{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:X22LYXZDMC7UEJG7YJ6MCBSER3","short_pith_number":"pith:X22LYXZD","canonical_record":{"source":{"id":"2303.14922","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-27T05:37:43Z","cross_cats_sorted":[],"title_canon_sha256":"9bbbec080dbd24e21674f094d8e4ebc60339e0325780aa4dcb8d0b1e299c9423","abstract_canon_sha256":"97176bbeee992e5e04b3572a71b30b7505beb060857916124acb562c86b8e243"},"schema_version":"1.0"},"canonical_sha256":"beb4bc5f2360bf4224dfc27cc106448ecd9551d9a141d2426e28ba14f7380d25","source":{"kind":"arxiv","id":"2303.14922","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.14922","created_at":"2026-07-05T05:54:47Z"},{"alias_kind":"arxiv_version","alias_value":"2303.14922v1","created_at":"2026-07-05T05:54:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.14922","created_at":"2026-07-05T05:54:47Z"},{"alias_kind":"pith_short_12","alias_value":"X22LYXZDMC7U","created_at":"2026-07-05T05:54:47Z"},{"alias_kind":"pith_short_16","alias_value":"X22LYXZDMC7UEJG7","created_at":"2026-07-05T05:54:47Z"},{"alias_kind":"pith_short_8","alias_value":"X22LYXZD","created_at":"2026-07-05T05:54:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:X22LYXZDMC7UEJG7YJ6MCBSER3","target":"record","payload":{"canonical_record":{"source":{"id":"2303.14922","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-27T05:37:43Z","cross_cats_sorted":[],"title_canon_sha256":"9bbbec080dbd24e21674f094d8e4ebc60339e0325780aa4dcb8d0b1e299c9423","abstract_canon_sha256":"97176bbeee992e5e04b3572a71b30b7505beb060857916124acb562c86b8e243"},"schema_version":"1.0"},"canonical_sha256":"beb4bc5f2360bf4224dfc27cc106448ecd9551d9a141d2426e28ba14f7380d25","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:54:47.810449Z","signature_b64":"jpm78EZPVT2QCqVMg6TSn7EuNIprWY8LPVqBtXWXg+qH6o71hevYFMO+F4nPByhR+b526u3M8vNFxdwOwUdfCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"beb4bc5f2360bf4224dfc27cc106448ecd9551d9a141d2426e28ba14f7380d25","last_reissued_at":"2026-07-05T05:54:47.810040Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:54:47.810040Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.14922","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:54:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UMSI61VHPLnwaYaoMUa/BFB0fayVZw/My4pzK/EN/zmr/ieg0hnT/QGaeNbF5QEueuMOhS48jGAiW+VS12RHBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T18:58:28.905441Z"},"content_sha256":"5238da3455f58db9491fa299a224c8472fe828698cba27bd76d433c0fd27860a","schema_version":"1.0","event_id":"sha256:5238da3455f58db9491fa299a224c8472fe828698cba27bd76d433c0fd27860a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:X22LYXZDMC7UEJG7YJ6MCBSER3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CAT:Collaborative Adversarial Training","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Huafeng Kuang, Rongrong Ji, Xianming Lin, Xingbin Liu, Yongjian Wu","submitted_at":"2023-03-27T05:37:43Z","abstract_excerpt":"Adversarial training can improve the robustness of neural networks. Previous methods focus on a single adversarial training strategy and do not consider the model property trained by different strategies. By revisiting the previous methods, we find different adversarial training methods have distinct robustness for sample instances. For example, a sample instance can be correctly classified by a model trained using standard adversarial training (AT) but not by a model trained using TRADES, and vice versa. Based on this observation, we propose a collaborative adversarial training framework to i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.14922","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.14922/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:54:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p13/9xpq64yxiaWQNnL1H1NmYoXebO+8sV65CXeONnKSwUO0C7j1hHsOzhH2KEKs0u1pncoTbhUaNzopUDz0Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T18:58:28.905938Z"},"content_sha256":"76e1ebe71b871b0f7ac2ca53093d6da1a5360007b8d85840731d6e60257a6759","schema_version":"1.0","event_id":"sha256:76e1ebe71b871b0f7ac2ca53093d6da1a5360007b8d85840731d6e60257a6759"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/X22LYXZDMC7UEJG7YJ6MCBSER3/bundle.json","state_url":"https