{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:YQMFU6P3LX4ZGJ5RTR5LKPMBIP","short_pith_number":"pith:YQMFU6P3","canonical_record":{"source":{"id":"2405.06361","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-05-10T09:56:02Z","cross_cats_sorted":[],"title_canon_sha256":"b13b11c2818d61d80771ed28eeafc635d4850d030a05e9be43be9b286257f700","abstract_canon_sha256":"91d747986367c0e8fd3397131abd35267b09e3404660f7b631dd26b938d429fb"},"schema_version":"1.0"},"canonical_sha256":"c4185a79fb5df99327b19c7ab53d8143d4e852fb82006c95ea02d153fe48a9dc","source":{"kind":"arxiv","id":"2405.06361","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.06361","created_at":"2026-07-05T08:17:40Z"},{"alias_kind":"arxiv_version","alias_value":"2405.06361v1","created_at":"2026-07-05T08:17:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.06361","created_at":"2026-07-05T08:17:40Z"},{"alias_kind":"pith_short_12","alias_value":"YQMFU6P3LX4Z","created_at":"2026-07-05T08:17:40Z"},{"alias_kind":"pith_short_16","alias_value":"YQMFU6P3LX4ZGJ5R","created_at":"2026-07-05T08:17:40Z"},{"alias_kind":"pith_short_8","alias_value":"YQMFU6P3","created_at":"2026-07-05T08:17:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:YQMFU6P3LX4ZGJ5RTR5LKPMBIP","target":"record","payload":{"canonical_record":{"source":{"id":"2405.06361","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-05-10T09:56:02Z","cross_cats_sorted":[],"title_canon_sha256":"b13b11c2818d61d80771ed28eeafc635d4850d030a05e9be43be9b286257f700","abstract_canon_sha256":"91d747986367c0e8fd3397131abd35267b09e3404660f7b631dd26b938d429fb"},"schema_version":"1.0"},"canonical_sha256":"c4185a79fb5df99327b19c7ab53d8143d4e852fb82006c95ea02d153fe48a9dc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:17:40.461522Z","signature_b64":"VRn9LupwjtKBqc3VcLuS4vxPoWX6PZi6/ArgWi1CuhutMR85ECPtQvrTPvFnUYc1yxxf0VPxmI72HnIaR8o6CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c4185a79fb5df99327b19c7ab53d8143d4e852fb82006c95ea02d153fe48a9dc","last_reissued_at":"2026-07-05T08:17:40.460981Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:17:40.460981Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.06361","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:17:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8uoa6lFPvi/zExMIIusB3/D0F5YMLQWhzdhXb+ByKORXOjMC4YQFy+lCUHMeH197HREtCcCO2GF8swgNwvyqCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T10:07:55.231497Z"},"content_sha256":"5246148ab86b08d4631fbbd39738925f0d438a322e495ec6bcbb51c74f512d1c","schema_version":"1.0","event_id":"sha256:5246148ab86b08d4631fbbd39738925f0d438a322e495ec6bcbb51c74f512d1c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:YQMFU6P3LX4ZGJ5RTR5LKPMBIP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Certified $\\ell_2$ Attribution Robustness via Uniformly Smoothed Attributions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Adams Wai-Kin Kong, Fan Wang","submitted_at":"2024-05-10T09:56:02Z","abstract_excerpt":"Model attribution is a popular tool to explain the rationales behind model predictions. However, recent work suggests that the attributions are vulnerable to minute perturbations, which can be added to input samples to fool the attributions while maintaining the prediction outputs. Although empirical studies have shown positive performance via adversarial training, an effective certified defense method is eminently needed to understand the robustness of attributions. In this work, we propose to use uniform smoothing technique that augments the vanilla attributions by noises uniformly sampled f"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.06361","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.06361/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:17:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"itHTVgBBsjZ1GAYk48AJoz4btGN3JZCOW0H5w0l00sgg2d/BNMfmf6vM/cn1oeBYOC1mcQA0PPz9uh6TYwcPBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T10:07:55.231862Z"},"content_sha256":"44d836fb282c5bbc4289162a048adbd0ed54f47d97504fc252b2446f9ccf6aa5","schema_version":"1.0","event_id":"sha256:44d836fb282c5bbc4289162a048adbd0ed54f47d97504fc252b2446f9ccf6aa5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YQMFU6P3LX4ZGJ5RTR5LKPMBIP/bundle.json","state_url":"https://pith.science/pith/YQMFU6P3LX4ZGJ5RTR5LKPMBIP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YQMFU6P3LX4ZGJ5RTR5LKPMBIP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T10:07:55Z","links":{"resolver":"https://pith.science/pith/YQMFU6P3LX4ZGJ5RTR5LKPMBIP","bundle":"https://pith.science/pith/YQMFU6P3LX4ZGJ5RTR5LKPMBIP/bundle.json","state":"https://pith.science/pith/YQMFU6P3LX4ZGJ5RTR5LKPMBIP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YQMFU6P3LX4ZGJ5RTR5LKPMBIP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:YQMFU6P3LX4ZGJ5RTR5LKPMBIP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"91d747986367c0e8fd3397131abd35267b09e3404660f7b631dd26b938d429fb","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-05-10T09:56:02Z","title_canon_sha256":"b13b11c2818d61d80771ed28eeafc635d4850d030a05e9be43be9b286257f700"},"schema_version":"1.0","source":{"id":"2405.06361","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.06361","created_at":"2026-07-05T08:17:40Z"},{"alias_kind":"arxiv_version","alias_value":"2405.06361v1","created_at":"2026-07-05T08:17:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.06361","created_at":"2026-07-05T08:17:40Z"},{"alias_kind":"pith_short_12","alias_value":"YQMFU6P3LX4Z","created_at":"2026-07-05T08:17:40Z"},{"alias_kind":"pith_short_16","alias_value":"YQMFU6P3LX4ZGJ5R","created_at":"2026-07-05T08:17:40Z"},{"alias_kind":"pith_short_8","alias_value":"YQMFU6P3","created_at":"2026-07-05T08:17:40Z"}],"graph_snapshots":[{"event_id":"sha256:44d836fb282c5bbc4289162a048adbd0ed54f47d97504fc252b2446f9ccf6aa5","target":"graph","created_at":"2026-07-05T08:17:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.06361/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Model attribution is a popular tool to explain the rationales behind model predictions. However, recent work suggests that the attributions are vulnerable to minute perturbations, which can be added to input samples to fool the attributions while maintaining the prediction outputs. Although empirical studies have shown positive performance via adversarial training, an effective certified defense method is eminently needed to understand the robustness of attributions. In this work, we propose to use uniform smoothing technique that augments the vanilla attributions by noises uniformly sampled f","authors_text":"Adams Wai-Kin Kong, Fan Wang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-05-10T09:56:02Z","title":"Certified $\\ell_2$ Attribution Robustness via Uniformly Smoothed Attributions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.06361","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5246148ab86b08d4631fbbd39738925f0d438a322e495ec6bcbb51c74f512d1c","target":"record","created_at":"2026-07-05T08:17:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"91d747986367c0e8fd3397131abd35267b09e3404660f7b631dd26b938d429fb","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-05-10T09:56:02Z","title_canon_sha256":"b13b11c2818d61d80771ed28eeafc635d4850d030a05e9be43be9b286257f700"},"schema_version":"1.0","source":{"id":"2405.06361","kind":"arxiv","version":1}},"canonical_sha256":"c4185a79fb5df99327b19c7ab53d8143d4e852fb82006c95ea02d153fe48a9dc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c4185a79fb5df99327b19c7ab53d8143d4e852fb82006c95ea02d153fe48a9dc","first_computed_at":"2026-07-05T08:17:40.460981Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:17:40.460981Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VRn9LupwjtKBqc3VcLuS4vxPoWX6PZi6/ArgWi1CuhutMR85ECPtQvrTPvFnUYc1yxxf0VPxmI72HnIaR8o6CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:17:40.461522Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.06361","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5246148ab86b08d4631fbbd39738925f0d438a322e495ec6bcbb51c74f512d1c","sha256:44d836fb282c5bbc4289162a048adbd0ed54f47d97504fc252b2446f9ccf6aa5"],"state_sha256":"89692685928bac8df295e86a27750f9f907d9f35aef2f30c504412e044014f5b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MYT5CrWQZTj2w6iGg2nPZiMh/E0MLbIpQ54Ua7b1GZ7xqGeh5tAO69ITIoyqUL/l91OpjGess0J1CAzbhDoDBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T10:07:55.233752Z","bundle_sha256":"cc83dff41e778c9b70ce871722948b5374f9036ebf46adc79a6965b0c239abda"}}