{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:UT6AIYYDH4FLV636OVSYLNNHRW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ceb07f6ad22637d67059d2afbf9762fed363cabfa0b3cd8d2c2a2cf2ca125b85","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-11-21T14:00:01Z","title_canon_sha256":"2a64eccbb2185f1280bb2b3b9d9f3fd064fe2ee0064a023ae98f682b30d61803"},"schema_version":"1.0","source":{"id":"2511.17688","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2511.17688","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"arxiv_version","alias_value":"2511.17688v2","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2511.17688","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"pith_short_12","alias_value":"UT6AIYYDH4FL","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"pith_short_16","alias_value":"UT6AIYYDH4FLV636","created_at":"2026-07-14T01:22:02Z"},{"alias_kind":"pith_short_8","alias_value":"UT6AIYYD","created_at":"2026-07-14T01:22:02Z"}],"graph_snapshots":[{"event_id":"sha256:6f5fe978af3587140bcebd3eea3fb06b82d2ab25467b696c1e56bb639777b0ba","target":"graph","created_at":"2026-07-14T01:22:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2511.17688/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Input transformation-based attacks improve adversarial transferability by aggregating gradients over transformed inputs. Existing analyses mainly explain their efficacy from image diversity, semantic preservation, attention variance or hypothesis space augmentation, yet overlook the critical role of model frontend responses.\n  In this paper, we revisit transformation-based attacks from an implicit ensemble perspective: each transformation can be viewed as a pre-processing operator before the surrogate model, inducing a distinct frontend response for gradient aggregation. Based on this view, we","authors_text":"Chenhao Lu, Feng Ye, Guanliang Huang, Lunzhe Chen, Quan Liu, Shuming Zhen, Xudong Ke","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-11-21T14:00:01Z","title":"Enhancing Adversarial Transferability through Block Stretch and Shrink"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2511.17688","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:480200be2d7fcb72c43b6238cf7739297231ac5636583902ef699c80ea8b7ce5","target":"record","created_at":"2026-07-14T01:22:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ceb07f6ad22637d67059d2afbf9762fed363cabfa0b3cd8d2c2a2cf2ca125b85","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-11-21T14:00:01Z","title_canon_sha256":"2a64eccbb2185f1280bb2b3b9d9f3fd064fe2ee0064a023ae98f682b30d61803"},"schema_version":"1.0","source":{"id":"2511.17688","kind":"arxiv","version":2}},"canonical_sha256":"a4fc0463033f0abafb7e756585b5a78db29c6b172b66891736bf828417be0d13","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a4fc0463033f0abafb7e756585b5a78db29c6b172b66891736bf828417be0d13","first_computed_at":"2026-07-14T01:22:02.316415Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-14T01:22:02.316415Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"p/PfVDNWLB1vKIEZTEnMCManx7i3gKluyMxk6nswzEZGaDnsMPibhpi9WhrdHIYrpQjfJDF5ATePA69utXo2CA==","signature_status":"signed_v1","signed_at":"2026-07-14T01:22:02.317400Z","signed_message":"canonical_sha256_bytes"},"source_id":"2511.17688","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:480200be2d7fcb72c43b6238cf7739297231ac5636583902ef699c80ea8b7ce5","sha256:6f5fe978af3587140bcebd3eea3fb06b82d2ab25467b696c1e56bb639777b0ba"],"state_sha256":"67b0fe51382e7a4d67a274ae4a02eb6f2ac422e43c762d9a9dec78a2b1f6922e"}