{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:VWLNPLDB3XBY7U3YCIPCDAFGKP","short_pith_number":"pith:VWLNPLDB","canonical_record":{"source":{"id":"2104.03356","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-04-07T19:08:24Z","cross_cats_sorted":[],"title_canon_sha256":"6968276ef8b0f26eedd4b8d85e67cd8b0f2265a25098f2963f71be642188aa12","abstract_canon_sha256":"77a25615b3f763951068e28ef14ff928b0432afbb995d5d5d437ae91795e8a05"},"schema_version":"1.0"},"canonical_sha256":"ad96d7ac61ddc38fd378121e2180a653f398f9c2b97b9c421e6167c574c0d47f","source":{"kind":"arxiv","id":"2104.03356","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.03356","created_at":"2026-07-05T02:30:16Z"},{"alias_kind":"arxiv_version","alias_value":"2104.03356v1","created_at":"2026-07-05T02:30:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.03356","created_at":"2026-07-05T02:30:16Z"},{"alias_kind":"pith_short_12","alias_value":"VWLNPLDB3XBY","created_at":"2026-07-05T02:30:16Z"},{"alias_kind":"pith_short_16","alias_value":"VWLNPLDB3XBY7U3Y","created_at":"2026-07-05T02:30:16Z"},{"alias_kind":"pith_short_8","alias_value":"VWLNPLDB","created_at":"2026-07-05T02:30:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:VWLNPLDB3XBY7U3YCIPCDAFGKP","target":"record","payload":{"canonical_record":{"source":{"id":"2104.03356","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-04-07T19:08:24Z","cross_cats_sorted":[],"title_canon_sha256":"6968276ef8b0f26eedd4b8d85e67cd8b0f2265a25098f2963f71be642188aa12","abstract_canon_sha256":"77a25615b3f763951068e28ef14ff928b0432afbb995d5d5d437ae91795e8a05"},"schema_version":"1.0"},"canonical_sha256":"ad96d7ac61ddc38fd378121e2180a653f398f9c2b97b9c421e6167c574c0d47f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:30:16.616137Z","signature_b64":"uumTDM1HSX7mMKfyBZPcQgKgIwFlI4vBZkIexZV0+VWAf9ai5g9TulJsaHeQSty9ynHKfNeBiwqV9GDZeZveBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ad96d7ac61ddc38fd378121e2180a653f398f9c2b97b9c421e6167c574c0d47f","last_reissued_at":"2026-07-05T02:30:16.615724Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:30:16.615724Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2104.03356","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:30:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"l81zMyjSyLvAPJ13BLmtT8tSiyDCpeRZuo7FWzwvnGVB0hySUvv2dnQjUKjGPcNEhB56u3iu7iUDcAYxduU/BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T15:43:12.006047Z"},"content_sha256":"172ef1273f52cf124773bbff604c982143066fcf94c7cf8a783139aea3039e80","schema_version":"1.0","event_id":"sha256:172ef1273f52cf124773bbff604c982143066fcf94c7cf8a783139aea3039e80"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:VWLNPLDB3XBY7U3YCIPCDAFGKP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Universal Spectral Adversarial Attacks for Deformable Shapes","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Arianna Rampini, Emanuele Rodol\\`a, Franco Pestarini, Luca Cosmo, Simone Melzi","submitted_at":"2021-04-07T19:08:24Z","abstract_excerpt":"Machine learning models are known to be vulnerable to adversarial attacks, namely perturbations of the data that lead to wrong predictions despite being imperceptible. However, the existence of \"universal\" attacks (i.e., unique perturbations that transfer across different data points) has only been demonstrated for images to date. Part of the reason lies in the lack of a common domain, for geometric data such as graphs, meshes, and point clouds, where a universal perturbation can be defined. In this paper, we offer a change in perspective and demonstrate the existence of universal attacks for "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.03356","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2104.03356/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:30:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DbjauTlpeoZDpWS+TUdu6P/KYcvNfKzvk8nNBmJ1QNjzmSdtAAPTQmnVQHjmnMJ3ggcaj9ZjM3WplJkEsYOAAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T15:43:12.006560Z"},"content_sha256":"4254fca87d954a9597a25761420d860fb80a9fc7c0ce1583d2e62ae6195a0676","schema_version":"1.0","event_id":"sha256:4254fca87d954a9597a25761420d860fb80a9fc7c0ce1583d2e62ae6195a0676"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VWLNPLDB3XBY7U3YCIPCDAFGKP/bundle.json","state_url":"https://