{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:V3CROAIVOQPW5PWHCWNZACOZP3","short_pith_number":"pith:V3CROAIV","canonical_record":{"source":{"id":"2505.06958","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2025-05-11T12:05:14Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a1d23b484e720a82b0651073cde626be5ed81aecf99f82adb3b96fefc6316cb7","abstract_canon_sha256":"cd10250dbe958e823b31e990abd923e89fc6206e9b594a69cd5cc91baaa54df0"},"schema_version":"1.0"},"canonical_sha256":"aec5170115741f6ebec7159b9009d97ee5b93ffc543c9bc17742094c482ef807","source":{"kind":"arxiv","id":"2505.06958","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.06958","created_at":"2026-07-05T11:01:39Z"},{"alias_kind":"arxiv_version","alias_value":"2505.06958v1","created_at":"2026-07-05T11:01:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.06958","created_at":"2026-07-05T11:01:39Z"},{"alias_kind":"pith_short_12","alias_value":"V3CROAIVOQPW","created_at":"2026-07-05T11:01:39Z"},{"alias_kind":"pith_short_16","alias_value":"V3CROAIVOQPW5PWH","created_at":"2026-07-05T11:01:39Z"},{"alias_kind":"pith_short_8","alias_value":"V3CROAIV","created_at":"2026-07-05T11:01:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:V3CROAIVOQPW5PWHCWNZACOZP3","target":"record","payload":{"canonical_record":{"source":{"id":"2505.06958","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2025-05-11T12:05:14Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a1d23b484e720a82b0651073cde626be5ed81aecf99f82adb3b96fefc6316cb7","abstract_canon_sha256":"cd10250dbe958e823b31e990abd923e89fc6206e9b594a69cd5cc91baaa54df0"},"schema_version":"1.0"},"canonical_sha256":"aec5170115741f6ebec7159b9009d97ee5b93ffc543c9bc17742094c482ef807","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:01:39.952039Z","signature_b64":"UxJdBa/Cjg5Og0Y3VVPgVVUC40BGnABDnbRAMCdVMzt5HLw3crRuEtzxjXyyPAQETzV0Z0rOAsLGBjaAZFntDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"aec5170115741f6ebec7159b9009d97ee5b93ffc543c9bc17742094c482ef807","last_reissued_at":"2026-07-05T11:01:39.951566Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:01:39.951566Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.06958","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:01:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UuffrmnoftEFyHQBCSy3+nDvrxPLZWlHZ05UzXn26oNS9C8Mtd6T9Kn6yRJG2VD3ZWLCqv/E85n15zxeTRr3CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T12:02:43.054729Z"},"content_sha256":"8be18b0d0196f1350baa60422c4140c6b71127b6fcfd9d05b3303572d96a5b35","schema_version":"1.0","event_id":"sha256:8be18b0d0196f1350baa60422c4140c6b71127b6fcfd9d05b3303572d96a5b35"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:V3CROAIVOQPW5PWHCWNZACOZP3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Formally Verified Robustness Certifier for Neural Networks (Extended Version)","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.PL","authors_text":"Hira Taqdees Syeda, James Tobler, Toby Murray","submitted_at":"2025-05-11T12:05:14Z","abstract_excerpt":"Neural networks are often susceptible to minor perturbations in input that cause them to misclassify. A recent solution to this problem is the use of globally-robust neural networks, which employ a function to certify that the classification of an input cannot be altered by such a perturbation. Outputs that pass this test are called certified robust. However, to the authors' knowledge, these certification functions have not yet been verified at the implementation level. We demonstrate how previous unverified implementations are exploitably unsound in certain circumstances. Moreover, they often"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.06958","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.06958/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:01:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ha0H7LZUf0yaAJN2ZeiHExHlG8fJSpleUW13XhdnxORuZdz6Gd9KqD4yCzHk4eoT3Qsy5XI0B/nTe95069qmAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T12:02:43.055232Z"},"content_sha256":"1635b6f72c4fffdc47633889f34534cb24bca16c1ebec888d61d04497c2ccab7","schema_version":"1.0","event_id":"sha256:1635b6f72c4fffdc47633889f34534cb24bca16c1ebec888d61d04497c2ccab7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/V3CROAIVOQPW5PWHCWNZACOZP3/bundle.json","state_url