{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:VFAOH3QFBKPRHIW5T7FJI66RTJ","short_pith_number":"pith:VFAOH3QF","canonical_record":{"source":{"id":"2312.10329","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2023-12-16T05:38:39Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"3515c9221d43fc59e2a8bcc3137dba9db0dc2e1c85bdcbffa3f53a6b008558f7","abstract_canon_sha256":"61517758c9afd89f6022853484e137a963e8c54f4d43cc51a5e2cb6c4c3ba208"},"schema_version":"1.0"},"canonical_sha256":"a940e3ee050a9f13a2dd9fca947bd19a408c595916583938f5b76fa18bfb8e11","source":{"kind":"arxiv","id":"2312.10329","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.10329","created_at":"2026-07-05T07:25:04Z"},{"alias_kind":"arxiv_version","alias_value":"2312.10329v1","created_at":"2026-07-05T07:25:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.10329","created_at":"2026-07-05T07:25:04Z"},{"alias_kind":"pith_short_12","alias_value":"VFAOH3QFBKPR","created_at":"2026-07-05T07:25:04Z"},{"alias_kind":"pith_short_16","alias_value":"VFAOH3QFBKPRHIW5","created_at":"2026-07-05T07:25:04Z"},{"alias_kind":"pith_short_8","alias_value":"VFAOH3QF","created_at":"2026-07-05T07:25:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:VFAOH3QFBKPRHIW5T7FJI66RTJ","target":"record","payload":{"canonical_record":{"source":{"id":"2312.10329","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2023-12-16T05:38:39Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"3515c9221d43fc59e2a8bcc3137dba9db0dc2e1c85bdcbffa3f53a6b008558f7","abstract_canon_sha256":"61517758c9afd89f6022853484e137a963e8c54f4d43cc51a5e2cb6c4c3ba208"},"schema_version":"1.0"},"canonical_sha256":"a940e3ee050a9f13a2dd9fca947bd19a408c595916583938f5b76fa18bfb8e11","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:25:04.962170Z","signature_b64":"nxdazK4ebRAOydtb6ch3USH92sENBxVPaLX/IVZxfafdBuNeg6lD/Qh+R2mt4zE93b0nN8hrbHfnUwd8Fnb/CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a940e3ee050a9f13a2dd9fca947bd19a408c595916583938f5b76fa18bfb8e11","last_reissued_at":"2026-07-05T07:25:04.961737Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:25:04.961737Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.10329","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:25:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tt6j4DCVoqOAOSFLAidlWvL3T+vmpZke31rcjXMuZxs7Ajy6yzUl7PAkZHgia9KM7k/NsjVaxxN6ovg4NRfPDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T02:18:03.844105Z"},"content_sha256":"bd8cc3498310d9b0242c9627c8658eb5cc24abc508a69128cdbbad3c75385109","schema_version":"1.0","event_id":"sha256:bd8cc3498310d9b0242c9627c8658eb5cc24abc508a69128cdbbad3c75385109"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:VFAOH3QFBKPRHIW5T7FJI66RTJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Perturbation-Invariant Adversarial Training for Neural Ranking Models: Improving the Effectiveness-Robustness Trade-Off","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.IR","authors_text":"Jiafeng Guo, Maarten de Rijke, Mingkun Zhang, Ruqing Zhang, Wei Chen, Xueqi Cheng, Yu-An Liu","submitted_at":"2023-12-16T05:38:39Z","abstract_excerpt":"Neural ranking models (NRMs) have shown great success in information retrieval (IR). But their predictions can easily be manipulated using adversarial examples, which are crafted by adding imperceptible perturbations to legitimate documents. This vulnerability raises significant concerns about their reliability and hinders the widespread deployment of NRMs. By incorporating adversarial examples into training data, adversarial training has become the de facto defense approach to adversarial attacks against NRMs. However, this defense mechanism is subject to a trade-off between effectiveness and"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.10329","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.10329/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:25:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1HARyxmcw8mTiMyZsBR+DUW2Z8ho9Bb2Df6GuUKSAJnMPpfzrbBjDqbcQhAW7pCEhgWQqjrRRAM2PF3fKzexBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T02:18:03.844663Z"},"content_sha256":"c7ebfb01eddc1471d7a11580ea40d186320828d73dd48bb5603711c47518bab9","schema_version":"1.0","event_id":"sha256:c7ebfb01eddc1471d7a11580ea40d186320828d73dd48bb5603711c47518bab9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VFAOH3QFBKPRHIW5T7FJI66RTJ/bundle.json","state_url":"https://pith.