{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:XY5W3TYOUIZITL5W33J5W7IJCI","short_pith_number":"pith:XY5W3TYO","canonical_record":{"source":{"id":"2202.07342","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-15T12:02:59Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c0b55e6c2417b2c9882b371159c931436627f6c8fc9463afa86c2684dafdc210","abstract_canon_sha256":"3e3d36f41fef7746c7b696dcc4607cde02858e622f230b3b637058fefa40556a"},"schema_version":"1.0"},"canonical_sha256":"be3b6dcf0ea23289afb6ded3db7d09120e6852fd667389432fa8e9ecf497c266","source":{"kind":"arxiv","id":"2202.07342","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.07342","created_at":"2026-07-05T04:23:24Z"},{"alias_kind":"arxiv_version","alias_value":"2202.07342v2","created_at":"2026-07-05T04:23:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.07342","created_at":"2026-07-05T04:23:24Z"},{"alias_kind":"pith_short_12","alias_value":"XY5W3TYOUIZI","created_at":"2026-07-05T04:23:24Z"},{"alias_kind":"pith_short_16","alias_value":"XY5W3TYOUIZITL5W","created_at":"2026-07-05T04:23:24Z"},{"alias_kind":"pith_short_8","alias_value":"XY5W3TYO","created_at":"2026-07-05T04:23:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:XY5W3TYOUIZITL5W33J5W7IJCI","target":"record","payload":{"canonical_record":{"source":{"id":"2202.07342","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-15T12:02:59Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c0b55e6c2417b2c9882b371159c931436627f6c8fc9463afa86c2684dafdc210","abstract_canon_sha256":"3e3d36f41fef7746c7b696dcc4607cde02858e622f230b3b637058fefa40556a"},"schema_version":"1.0"},"canonical_sha256":"be3b6dcf0ea23289afb6ded3db7d09120e6852fd667389432fa8e9ecf497c266","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:23:24.588829Z","signature_b64":"zSuS3eiuBw8LEtitPT08YmAKQZ4P94tgvYy+Dbuvz7pD3dHTnyDEh8QV1Q1T2LhOb2nz4J2gMzqAVHsV2+qxAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"be3b6dcf0ea23289afb6ded3db7d09120e6852fd667389432fa8e9ecf497c266","last_reissued_at":"2026-07-05T04:23:24.588331Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:23:24.588331Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.07342","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:23:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"a+V8D1Ks8G/amIuwBpel7P9heE9t2ZfUYhjG43wotS8sLfSPFlkVg86cxASO91/a2yMSfB4ocLlD5cVX+EGSBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-20T14:53:17.161527Z"},"content_sha256":"2d15788b4c2d9df397019d559baf50a9a97657ce4180ed953b7bcef05ddfc93e","schema_version":"1.0","event_id":"sha256:2d15788b4c2d9df397019d559baf50a9a97657ce4180ed953b7bcef05ddfc93e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:XY5W3TYOUIZITL5W33J5W7IJCI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Unreasonable Effectiveness of Last Hidden Layer Activations for Adversarial Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Ferhat Ozgur Catak, M. Taner Eskil, Omer Faruk Tuna","submitted_at":"2022-02-15T12:02:59Z","abstract_excerpt":"In standard Deep Neural Network (DNN) based classifiers, the general convention is to omit the activation function in the last (output) layer and directly apply the softmax function on the logits to get the probability scores of each class. In this type of architectures, the loss value of the classifier against any output class is directly proportional to the difference between the final probability score and the label value of the associated class. Standard White-box adversarial evasion attacks, whether targeted or untargeted, mainly try to exploit the gradient of the model loss function to c"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.07342","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.07342/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:23:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3EdAzJlwqU4vZuPywuS5KSbJMEITLCj8KCf/kXwwdB/DPvJD58NO5qC0rRwaXDFv57QZMa3pcX7l23bLVN6rCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-20T14:53:17.161917Z"},"content_sha256":"478be57c618c43bb8ec57b7d579a7da7a73cd2836c02e61c76ace84cd0597239","schema_version":"1.0","event_id":"sha256:478be57c618c43bb8ec57b7d579a7da7a73cd2836c02e61c76ace84cd0597239"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XY5W3TYOUIZITL5W33J5W7IJCI/bundle.json","state_url":"https://