{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:X7UXA2PKHEMNRCLBIWSCD7SSSD","short_pith_number":"pith:X7UXA2PK","canonical_record":{"source":{"id":"2402.02629","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-04T22:45:20Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ac357aba0dffe3566b115892f4706e1704a8f17507a6d53afaffc3e3f7ca0d22","abstract_canon_sha256":"821cd6cdda74ade0422027581f8fb011c16f48a82cdf15221ff0c1f429ee8a7e"},"schema_version":"1.0"},"canonical_sha256":"bfe97069ea3918d8896145a421fe5290f5126c67093eeea44182659cd5d3a51d","source":{"kind":"arxiv","id":"2402.02629","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.02629","created_at":"2026-07-05T09:50:00Z"},{"alias_kind":"arxiv_version","alias_value":"2402.02629v2","created_at":"2026-07-05T09:50:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.02629","created_at":"2026-07-05T09:50:00Z"},{"alias_kind":"pith_short_12","alias_value":"X7UXA2PKHEMN","created_at":"2026-07-05T09:50:00Z"},{"alias_kind":"pith_short_16","alias_value":"X7UXA2PKHEMNRCLB","created_at":"2026-07-05T09:50:00Z"},{"alias_kind":"pith_short_8","alias_value":"X7UXA2PK","created_at":"2026-07-05T09:50:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:X7UXA2PKHEMNRCLBIWSCD7SSSD","target":"record","payload":{"canonical_record":{"source":{"id":"2402.02629","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-04T22:45:20Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"ac357aba0dffe3566b115892f4706e1704a8f17507a6d53afaffc3e3f7ca0d22","abstract_canon_sha256":"821cd6cdda74ade0422027581f8fb011c16f48a82cdf15221ff0c1f429ee8a7e"},"schema_version":"1.0"},"canonical_sha256":"bfe97069ea3918d8896145a421fe5290f5126c67093eeea44182659cd5d3a51d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:50:00.989283Z","signature_b64":"iG+FWfet2qtDDC+z/JGFfmK/i0JuWtLe6uin34+HJQtoazOjyk4dQFF5AnHhirWm6faZQUFSq2jeY8BMhV5nCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bfe97069ea3918d8896145a421fe5290f5126c67093eeea44182659cd5d3a51d","last_reissued_at":"2026-07-05T09:50:00.988849Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:50:00.988849Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.02629","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:50:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3scFYwcgSO90pwi6C7h1ze9blV2O8wbVp7+myDXxXEd9GyKkXWNRPQ7vLAkGz+Vr0zZ+0NKrSXRdqqZbQFPnBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T09:05:53.252545Z"},"content_sha256":"1bf72d23ff9e0934563fa2b2169c49487e702951c9f4f2b8f7b5db24ab52be5f","schema_version":"1.0","event_id":"sha256:1bf72d23ff9e0934563fa2b2169c49487e702951c9f4f2b8f7b5db24ab52be5f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:X7UXA2PKHEMNRCLBIWSCD7SSSD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Carsten Gerner-Beuerle, Chen Feng, Ilija Bogunovic, Miguel Rodrigues, Zhuo Zhi, Ziquan Liu","submitted_at":"2024-02-04T22:45:20Z","abstract_excerpt":"It is widely known that state-of-the-art machine learning models, including vision and language models, can be seriously compromised by adversarial perturbations. It is therefore increasingly relevant to develop capabilities to certify their performance in the presence of the most effective adversarial attacks. Our paper offers a new approach to certify the performance of machine learning models in the presence of adversarial attacks with population level risk guarantees. In particular, we introduce the notion of $(\\alpha,\\zeta)$-safe machine learning model. We propose a hypothesis testing pro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.02629","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.02629/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:50:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Hx2TqSlMHBvZuoZa9WZe5Ld4f7CvGfUOQRfuJCBTf4pI4MPcZh0QpQRjDBj0qgGS9LqNsAN429Pa7L5W6rfwBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T09:05:53.253055Z"},"content_sha256":"99a0ed05510d42251f9ddf492fdcc55de051879e2b3169ed4254ef40be5fe117","schema_version":"1.0","event_id":"sha256:99a0ed05510d42251f9ddf492fdcc55de051879e2b3169ed4254ef40be5fe117"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/X7UXA2PKHEMNRCLBIWSCD7SSSD/bundle.json","state_url":"https://pith.science/pith/X7UXA2