{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:WCNLDQWG7OUOR4YMIKGVQGTGME","short_pith_number":"pith:WCNLDQWG","canonical_record":{"source":{"id":"2002.09766","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-22T20:19:53Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"100a83f6dfd040540a748b3bdfd863a0261787fb3baf69c2fc45e99a1ebfdcef","abstract_canon_sha256":"8bad83539e1f8477bbddab42e1b29fa851ce8d513ebab705075a449861dd3536"},"schema_version":"1.0"},"canonical_sha256":"b09ab1c2c6fba8e8f30c428d581a6661224c61422e83299dfd5b1afc581a3771","source":{"kind":"arxiv","id":"2002.09766","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.09766","created_at":"2026-07-05T00:43:11Z"},{"alias_kind":"arxiv_version","alias_value":"2002.09766v1","created_at":"2026-07-05T00:43:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.09766","created_at":"2026-07-05T00:43:11Z"},{"alias_kind":"pith_short_12","alias_value":"WCNLDQWG7OUO","created_at":"2026-07-05T00:43:11Z"},{"alias_kind":"pith_short_16","alias_value":"WCNLDQWG7OUOR4YM","created_at":"2026-07-05T00:43:11Z"},{"alias_kind":"pith_short_8","alias_value":"WCNLDQWG","created_at":"2026-07-05T00:43:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:WCNLDQWG7OUOR4YMIKGVQGTGME","target":"record","payload":{"canonical_record":{"source":{"id":"2002.09766","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-22T20:19:53Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"100a83f6dfd040540a748b3bdfd863a0261787fb3baf69c2fc45e99a1ebfdcef","abstract_canon_sha256":"8bad83539e1f8477bbddab42e1b29fa851ce8d513ebab705075a449861dd3536"},"schema_version":"1.0"},"canonical_sha256":"b09ab1c2c6fba8e8f30c428d581a6661224c61422e83299dfd5b1afc581a3771","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:43:11.524416Z","signature_b64":"OJ9ZYa0eMgEJjDTz3jRjYS278/Mk/D8MCkNMASvuhyr0Th08F+vh8ktcOPKwthOVppRxfn2Ytva6hZZ5wDmKBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b09ab1c2c6fba8e8f30c428d581a6661224c61422e83299dfd5b1afc581a3771","last_reissued_at":"2026-07-05T00:43:11.524049Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:43:11.524049Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2002.09766","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:43:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2IL8yCckN4DGY40BaifvWcP7vmySWZb6exUqqUvKXG55o3RjL8tppr1cGTAMxGdJ+5k9yjlbDMqbaMQ1KwQ9DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T08:22:26.064198Z"},"content_sha256":"58d6ec92c09fea6f02ec0b18cce4ea3e8b602df6986d21ad2f81b562534ded61","schema_version":"1.0","event_id":"sha256:58d6ec92c09fea6f02ec0b18cce4ea3e8b602df6986d21ad2f81b562534ded61"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:WCNLDQWG7OUOR4YMIKGVQGTGME","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Improving the Tightness of Convex Relaxation Bounds for Training Certifiably Robust Classifiers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Chen Zhu, Furong Huang, Hengduo Li, Ping-yeh Chiang, Renkun Ni, Tom Goldstein","submitted_at":"2020-02-22T20:19:53Z","abstract_excerpt":"Convex relaxations are effective for training and certifying neural networks against norm-bounded adversarial attacks, but they leave a large gap between certifiable and empirical robustness. In principle, convex relaxation can provide tight bounds if the solution to the relaxed problem is feasible for the original non-convex problem. We propose two regularizers that can be used to train neural networks that yield tighter convex relaxation bounds for robustness. In all of our experiments, the proposed regularizers result in higher certified accuracy than non-regularized baselines."},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.09766","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2002.09766/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:43:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZfkFapq9qKJm2XFAKXvgJ+J1jL+4NSfuTbP0VLdVh41iUiobg7Jx+C9GPeA8IrULKXblRi/kwq1BCtVDU/9pDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T08:22:26.064712Z"},"content_sha256":"a6b42acdbca141cb58c025f48e3146e822e28cbd2133e36130a4be89e581e950","schema_version":"1.0","event_id":"sha256:a6b42acdbca141cb58c025f48e3146e822e28cbd2133e36130a4be89e581e950"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WCNLDQWG7OUOR4YMIKGVQGTGME/bundle.json","state_url":"https