science/pith/VFAOH3QFBKPRHIW5T7FJI66RTJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VFAOH3QFBKPRHIW5T7FJI66RTJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T02:18:03Z","links":{"resolver":"https://pith.science/pith/VFAOH3QFBKPRHIW5T7FJI66RTJ","bundle":"https://pith.science/pith/VFAOH3QFBKPRHIW5T7FJI66RTJ/bundle.json","state":"https://pith.science/pith/VFAOH3QFBKPRHIW5T7FJI66RTJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VFAOH3QFBKPRHIW5T7FJI66RTJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:VFAOH3QFBKPRHIW5T7FJI66RTJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"61517758c9afd89f6022853484e137a963e8c54f4d43cc51a5e2cb6c4c3ba208","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2023-12-16T05:38:39Z","title_canon_sha256":"3515c9221d43fc59e2a8bcc3137dba9db0dc2e1c85bdcbffa3f53a6b008558f7"},"schema_version":"1.0","source":{"id":"2312.10329","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.10329","created_at":"2026-07-05T07:25:04Z"},{"alias_kind":"arxiv_version","alias_value":"2312.10329v1","created_at":"2026-07-05T07:25:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.10329","created_at":"2026-07-05T07:25:04Z"},{"alias_kind":"pith_short_12","alias_value":"VFAOH3QFBKPR","created_at":"2026-07-05T07:25:04Z"},{"alias_kind":"pith_short_16","alias_value":"VFAOH3QFBKPRHIW5","created_at":"2026-07-05T07:25:04Z"},{"alias_kind":"pith_short_8","alias_value":"VFAOH3QF","created_at":"2026-07-05T07:25:04Z"}],"graph_snapshots":[{"event_id":"sha256:c7ebfb01eddc1471d7a11580ea40d186320828d73dd48bb5603711c47518bab9","target":"graph","created_at":"2026-07-05T07:25:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.10329/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural ranking models (NRMs) have shown great success in information retrieval (IR). But their predictions can easily be manipulated using adversarial examples, which are crafted by adding imperceptible perturbations to legitimate documents. This vulnerability raises significant concerns about their reliability and hinders the widespread deployment of NRMs. By incorporating adversarial examples into training data, adversarial training has become the de facto defense approach to adversarial attacks against NRMs. However, this defense mechanism is subject to a trade-off between effectiveness and","authors_text":"Jiafeng Guo, Maarten de Rijke, Mingkun Zhang, Ruqing Zhang, Wei Chen, Xueqi Cheng, Yu-An Liu","cross_cats":["cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2023-12-16T05:38:39Z","title":"Perturbation-Invariant Adversarial Training for Neural Ranking Models: Improving the Effectiveness-Robustness Trade-Off"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.10329","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bd8cc3498310d9b0242c9627c8658eb5cc24abc508a69128cdbbad3c75385109","target":"record","created_at":"2026-07-05T07:25:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"61517758c9afd89f6022853484e137a963e8c54f4d43cc51a5e2cb6c4c3ba208","cross_cats_sorted":["cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2023-12-16T05:38:39Z","title_canon_sha256":"3515c9221d43fc59e2a8bcc3137dba9db0dc2e1c85bdcbffa3f53a6b008558f7"},"schema_version":"1.0","source":{"id":"2312.10329","kind":"arxiv","version":1}},"canonical_sha256":"a940e3ee050a9f13a2dd9fca947bd19a408c595916583938f5b76fa18bfb8e11","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a940e3ee050a9f13a2dd9fca947bd19a408c595916583938f5b76fa18bfb8e11","first_computed_at":"2026-07-05T07:25:04.961737Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:25:04.961737Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nxdazK4ebRAOydtb6ch3USH92sENBxVPaLX/IVZxfafdBuNeg6lD/Qh+R2mt4zE93b0nN8hrbHfnUwd8Fnb/CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:25:04.962170Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.10329","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bd8cc3498310d9b0242c9627c8658eb5cc24abc508a69128cdbbad3c75385109","sha256:c7ebfb01eddc1471d7a11580ea40d186320828d73dd48bb5603711c47518bab9"],"state_sha256":"6651552308c831fe9173eeaafda2e8ba452c6abd25cbe2bd6615c7dbd2dcc30c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XqcephNVlswcDkJesjIZnaHE1lvhseTKJ4JP/4p+Yu/+kf2/aZhX0+AHejbolUZn+M7HLL2i+dbK+BbaqI5TDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T02:18:03.849357Z","bundle_sha256":"2ddb5fb5e3a413ce7c4b653949bfe102f4685b7888aa0d49f713f8072ba592bc"}}