":"https://pith.science/pith/V3CROAIVOQPW5PWHCWNZACOZP3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/V3CROAIVOQPW5PWHCWNZACOZP3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T12:02:43Z","links":{"resolver":"https://pith.science/pith/V3CROAIVOQPW5PWHCWNZACOZP3","bundle":"https://pith.science/pith/V3CROAIVOQPW5PWHCWNZACOZP3/bundle.json","state":"https://pith.science/pith/V3CROAIVOQPW5PWHCWNZACOZP3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/V3CROAIVOQPW5PWHCWNZACOZP3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:V3CROAIVOQPW5PWHCWNZACOZP3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cd10250dbe958e823b31e990abd923e89fc6206e9b594a69cd5cc91baaa54df0","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2025-05-11T12:05:14Z","title_canon_sha256":"a1d23b484e720a82b0651073cde626be5ed81aecf99f82adb3b96fefc6316cb7"},"schema_version":"1.0","source":{"id":"2505.06958","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.06958","created_at":"2026-07-05T11:01:39Z"},{"alias_kind":"arxiv_version","alias_value":"2505.06958v1","created_at":"2026-07-05T11:01:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.06958","created_at":"2026-07-05T11:01:39Z"},{"alias_kind":"pith_short_12","alias_value":"V3CROAIVOQPW","created_at":"2026-07-05T11:01:39Z"},{"alias_kind":"pith_short_16","alias_value":"V3CROAIVOQPW5PWH","created_at":"2026-07-05T11:01:39Z"},{"alias_kind":"pith_short_8","alias_value":"V3CROAIV","created_at":"2026-07-05T11:01:39Z"}],"graph_snapshots":[{"event_id":"sha256:1635b6f72c4fffdc47633889f34534cb24bca16c1ebec888d61d04497c2ccab7","target":"graph","created_at":"2026-07-05T11:01:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.06958/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural networks are often susceptible to minor perturbations in input that cause them to misclassify. A recent solution to this problem is the use of globally-robust neural networks, which employ a function to certify that the classification of an input cannot be altered by such a perturbation. Outputs that pass this test are called certified robust. However, to the authors' knowledge, these certification functions have not yet been verified at the implementation level. We demonstrate how previous unverified implementations are exploitably unsound in certain circumstances. Moreover, they often","authors_text":"Hira Taqdees Syeda, James Tobler, Toby Murray","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2025-05-11T12:05:14Z","title":"A Formally Verified Robustness Certifier for Neural Networks (Extended Version)"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.06958","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8be18b0d0196f1350baa60422c4140c6b71127b6fcfd9d05b3303572d96a5b35","target":"record","created_at":"2026-07-05T11:01:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cd10250dbe958e823b31e990abd923e89fc6206e9b594a69cd5cc91baaa54df0","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2025-05-11T12:05:14Z","title_canon_sha256":"a1d23b484e720a82b0651073cde626be5ed81aecf99f82adb3b96fefc6316cb7"},"schema_version":"1.0","source":{"id":"2505.06958","kind":"arxiv","version":1}},"canonical_sha256":"aec5170115741f6ebec7159b9009d97ee5b93ffc543c9bc17742094c482ef807","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"aec5170115741f6ebec7159b9009d97ee5b93ffc543c9bc17742094c482ef807","first_computed_at":"2026-07-05T11:01:39.951566Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:01:39.951566Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UxJdBa/Cjg5Og0Y3VVPgVVUC40BGnABDnbRAMCdVMzt5HLw3crRuEtzxjXyyPAQETzV0Z0rOAsLGBjaAZFntDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:01:39.952039Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.06958","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8be18b0d0196f1350baa60422c4140c6b71127b6fcfd9d05b3303572d96a5b35","sha256:1635b6f72c4fffdc47633889f34534cb24bca16c1ebec888d61d04497c2ccab7"],"state_sha256":"fdc035169666e8f189ca7d2f49f0f8f493695b7196d76f4ab5b3b48704b8ebe7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vZlX29w6wxMLSAdSyt3U1dDMAekgRonPjniFqYrrDdAe87erLzkpvrpJ2NYa9w02LBq8mQkX/+jHbsurBeKCBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T12:02:43.059950Z","bundle_sha256":"227ba04ea00b6c2e5fcc7c52e35fde7d52fa559671e858f9e011b387214d0d7d"}}