{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:YEM54AE6TCCLSFT4H3AXUFNHVS","short_pith_number":"pith:YEM54AE6","canonical_record":{"source":{"id":"2605.01718","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-05-03T05:19:21Z","cross_cats_sorted":[],"title_canon_sha256":"a3eafba55ab20e3761e1ef2ed46c41dc642e0517f5d495928fe641883887d107","abstract_canon_sha256":"2717284d8b63be9c3a8cb78e96ce258203aaf12ba5b58065dc4d188369de3d5c"},"schema_version":"1.0"},"canonical_sha256":"c119de009e9884b9167c3ec17a15a7aca98237a2b57427ddddbb6fad07c266e7","source":{"kind":"arxiv","id":"2605.01718","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.01718","created_at":"2026-06-29T01:14:32Z"},{"alias_kind":"arxiv_version","alias_value":"2605.01718v2","created_at":"2026-06-29T01:14:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.01718","created_at":"2026-06-29T01:14:32Z"},{"alias_kind":"pith_short_12","alias_value":"YEM54AE6TCCL","created_at":"2026-06-29T01:14:32Z"},{"alias_kind":"pith_short_16","alias_value":"YEM54AE6TCCLSFT4","created_at":"2026-06-29T01:14:32Z"},{"alias_kind":"pith_short_8","alias_value":"YEM54AE6","created_at":"2026-06-29T01:14:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:YEM54AE6TCCLSFT4H3AXUFNHVS","target":"record","payload":{"canonical_record":{"source":{"id":"2605.01718","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-05-03T05:19:21Z","cross_cats_sorted":[],"title_canon_sha256":"a3eafba55ab20e3761e1ef2ed46c41dc642e0517f5d495928fe641883887d107","abstract_canon_sha256":"2717284d8b63be9c3a8cb78e96ce258203aaf12ba5b58065dc4d188369de3d5c"},"schema_version":"1.0"},"canonical_sha256":"c119de009e9884b9167c3ec17a15a7aca98237a2b57427ddddbb6fad07c266e7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-29T01:14:32.664642Z","signature_b64":"q5eQekWOscz8MKKqwNNCF7PWiTlM15ytSzMvgSDCAFJUepDxl8ADiXYhpqVJFDXBfWXiGL4SUvAVW7VRlBQfCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c119de009e9884b9167c3ec17a15a7aca98237a2b57427ddddbb6fad07c266e7","last_reissued_at":"2026-06-29T01:14:32.664231Z","signature_status":"signed_v1","first_computed_at":"2026-06-29T01:14:32.664231Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2605.01718","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-29T01:14:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"syPLVuUxMln0forHxx5aTjm7R73eG0v9I6ZIGdH90KhHEMUYbHd0pzl6/Oj6lGDaRtYVUzoHrlSCWNCUNyAuDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T13:09:47.952223Z"},"content_sha256":"32d6f71be759cd60ca85f4519b86fd3fc501a52ea8462610310d46fe1f372869","schema_version":"1.0","event_id":"sha256:32d6f71be759cd60ca85f4519b86fd3fc501a52ea8462610310d46fe1f372869"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:YEM54AE6TCCLSFT4H3AXUFNHVS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Dual-branch Robust Unlearnable Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"DUNE achieves robust unlearnability by separately optimizing perturbations in spatial and color domains.","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Changsong Jiang, Hangtao Zhang, Li Zeng, Wenbo Pan, Xianlong Wang, Xiaohua Jia, Ziqi Zhou","submitted_at":"2026-05-03T05:19:21Z","abstract_excerpt":"Unlearnable examples (UEs) aim to compromise model training by injecting imperceptible perturbations to clean samples. However, existing UE schemes exhibit limited robustness against advanced defenses due to their heuristic design or narrowly scoped domain perturbations. To address this, we propose \\texttt{DUNE}, a \\underline{\\textbf{D}}ual-branch \\underline{\\textbf{UN}}learnable \\underline{\\textbf{E}}nsemble perturbation optimization approach. Specifically, \\texttt{DUNE} separately optimizes perturbations in the spatial and color domains to establish the mapping between perturbations and shif"},"claims":{"count":4,"items":[{"kind":"strongest_claim","text":"DUNE separately optimizes perturbations in the spatial and color domains to establish the mapping between perturbations and shift-induced labels... DUNE's