://pith.science/pith/X22LYXZDMC7UEJG7YJ6MCBSER3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/X22LYXZDMC7UEJG7YJ6MCBSER3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T18:58:28Z","links":{"resolver":"https://pith.science/pith/X22LYXZDMC7UEJG7YJ6MCBSER3","bundle":"https://pith.science/pith/X22LYXZDMC7UEJG7YJ6MCBSER3/bundle.json","state":"https://pith.science/pith/X22LYXZDMC7UEJG7YJ6MCBSER3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/X22LYXZDMC7UEJG7YJ6MCBSER3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:X22LYXZDMC7UEJG7YJ6MCBSER3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"97176bbeee992e5e04b3572a71b30b7505beb060857916124acb562c86b8e243","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-27T05:37:43Z","title_canon_sha256":"9bbbec080dbd24e21674f094d8e4ebc60339e0325780aa4dcb8d0b1e299c9423"},"schema_version":"1.0","source":{"id":"2303.14922","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.14922","created_at":"2026-07-05T05:54:47Z"},{"alias_kind":"arxiv_version","alias_value":"2303.14922v1","created_at":"2026-07-05T05:54:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.14922","created_at":"2026-07-05T05:54:47Z"},{"alias_kind":"pith_short_12","alias_value":"X22LYXZDMC7U","created_at":"2026-07-05T05:54:47Z"},{"alias_kind":"pith_short_16","alias_value":"X22LYXZDMC7UEJG7","created_at":"2026-07-05T05:54:47Z"},{"alias_kind":"pith_short_8","alias_value":"X22LYXZD","created_at":"2026-07-05T05:54:47Z"}],"graph_snapshots":[{"event_id":"sha256:76e1ebe71b871b0f7ac2ca53093d6da1a5360007b8d85840731d6e60257a6759","target":"graph","created_at":"2026-07-05T05:54:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.14922/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial training can improve the robustness of neural networks. Previous methods focus on a single adversarial training strategy and do not consider the model property trained by different strategies. By revisiting the previous methods, we find different adversarial training methods have distinct robustness for sample instances. For example, a sample instance can be correctly classified by a model trained using standard adversarial training (AT) but not by a model trained using TRADES, and vice versa. Based on this observation, we propose a collaborative adversarial training framework to i","authors_text":"Huafeng Kuang, Rongrong Ji, Xianming Lin, Xingbin Liu, Yongjian Wu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-27T05:37:43Z","title":"CAT:Collaborative Adversarial Training"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.14922","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5238da3455f58db9491fa299a224c8472fe828698cba27bd76d433c0fd27860a","target":"record","created_at":"2026-07-05T05:54:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"97176bbeee992e5e04b3572a71b30b7505beb060857916124acb562c86b8e243","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-27T05:37:43Z","title_canon_sha256":"9bbbec080dbd24e21674f094d8e4ebc60339e0325780aa4dcb8d0b1e299c9423"},"schema_version":"1.0","source":{"id":"2303.14922","kind":"arxiv","version":1}},"canonical_sha256":"beb4bc5f2360bf4224dfc27cc106448ecd9551d9a141d2426e28ba14f7380d25","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"beb4bc5f2360bf4224dfc27cc106448ecd9551d9a141d2426e28ba14f7380d25","first_computed_at":"2026-07-05T05:54:47.810040Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:54:47.810040Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jpm78EZPVT2QCqVMg6TSn7EuNIprWY8LPVqBtXWXg+qH6o71hevYFMO+F4nPByhR+b526u3M8vNFxdwOwUdfCA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:54:47.810449Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.14922","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5238da3455f58db9491fa299a224c8472fe828698cba27bd76d433c0fd27860a","sha256:76e1ebe71b871b0f7ac2ca53093d6da1a5360007b8d85840731d6e60257a6759"],"state_sha256":"e5350927ffd51b66a11340e74c714134db202ac0e54c7d14aa91d77e7ba696d1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"n73NsgJMMz06Hi4U6agyqjJQLHCZqux4IzPYFFzevoR+2TVYcD4b79ErSZ+ITmsE41RmnARM5mTf+hc5mIAkDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T18:58:28.909579Z","bundle_sha256":"2ae7858be817333e77be942fa6a3cbaacc98bdda6139ee8549fff2504d375e2e"}}