PKHEMNRCLBIWSCD7SSSD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/X7UXA2PKHEMNRCLBIWSCD7SSSD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T09:05:53Z","links":{"resolver":"https://pith.science/pith/X7UXA2PKHEMNRCLBIWSCD7SSSD","bundle":"https://pith.science/pith/X7UXA2PKHEMNRCLBIWSCD7SSSD/bundle.json","state":"https://pith.science/pith/X7UXA2PKHEMNRCLBIWSCD7SSSD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/X7UXA2PKHEMNRCLBIWSCD7SSSD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:X7UXA2PKHEMNRCLBIWSCD7SSSD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"821cd6cdda74ade0422027581f8fb011c16f48a82cdf15221ff0c1f429ee8a7e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-04T22:45:20Z","title_canon_sha256":"ac357aba0dffe3566b115892f4706e1704a8f17507a6d53afaffc3e3f7ca0d22"},"schema_version":"1.0","source":{"id":"2402.02629","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.02629","created_at":"2026-07-05T09:50:00Z"},{"alias_kind":"arxiv_version","alias_value":"2402.02629v2","created_at":"2026-07-05T09:50:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.02629","created_at":"2026-07-05T09:50:00Z"},{"alias_kind":"pith_short_12","alias_value":"X7UXA2PKHEMN","created_at":"2026-07-05T09:50:00Z"},{"alias_kind":"pith_short_16","alias_value":"X7UXA2PKHEMNRCLB","created_at":"2026-07-05T09:50:00Z"},{"alias_kind":"pith_short_8","alias_value":"X7UXA2PK","created_at":"2026-07-05T09:50:00Z"}],"graph_snapshots":[{"event_id":"sha256:99a0ed05510d42251f9ddf492fdcc55de051879e2b3169ed4254ef40be5fe117","target":"graph","created_at":"2026-07-05T09:50:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.02629/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"It is widely known that state-of-the-art machine learning models, including vision and language models, can be seriously compromised by adversarial perturbations. It is therefore increasingly relevant to develop capabilities to certify their performance in the presence of the most effective adversarial attacks. Our paper offers a new approach to certify the performance of machine learning models in the presence of adversarial attacks with population level risk guarantees. In particular, we introduce the notion of $(\\alpha,\\zeta)$-safe machine learning model. We propose a hypothesis testing pro","authors_text":"Carsten Gerner-Beuerle, Chen Feng, Ilija Bogunovic, Miguel Rodrigues, Zhuo Zhi, Ziquan Liu","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-04T22:45:20Z","title":"PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.02629","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1bf72d23ff9e0934563fa2b2169c49487e702951c9f4f2b8f7b5db24ab52be5f","target":"record","created_at":"2026-07-05T09:50:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"821cd6cdda74ade0422027581f8fb011c16f48a82cdf15221ff0c1f429ee8a7e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-02-04T22:45:20Z","title_canon_sha256":"ac357aba0dffe3566b115892f4706e1704a8f17507a6d53afaffc3e3f7ca0d22"},"schema_version":"1.0","source":{"id":"2402.02629","kind":"arxiv","version":2}},"canonical_sha256":"bfe97069ea3918d8896145a421fe5290f5126c67093eeea44182659cd5d3a51d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bfe97069ea3918d8896145a421fe5290f5126c67093eeea44182659cd5d3a51d","first_computed_at":"2026-07-05T09:50:00.988849Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:50:00.988849Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"iG+FWfet2qtDDC+z/JGFfmK/i0JuWtLe6uin34+HJQtoazOjyk4dQFF5AnHhirWm6faZQUFSq2jeY8BMhV5nCg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:50:00.989283Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.02629","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1bf72d23ff9e0934563fa2b2169c49487e702951c9f4f2b8f7b5db24ab52be5f","sha256:99a0ed05510d42251f9ddf492fdcc55de051879e2b3169ed4254ef40be5fe117"],"state_sha256":"7d4d8420717ba0c6d6e21d765d569a4b0a13414194e8c149dfebda650d928795"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UJa4aZwvdwqy5VZvltVawNCFH978Vt4Cm84ppk068UTIzqRHo0fr/lQy2q78EKNAilXUYOqhip8UefxJs0LGAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T09:05:53.257015Z","bundle_sha256":"e6bd0546e20b6f93170e2900c08f510ae189f89c31de10af15a57afdc74be7d8"}}