{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:XBMNN6OL6VR5X6UTJGFYLWBTEH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7a7608e9f8cf3ea1eae3fd631caa1e5766c831506440ed9799a646601382e62a","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-27T19:19:32Z","title_canon_sha256":"3eec82a940af8f6008a5765e81ef11c7ef8964512492360982c279850466ab61"},"schema_version":"1.0","source":{"id":"2002.12398","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.12398","created_at":"2026-07-05T03:31:51Z"},{"alias_kind":"arxiv_version","alias_value":"2002.12398v5","created_at":"2026-07-05T03:31:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.12398","created_at":"2026-07-05T03:31:51Z"},{"alias_kind":"pith_short_12","alias_value":"XBMNN6OL6VR5","created_at":"2026-07-05T03:31:51Z"},{"alias_kind":"pith_short_16","alias_value":"XBMNN6OL6VR5X6UT","created_at":"2026-07-05T03:31:51Z"},{"alias_kind":"pith_short_8","alias_value":"XBMNN6OL","created_at":"2026-07-05T03:31:51Z"}],"graph_snapshots":[{"event_id":"sha256:893e4bfb324d0412832c5b179be3c215d067775f5ad41327c0756b3aae9cad38","target":"graph","created_at":"2026-07-05T03:31:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.12398/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As machine learning (ML) systems become pervasive, safeguarding their security is critical. However, recently it has been demonstrated that motivated adversaries are able to mislead ML systems by perturbing test data using semantic transformations. While there exists a rich body of research providing provable robustness guarantees for ML models against $\\ell_p$ norm bounded adversarial perturbations, guarantees against semantic perturbations remain largely underexplored. In this paper, we provide TSS -- a unified framework for certifying ML robustness against general adversarial semantic trans","authors_text":"Bhavya Kailkhura, Bo Li, Ce Zhang, Linyi Li, Luka Rimanic, Maurice Weber, Tao Xie, Xiaojun Xu","cross_cats":["cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-27T19:19:32Z","title":"TSS: Transformation-Specific Smoothing for Robustness Certification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.12398","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d545c5afdb464f55be797a3ef14303bfc84bc219714372fa05f2c0700833764e","target":"record","created_at":"2026-07-05T03:31:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7a7608e9f8cf3ea1eae3fd631caa1e5766c831506440ed9799a646601382e62a","cross_cats_sorted":["cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-02-27T19:19:32Z","title_canon_sha256":"3eec82a940af8f6008a5765e81ef11c7ef8964512492360982c279850466ab61"},"schema_version":"1.0","source":{"id":"2002.12398","kind":"arxiv","version":5}},"canonical_sha256":"b858d6f9cbf563dbfa93498b85d83321c0c36f7a39d29760a2004e95b4bb8ddd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b858d6f9cbf563dbfa93498b85d83321c0c36f7a39d29760a2004e95b4bb8ddd","first_computed_at":"2026-07-05T03:31:51.930122Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:31:51.930122Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ySLpQqGtmP39L6B0xxMeckIMu4PHbD4mA8Cq62EpMk3vzKMi3BxMGBsQDzpTRxmo32+L138C8ls0tvlLXYYjBA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:31:51.930637Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.12398","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d545c5afdb464f55be797a3ef14303bfc84bc219714372fa05f2c0700833764e","sha256:893e4bfb324d0412832c5b179be3c215d067775f5ad41327c0756b3aae9cad38"],"state_sha256":"79e112b009cb98fd3970dd835279f9f40d2a28694b141338e006692e058d4edb"}