://pith.science/pith/WCNLDQWG7OUOR4YMIKGVQGTGME/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WCNLDQWG7OUOR4YMIKGVQGTGME/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T08:22:26Z","links":{"resolver":"https://pith.science/pith/WCNLDQWG7OUOR4YMIKGVQGTGME","bundle":"https://pith.science/pith/WCNLDQWG7OUOR4YMIKGVQGTGME/bundle.json","state":"https://pith.science/pith/WCNLDQWG7OUOR4YMIKGVQGTGME/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WCNLDQWG7OUOR4YMIKGVQGTGME/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:WCNLDQWG7OUOR4YMIKGVQGTGME","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8bad83539e1f8477bbddab42e1b29fa851ce8d513ebab705075a449861dd3536","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-22T20:19:53Z","title_canon_sha256":"100a83f6dfd040540a748b3bdfd863a0261787fb3baf69c2fc45e99a1ebfdcef"},"schema_version":"1.0","source":{"id":"2002.09766","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.09766","created_at":"2026-07-05T00:43:11Z"},{"alias_kind":"arxiv_version","alias_value":"2002.09766v1","created_at":"2026-07-05T00:43:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.09766","created_at":"2026-07-05T00:43:11Z"},{"alias_kind":"pith_short_12","alias_value":"WCNLDQWG7OUO","created_at":"2026-07-05T00:43:11Z"},{"alias_kind":"pith_short_16","alias_value":"WCNLDQWG7OUOR4YM","created_at":"2026-07-05T00:43:11Z"},{"alias_kind":"pith_short_8","alias_value":"WCNLDQWG","created_at":"2026-07-05T00:43:11Z"}],"graph_snapshots":[{"event_id":"sha256:a6b42acdbca141cb58c025f48e3146e822e28cbd2133e36130a4be89e581e950","target":"graph","created_at":"2026-07-05T00:43:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.09766/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Convex relaxations are effective for training and certifying neural networks against norm-bounded adversarial attacks, but they leave a large gap between certifiable and empirical robustness. In principle, convex relaxation can provide tight bounds if the solution to the relaxed problem is feasible for the original non-convex problem. We propose two regularizers that can be used to train neural networks that yield tighter convex relaxation bounds for robustness. In all of our experiments, the proposed regularizers result in higher certified accuracy than non-regularized baselines.","authors_text":"Chen Zhu, Furong Huang, Hengduo Li, Ping-yeh Chiang, Renkun Ni, Tom Goldstein","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-22T20:19:53Z","title":"Improving the Tightness of Convex Relaxation Bounds for Training Certifiably Robust Classifiers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.09766","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:58d6ec92c09fea6f02ec0b18cce4ea3e8b602df6986d21ad2f81b562534ded61","target":"record","created_at":"2026-07-05T00:43:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8bad83539e1f8477bbddab42e1b29fa851ce8d513ebab705075a449861dd3536","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-22T20:19:53Z","title_canon_sha256":"100a83f6dfd040540a748b3bdfd863a0261787fb3baf69c2fc45e99a1ebfdcef"},"schema_version":"1.0","source":{"id":"2002.09766","kind":"arxiv","version":1}},"canonical_sha256":"b09ab1c2c6fba8e8f30c428d581a6661224c61422e83299dfd5b1afc581a3771","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b09ab1c2c6fba8e8f30c428d581a6661224c61422e83299dfd5b1afc581a3771","first_computed_at":"2026-07-05T00:43:11.524049Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:43:11.524049Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OJ9ZYa0eMgEJjDTz3jRjYS278/Mk/D8MCkNMASvuhyr0Th08F+vh8ktcOPKwthOVppRxfn2Ytva6hZZ5wDmKBg==","signature_status":"signed_v1","signed_at":"2026-07-05T00:43:11.524416Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.09766","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:58d6ec92c09fea6f02ec0b18cce4ea3e8b602df6986d21ad2f81b562534ded61","sha256:a6b42acdbca141cb58c025f48e3146e822e28cbd2133e36130a4be89e581e950"],"state_sha256":"f93d962dbf306affc5920dfa70b2681690357ebdc2f8de9fc831e23f10c86757"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ijwPRkOchqpoxijzZab6Cz4MwiaIjyVxZeRWCZ+ZmYKLD8w7LwCveQmoqgbYfox7C1QR/utHOAtB4PU8EbCwDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T08:22:26.068911Z","bundle_sha256":"b42484e178d3f4ecb196173e4ef8141ea1a360a30d64fb2ad0b957aa8699e78d"}}