{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:XOFKHJP6XL5QEVLZJJWF36PP4W","short_pith_number":"pith:XOFKHJP6","canonical_record":{"source":{"id":"2302.08051","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-16T03:18:43Z","cross_cats_sorted":["cs.CR","cs.SI"],"title_canon_sha256":"8d7a615fe671c79b85ba73ae2b41600049838665d66809b767e5dda7942ba017","abstract_canon_sha256":"d70966679670b37c83a8c5a9d62040a58ae95254d53c7144aef4bacffa706d71"},"schema_version":"1.0"},"canonical_sha256":"bb8aa3a5febafb0255794a6c5df9efe5822f61f0da2ef77cb2c2f3f37af2b1e1","source":{"kind":"arxiv","id":"2302.08051","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.08051","created_at":"2026-07-05T06:53:34Z"},{"alias_kind":"arxiv_version","alias_value":"2302.08051v2","created_at":"2026-07-05T06:53:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.08051","created_at":"2026-07-05T06:53:34Z"},{"alias_kind":"pith_short_12","alias_value":"XOFKHJP6XL5Q","created_at":"2026-07-05T06:53:34Z"},{"alias_kind":"pith_short_16","alias_value":"XOFKHJP6XL5QEVLZ","created_at":"2026-07-05T06:53:34Z"},{"alias_kind":"pith_short_8","alias_value":"XOFKHJP6","created_at":"2026-07-05T06:53:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:XOFKHJP6XL5QEVLZJJWF36PP4W","target":"record","payload":{"canonical_record":{"source":{"id":"2302.08051","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-16T03:18:43Z","cross_cats_sorted":["cs.CR","cs.SI"],"title_canon_sha256":"8d7a615fe671c79b85ba73ae2b41600049838665d66809b767e5dda7942ba017","abstract_canon_sha256":"d70966679670b37c83a8c5a9d62040a58ae95254d53c7144aef4bacffa706d71"},"schema_version":"1.0"},"canonical_sha256":"bb8aa3a5febafb0255794a6c5df9efe5822f61f0da2ef77cb2c2f3f37af2b1e1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:53:34.448537Z","signature_b64":"VmbISwi2VPmSzNY+qeGi5slb5B06RrKRAW38bVDntj+0wt4ouZegUxxyrB75KblGsxp2Qi0T/7NvSeKN8OqDCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bb8aa3a5febafb0255794a6c5df9efe5822f61f0da2ef77cb2c2f3f37af2b1e1","last_reissued_at":"2026-07-05T06:53:34.448071Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:53:34.448071Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2302.08051","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:53:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1S0HMxbqUjIocqSXC10xxWs3YifGcJgxyhYvyokvafooBPbyJEuSBHDNSHH0sDg5TX7YxEN6ZMWAPylkYG46BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T10:05:32.548231Z"},"content_sha256":"df949832607eae43e090df63d94fa012a8cfe85172faaea0347ef7bfd67efe32","schema_version":"1.0","event_id":"sha256:df949832607eae43e090df63d94fa012a8cfe85172faaea0347ef7bfd67efe32"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:XOFKHJP6XL5QEVLZJJWF36PP4W","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Graph Adversarial Immunization for Certifiable Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.SI"],"primary_cat":"cs.LG","authors_text":"Huawei Shen, Liang Hou, Qi Cao, Shuchang Tao, Xueqi Cheng, Yunfan Wu","submitted_at":"2023-02-16T03:18:43Z","abstract_excerpt":"Despite achieving great success, graph neural networks (GNNs) are vulnerable to adversarial attacks. Existing defenses focus on developing adversarial training or model modification. In this paper, we propose and formulate graph adversarial immunization, i.e., vaccinating part of graph structure to improve certifiable robustness of graph against any admissible adversarial attack. We first propose edge-level immunization to vaccinate node pairs. Unfortunately, such edge-level immunization cannot defend against emerging node injection attacks, since it only immunizes existing node pairs. To