pith.science/pith/VWLNPLDB3XBY7U3YCIPCDAFGKP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VWLNPLDB3XBY7U3YCIPCDAFGKP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T15:43:12Z","links":{"resolver":"https://pith.science/pith/VWLNPLDB3XBY7U3YCIPCDAFGKP","bundle":"https://pith.science/pith/VWLNPLDB3XBY7U3YCIPCDAFGKP/bundle.json","state":"https://pith.science/pith/VWLNPLDB3XBY7U3YCIPCDAFGKP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VWLNPLDB3XBY7U3YCIPCDAFGKP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:VWLNPLDB3XBY7U3YCIPCDAFGKP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"77a25615b3f763951068e28ef14ff928b0432afbb995d5d5d437ae91795e8a05","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-04-07T19:08:24Z","title_canon_sha256":"6968276ef8b0f26eedd4b8d85e67cd8b0f2265a25098f2963f71be642188aa12"},"schema_version":"1.0","source":{"id":"2104.03356","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.03356","created_at":"2026-07-05T02:30:16Z"},{"alias_kind":"arxiv_version","alias_value":"2104.03356v1","created_at":"2026-07-05T02:30:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.03356","created_at":"2026-07-05T02:30:16Z"},{"alias_kind":"pith_short_12","alias_value":"VWLNPLDB3XBY","created_at":"2026-07-05T02:30:16Z"},{"alias_kind":"pith_short_16","alias_value":"VWLNPLDB3XBY7U3Y","created_at":"2026-07-05T02:30:16Z"},{"alias_kind":"pith_short_8","alias_value":"VWLNPLDB","created_at":"2026-07-05T02:30:16Z"}],"graph_snapshots":[{"event_id":"sha256:4254fca87d954a9597a25761420d860fb80a9fc7c0ce1583d2e62ae6195a0676","target":"graph","created_at":"2026-07-05T02:30:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2104.03356/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning models are known to be vulnerable to adversarial attacks, namely perturbations of the data that lead to wrong predictions despite being imperceptible. However, the existence of \"universal\" attacks (i.e., unique perturbations that transfer across different data points) has only been demonstrated for images to date. Part of the reason lies in the lack of a common domain, for geometric data such as graphs, meshes, and point clouds, where a universal perturbation can be defined. In this paper, we offer a change in perspective and demonstrate the existence of universal attacks for ","authors_text":"Arianna Rampini, Emanuele Rodol\\`a, Franco Pestarini, Luca Cosmo, Simone Melzi","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-04-07T19:08:24Z","title":"Universal Spectral Adversarial Attacks for Deformable Shapes"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.03356","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:172ef1273f52cf124773bbff604c982143066fcf94c7cf8a783139aea3039e80","target":"record","created_at":"2026-07-05T02:30:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"77a25615b3f763951068e28ef14ff928b0432afbb995d5d5d437ae91795e8a05","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-04-07T19:08:24Z","title_canon_sha256":"6968276ef8b0f26eedd4b8d85e67cd8b0f2265a25098f2963f71be642188aa12"},"schema_version":"1.0","source":{"id":"2104.03356","kind":"arxiv","version":1}},"canonical_sha256":"ad96d7ac61ddc38fd378121e2180a653f398f9c2b97b9c421e6167c574c0d47f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ad96d7ac61ddc38fd378121e2180a653f398f9c2b97b9c421e6167c574c0d47f","first_computed_at":"2026-07-05T02:30:16.615724Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:30:16.615724Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"uumTDM1HSX7mMKfyBZPcQgKgIwFlI4vBZkIexZV0+VWAf9ai5g9TulJsaHeQSty9ynHKfNeBiwqV9GDZeZveBw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:30:16.616137Z","signed_message":"canonical_sha256_bytes"},"source_id":"2104.03356","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:172ef1273f52cf124773bbff604c982143066fcf94c7cf8a783139aea3039e80","sha256:4254fca87d954a9597a25761420d860fb80a9fc7c0ce1583d2e62ae6195a0676"],"state_sha256":"e9927c9d7cb7d8c58e5c31cfcb70acb34f9f5ee6931b7eeb8da79b6bd7969f84"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WNnKg3mhFkFWctGjshHh9V4+gFT9OaWw0eQHoHMpJrOl6t6h2OeGWJf+Z1lRrqZPrXZzZpQVIPbaNctDi1SgCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T15:43:12.011536Z","bundle_sha256":"b3f6a53c1925f9071111c715e8eefba994310535b1bc2c35cbc54ac2a9766550"}}