robustness outperforms 12 SOTA UE schemes under 7 mainstream defenses, yielding a lower average test accuracy of 14.95% to 50.82%.","source":"verdict.strongest_claim","status":"machine_extracted","claim_id":"C1","attestation":"unclaimed"},{"kind":"weakest_assumption","text":"That dual-branch optimization in spatial and color domains combined with ensemble aggregation will reliably increase noise intensity, drive models to learn perturbation-oriented features, and maintain unlearnability against advanced defenses without introducing exploitable weaknesses.","source":"verdict.weakest_assumption","status":"machine_extracted","claim_id":"C2","attestation":"unclaimed"},{"kind":"one_line_summary","text":"DUNE creates robust unlearnable examples through dual-branch spatial-color perturbation optimization and ensemble strategies, achieving lower average test accuracies of 14.95% to 50.82% than 12 prior methods against 7 defenses on CIFAR-10 and ImageNet.","source":"verdict.one_line_summary","status":"machine_extracted","claim_id":"C3","attestation":"unclaimed"},{"kind":"headline","text":"DUNE achieves robust unlearnability by separately optimizing perturbations in spatial and color domains.","source":"verdict.pith_extraction.headline","status":"machine_extracted","claim_id":"C4","attestation":"unclaimed"}],"snapshot_sha256":"605d9163cffdf323e05c6971075c4ac1a7e3c3c9e14d6b129082b14136c2c991"},"source":{"id":"2605.01718","kind":"arxiv","version":2},"verdict":{"id":"772cd107-0e8b-48c1-b150-b1d81dd7d50b","model_set":{"reader":"grok-4.3"},"created_at":"2026-05-10T15:44:59.165655Z","strongest_claim":"DUNE separately optimizes perturbations in the spatial and color domains to establish the mapping between perturbations and shift-induced labels... DUNE's robustness outperforms 12 SOTA UE schemes under 7 mainstream defenses, yielding a lower average test accuracy of 14.95% to 50.82%.","one_line_summary":"DUNE creates robust unlearnable examples through dual-branch spatial-color perturbation optimization and ensemble strategies, achieving lower average test accuracies of 14.95% to 50.82% than 12 prior methods against 7 defenses on CIFAR-10 and ImageNet.","pipeline_version":"pith-pipeline@v0.9.0","weakest_assumption":"That dual-branch optimization in spatial and color domains combined with ensemble aggregation will reliably increase noise intensity, drive models to learn perturbation-oriented features, and maintain unlearnability against advanced defenses without introducing exploitable weaknesses.","pith_extraction_headline":"DUNE achieves robust unlearnability by separately optimizing perturbations in spatial and color domains."},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2605.01718/integrity.json","findings":[],"available":true,"detectors_run":[{"name":"ai_meta_artifact","ran_at":"2026-05-20T17:37:44.538219Z","status":"completed","version":"1.0.0","findings_count":0},{"name":"doi_title_agreement","ran_at":"2026-05-20T05:01:23.199622Z","status":"completed","version":"1.0.0","findings_count":0},{"name":"doi_compliance","ran_at":"2026-05-19T17:00:52.671119Z","status":"completed","version":"1.0.0","findings_count":0}],"snapshot_sha256":"87e4a39f3853ca6525619ff040e9e9776ead1799b34890873beeb59d26f9547e"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":2,"snapshot_sha256":"3753e80b9eada50f13ba9cfea89e750ef08881a541089b95d75d21cc95facdee"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":"772cd107-0e8b-48c1-b150-b1d81dd7d50b"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-29T01:14:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m+GPvDFN2/31rmlNpNBLkvdTAc6/QOMRNss7yaz5SoDrJK9WrZBFsSwuexGSaoSQ/u/QWDzIkYpgjraWeXjpAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T13:09:47.952725Z"},"content_sha256":"2957fa4fa060b7473e76cba4288a07047297d3ad749b8c504ec3aef7e8139e9e","schema_version":"1.0","event_id":"sha256:2957fa4fa060b7473e76cba4288a07047297d3ad749b8c504ec3aef7e8139e9e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS/bundle.json","state_url":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YEM54AE6TCCLSFT4H3AXUFNHVS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-17T13:09:47Z","links":{"resolver":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS","bundle":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS/bundle.json","state":"https://pith.science/pith/YEM54AE6TCCLSFT4H3AXUFNHVS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YEM54AE6TCCLSFT4H3AXUFNHVS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:YEM54AE6TCCLSFT4H3AXUFNHVS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2717284d8b63be9c3a8cb78e96ce258203aaf12ba5b58065dc4d188369de3d5c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-05-03T05:19:21Z","title_canon_sha256":"a3eafba55ab20e3761e1ef2ed46c41dc642e0517f5d495928fe641883887d107"},"schema_version":"1.0","source":{"id":"2605.01718","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.01718","created_at":"2026-06-29T01:14:32Z"},{"alias_kind":"arxiv_version","alias_value":"2605.01718v2","created_at":"2026-06-29T01:14:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.01718","created_at":"2026-06-29T01:14:32Z"},{"alias_kind":"pith_short_12","alias_value":"YEM54AE6TCCL","created_at":"2026-06-29T01:14:32Z"},{"alias_kind":"pith_short_16","alias_value":"YEM54AE6TCCLSFT4","created_at":"2026-06-29T01:14:32Z"},{"alias_kind":"pith_short_8","alias_value":"YEM54AE6","created_at":"2026-06-29T01:14:32Z"}],"graph_snapshots":[{"event_id":"sha256:2957fa4fa060b7473e76cba4288a07047297d3ad749b8c504ec3aef7e8139e9e","target":"graph","created_at":"2026-06-29T01:14:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":4,"items":[{"attestation":"unclaimed","claim_id":"C1","kind":"strongest_claim","source":"verdict.strongest_claim","status":"machine_extracted","text":"DUNE separately optimizes perturbations in the spatial and color domains to establish the mapping between perturbations and shift-induced labels... DUNE's robustness outperforms 12 SOTA UE schemes under 7 mainstream defenses, yielding a lower average test accuracy of 14.95% to 50.82%."},{"attestation":"unclaimed","claim_id":"C2","kind":"weakest_assumption","source":"verdict.weakest_assumption","status":"machine_extracted","text":"That dual-branch optimization in spatial and color domains combined with ensemble aggregation will reliably increase noise intensity, drive models to learn perturbation-oriented features, and maintain unlearnability against advanced defenses without introducing exploitable weaknesses."},{"attestation":"unclaimed","claim_id":"C3","kind":"one_line_summary","source":"verdict.one_line_summary","status":"machine_extracted","text":"DUNE creates robust unlearnable examples through dual-branch spatial-color perturbation optimization and ensemble strategies, achieving lower average test accuracies of 14.95% to 50.82% than 12 prior methods against 7 defenses on CIFAR-10 and ImageNet."},{"attestation":"unclaimed","claim_id":"C4","kind":"headline","source":"verdict.pith_extraction.headline","status":"machine_extracted","text":"DUNE achieves robust unlearnability by separately optimizing perturbations in spatial and color domains."}],"snapshot_sha256":"605d9163cffdf323e05c6971075c4ac1a7e3c3c9e14d6b129082b14136c2c991"},"formal_canon":{"evidence_count":2,"snapshot_sha256":"3753e80b9eada50f13ba9cfea89e750ef08881a541089b95d75d21cc95facdee"},"integrity":{"available":true,"clean":true,"detectors_run":[{"findings_count":0,"name":"ai_meta_artifact","ran_at":"2026-05-20T17:37:44.538219Z","status":"completed","version":"1.0.0"},{"findings_count":0,"name":"doi_title_agreement","ran_at":"2026-05-20T05:01:23.199622Z","status":"completed","version":"1.0.0"},{"findings_count":0,"name":"doi_compliance","ran_at":"2026-05-19T17:00:52.671119Z","status":"completed","version":"1.0.0"}],"endpoint":"/pith/2605.01718/integrity.json","findings":[],"snapshot_sha256":"87e4a39f3853ca6525619ff040e9e9776ead1799b34890873beeb59d26f9547e","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Unlearnable