this"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.08051","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.08051/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:53:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/CSdfAeETJKl3ZF//GGrJQ7IJNOq+t8S270Js//o/BMtSJ0GAp78lhrcuejcuDp5f+Y4K5gRLXMnZQzDztjBCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T10:05:32.548799Z"},"content_sha256":"cd527f5788783d879b68a1de9a535f10fe0e4c2bcb2b7416772a13e50f7487db","schema_version":"1.0","event_id":"sha256:cd527f5788783d879b68a1de9a535f10fe0e4c2bcb2b7416772a13e50f7487db"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W/bundle.json","state_url":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XOFKHJP6XL5QEVLZJJWF36PP4W/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T10:05:32Z","links":{"resolver":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W","bundle":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W/bundle.json","state":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XOFKHJP6XL5QEVLZJJWF36PP4W/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:XOFKHJP6XL5QEVLZJJWF36PP4W","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d70966679670b37c83a8c5a9d62040a58ae95254d53c7144aef4bacffa706d71","cross_cats_sorted":["cs.CR","cs.SI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-16T03:18:43Z","title_canon_sha256":"8d7a615fe671c79b85ba73ae2b41600049838665d66809b767e5dda7942ba017"},"schema_version":"1.0","source":{"id":"2302.08051","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.08051","created_at":"2026-07-05T06:53:34Z"},{"alias_kind":"arxiv_version","alias_value":"2302.08051v2","created_at":"2026-07-05T06:53:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.08051","created_at":"2026-07-05T06:53:34Z"},{"alias_kind":"pith_short_12","alias_value":"XOFKHJP6XL5Q","created_at":"2026-07-05T06:53:34Z"},{"alias_kind":"pith_short_16","alias_value":"XOFKHJP6XL5QEVLZ","created_at":"2026-07-05T06:53:34Z"},{"alias_kind":"pith_short_8","alias_value":"XOFKHJP6","created_at":"2026-07-05T06:53:34Z"}],"graph_snapshots":[{"event_id":"sha256:cd527f5788783d879b68a1de9a535f10fe0e4c2bcb2b7416772a13e50f7487db","target":"graph","created_at":"2026-07-05T06:53:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.08051/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite achieving great success, graph neural networks (GNNs) are vulnerable to adversarial attacks. Existing defenses focus on developing adversarial training or model modification. In this paper, we propose and formulate graph adversarial immunization, i.e., vaccinating part of graph structure to improve certifiable robustness of graph against any admissible adversarial attack. We first propose edge-level immunization to vaccinate node pairs. Unfortunately, such edge-level immunization cannot defend against emerging node injection attacks, since it only immunizes existing node pairs. To this","authors_text":"Huawei Shen, Liang Hou, Qi Cao, Shuchang Tao, Xueqi Cheng, Yunfan Wu","cross_cats":["cs.CR","cs.SI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-16T03:18:43Z","title":"Graph Adversarial Immunization for Certifiable Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.08051","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:df949832607eae43e090df63d94fa012a8cfe85172faaea0347ef7bfd67efe32","target":"record","created_at":"2026-07-05T06:53:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d70966679670b37c83a8c5a9d62040a58ae95254d53c7144aef4bacffa706d71","cross_cats_sorted":["cs.CR","cs.SI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-16T03:18:43Z","title_canon_sha256":"8d7a615fe671c79b85ba73ae2b41600049838665d66809b767e5dda7942ba017"},"schema_version":"1.0","source":{"id":"2302.08051","kind":"arxiv","version":2}},"canonical_sha256":"bb8aa3a5febafb0255794a6c5df9efe5822f61f0da2ef77cb2c2f3f37af2b1e1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bb8aa3a5febafb0255794a6c5df9efe5822f61f0da2ef77cb2c2f3f37af2b1e1","first_computed_at":"2026-07-05T06:53:34.448071Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:53:34.448071Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VmbISwi2VPmSzNY+qeGi5slb5B06RrKRAW38bVDntj+0wt4ouZegUxxyrB75KblGsxp2Qi0T/7NvSeKN8OqDCA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:53:34.448537Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.08051","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:df949832607eae43e090df63d94fa012a8cfe85172faaea0347ef7bfd67efe32","sha256:cd527f5788783d879b68a1de9a535f10fe0e4c2bcb2b7416772a13e50f7487db"],"state_sha256":"22c564e038bd728ccc8955a8cc7a67eba49878c2a451e9b7ef54687e146eaa4d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6ybztWgvEkymN9LaDJSYW1gyE5ojm7g/iohS7lSo/lkXQyC2TgfW/DJxaWdw6HWad1ksQsif85bIGuh87WtPAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T10:05:32.553036Z","bundle_sha256":"9cdf442e96e581c5907f37e1da805b1bc9829b28a1fd1beddea309b9c138d068"}}