pith.science/pith/XY5W3TYOUIZITL5W33J5W7IJCI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XY5W3TYOUIZITL5W33J5W7IJCI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-20T14:53:17Z","links":{"resolver":"https://pith.science/pith/XY5W3TYOUIZITL5W33J5W7IJCI","bundle":"https://pith.science/pith/XY5W3TYOUIZITL5W33J5W7IJCI/bundle.json","state":"https://pith.science/pith/XY5W3TYOUIZITL5W33J5W7IJCI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XY5W3TYOUIZITL5W33J5W7IJCI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:XY5W3TYOUIZITL5W33J5W7IJCI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3e3d36f41fef7746c7b696dcc4607cde02858e622f230b3b637058fefa40556a","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-15T12:02:59Z","title_canon_sha256":"c0b55e6c2417b2c9882b371159c931436627f6c8fc9463afa86c2684dafdc210"},"schema_version":"1.0","source":{"id":"2202.07342","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.07342","created_at":"2026-07-05T04:23:24Z"},{"alias_kind":"arxiv_version","alias_value":"2202.07342v2","created_at":"2026-07-05T04:23:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.07342","created_at":"2026-07-05T04:23:24Z"},{"alias_kind":"pith_short_12","alias_value":"XY5W3TYOUIZI","created_at":"2026-07-05T04:23:24Z"},{"alias_kind":"pith_short_16","alias_value":"XY5W3TYOUIZITL5W","created_at":"2026-07-05T04:23:24Z"},{"alias_kind":"pith_short_8","alias_value":"XY5W3TYO","created_at":"2026-07-05T04:23:24Z"}],"graph_snapshots":[{"event_id":"sha256:478be57c618c43bb8ec57b7d579a7da7a73cd2836c02e61c76ace84cd0597239","target":"graph","created_at":"2026-07-05T04:23:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.07342/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In standard Deep Neural Network (DNN) based classifiers, the general convention is to omit the activation function in the last (output) layer and directly apply the softmax function on the logits to get the probability scores of each class. In this type of architectures, the loss value of the classifier against any output class is directly proportional to the difference between the final probability score and the label value of the associated class. Standard White-box adversarial evasion attacks, whether targeted or untargeted, mainly try to exploit the gradient of the model loss function to c","authors_text":"Ferhat Ozgur Catak, M. Taner Eskil, Omer Faruk Tuna","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-15T12:02:59Z","title":"Unreasonable Effectiveness of Last Hidden Layer Activations for Adversarial Robustness"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.07342","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2d15788b4c2d9df397019d559baf50a9a97657ce4180ed953b7bcef05ddfc93e","target":"record","created_at":"2026-07-05T04:23:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3e3d36f41fef7746c7b696dcc4607cde02858e622f230b3b637058fefa40556a","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-15T12:02:59Z","title_canon_sha256":"c0b55e6c2417b2c9882b371159c931436627f6c8fc9463afa86c2684dafdc210"},"schema_version":"1.0","source":{"id":"2202.07342","kind":"arxiv","version":2}},"canonical_sha256":"be3b6dcf0ea23289afb6ded3db7d09120e6852fd667389432fa8e9ecf497c266","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"be3b6dcf0ea23289afb6ded3db7d09120e6852fd667389432fa8e9ecf497c266","first_computed_at":"2026-07-05T04:23:24.588331Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:23:24.588331Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zSuS3eiuBw8LEtitPT08YmAKQZ4P94tgvYy+Dbuvz7pD3dHTnyDEh8QV1Q1T2LhOb2nz4J2gMzqAVHsV2+qxAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:23:24.588829Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.07342","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2d15788b4c2d9df397019d559baf50a9a97657ce4180ed953b7bcef05ddfc93e","sha256:478be57c618c43bb8ec57b7d579a7da7a73cd2836c02e61c76ace84cd0597239"],"state_sha256":"b042cfa68a186943fd2be85acea1df078221be182cf461c344bd2f022bf8e0a1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0XhyWQN73VTrvgdM7Y5CPYAphj4JSf9Bx8/wkzr8zTyRT+8ETJugqAmDuVizjzMLi0AbkHAizEBzZEln77LWBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-20T14:53:17.169553Z","bundle_sha256":"fb369c323e1daf645f6622ffff1b4fd728bf8324ff197ea8b742fbe11f378752"}}