examples (UEs) aim to compromise model training by injecting imperceptible perturbations to clean samples. However, existing UE schemes exhibit limited robustness against advanced defenses due to their heuristic design or narrowly scoped domain perturbations. To address this, we propose \\texttt{DUNE}, a \\underline{\\textbf{D}}ual-branch \\underline{\\textbf{UN}}learnable \\underline{\\textbf{E}}nsemble perturbation optimization approach. Specifically, \\texttt{DUNE} separately optimizes perturbations in the spatial and color domains to establish the mapping between perturbations and shif","authors_text":"Changsong Jiang, Hangtao Zhang, Li Zeng, Wenbo Pan, Xianlong Wang, Xiaohua Jia, Ziqi Zhou","cross_cats":[],"headline":"DUNE achieves robust unlearnability by separately optimizing perturbations in spatial and color domains.","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-05-03T05:19:21Z","title":"Dual-branch Robust Unlearnable Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.01718","kind":"arxiv","version":2},"verdict":{"created_at":"2026-05-10T15:44:59.165655Z","id":"772cd107-0e8b-48c1-b150-b1d81dd7d50b","model_set":{"reader":"grok-4.3"},"one_line_summary":"DUNE creates robust unlearnable examples through dual-branch spatial-color perturbation optimization and ensemble strategies, achieving lower average test accuracies of 14.95% to 50.82% than 12 prior methods against 7 defenses on CIFAR-10 and ImageNet.","pipeline_version":"pith-pipeline@v0.9.0","pith_extraction_headline":"DUNE achieves robust unlearnability by separately optimizing perturbations in spatial and color domains.","strongest_claim":"DUNE separately optimizes perturbations in the spatial and color domains to establish the mapping between perturbations and shift-induced labels... DUNE's robustness outperforms 12 SOTA UE schemes under 7 mainstream defenses, yielding a lower average test accuracy of 14.95% to 50.82%.","weakest_assumption":"That dual-branch optimization in spatial and color domains combined with ensemble aggregation will reliably increase noise intensity, drive models to learn perturbation-oriented features, and maintain unlearnability against advanced defenses without introducing exploitable weaknesses."}},"verdict_id":"772cd107-0e8b-48c1-b150-b1d81dd7d50b"}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:32d6f71be759cd60ca85f4519b86fd3fc501a52ea8462610310d46fe1f372869","target":"record","created_at":"2026-06-29T01:14:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2717284d8b63be9c3a8cb78e96ce258203aaf12ba5b58065dc4d188369de3d5c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2026-05-03T05:19:21Z","title_canon_sha256":"a3eafba55ab20e3761e1ef2ed46c41dc642e0517f5d495928fe641883887d107"},"schema_version":"1.0","source":{"id":"2605.01718","kind":"arxiv","version":2}},"canonical_sha256":"c119de009e9884b9167c3ec17a15a7aca98237a2b57427ddddbb6fad07c266e7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c119de009e9884b9167c3ec17a15a7aca98237a2b57427ddddbb6fad07c266e7","first_computed_at":"2026-06-29T01:14:32.664231Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-29T01:14:32.664231Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"q5eQekWOscz8MKKqwNNCF7PWiTlM15ytSzMvgSDCAFJUepDxl8ADiXYhpqVJFDXBfWXiGL4SUvAVW7VRlBQfCA==","signature_status":"signed_v1","signed_at":"2026-06-29T01:14:32.664642Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.01718","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:32d6f71be759cd60ca85f4519b86fd3fc501a52ea8462610310d46fe1f372869","sha256:2957fa4fa060b7473e76cba4288a07047297d3ad749b8c504ec3aef7e8139e9e"],"state_sha256":"b1f0c36165bb622e45318a3fa7b46cf1fb0479301f28dec0f217674fc3c7049c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"o/OV8oUW0nIKG5pN2nu3ZZJa3DEOJYNFMGrHKZV3vuYqwBDqt35CTba+kpCKTQgl4MTrgXxePyCS5ijDR8AbAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-17T13:09:47.955404Z","bundle_sha256":"2a19503681daddfa8b2d4cd380038909b9048a515ece93a412c8a81a2c2e1178"}}