17688/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Input transformation-based attacks improve adversarial transferability by aggregating gradients over transformed inputs. Existing analyses mainly explain their efficacy from image diversity, semantic preservation, attention variance or hypothesis space augmentation, yet overlook the critical role of model frontend responses.\n  In this paper, we revisit transformation-based attacks from an implicit ensemble perspective: each transformation can be viewed as a pre-processing operator before the surrogate model, inducing a distinct frontend response for gradient aggregation. Based on this view, we","authors_text":"Chenhao Lu, Feng Ye, Guanliang Huang, Lunzhe Chen, Quan Liu, Shuming Zhen, Xudong Ke","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-11-21T14:00:01Z","title":"Enhancing Adversarial Transferability through Block Stretch and Shrink"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2511.17688","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:480200be2d7fcb72c43b6238cf7739297231ac5636583902ef699c80ea8b7ce5","target":"record","created_at":"2026-07-14T01:22:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ceb07f6ad22637d67059d2afbf9762fed363cabfa0b3cd8d2c2a2cf2ca125b85","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-11-21T14:00:01Z","title_canon_sha256":"2a64eccbb2185f1280bb2b3b9d9f3fd064fe2ee0064a023ae98f682b30d61803"},"schema_version":"1.0","source":{"id":"2511.17688","kind":"arxiv","version":2}},"canonical_sha256":"a4fc0463033f0abafb7e756585b5a78db29c6b172b66891736bf828417be0d13","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a4fc0463033f0abafb7e756585b5a78db29c6b172b66891736bf828417be0d13","first_computed_at":"2026-07-14T01:22:02.316415Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-14T01:22:02.316415Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"p/PfVDNWLB1vKIEZTEnMCManx7i3gKluyMxk6nswzEZGaDnsMPibhpi9WhrdHIYrpQjfJDF5ATePA69utXo2CA==","signature_status":"signed_v1","signed_at":"2026-07-14T01:22:02.317400Z","signed_message":"canonical_sha256_bytes"},"source_id":"2511.17688","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:480200be2d7fcb72c43b6238cf7739297231ac5636583902ef699c80ea8b7ce5","sha256:6f5fe978af3587140bcebd3eea3fb06b82d2ab25467b696c1e56bb639777b0ba"],"state_sha256":"67b0fe51382e7a4d67a274ae4a02eb6f2ac422e43c762d9a9dec78a2b1f6922e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/QfF7X3B41ny6eN1rH6NO0OsS+8fEBJ501ASK7KK9jfY1NQ+MLk0Tb6jRPfTOFGrsYMBYTku78hm2yHnsqs8CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T22:02:03.910835Z","bundle_sha256":"8b8bf9aa6437b71f836ea0dc709b46ca4f328502eb64df134787ddcf31faf03c"}}