{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:Z4BHNCNCQ6HY2LNXFN3FY77MZF","short_pith_number":"pith:Z4BHNCNC","canonical_record":{"source":{"id":"1906.06032","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-14T05:46:10Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"0d63a3c370ce7762ffc516efa5ae41bf7e76055236829fabb804928c88816c89","abstract_canon_sha256":"2303d1572b563e8257d20978e01012863fd4052691f31d7fcbdfa8052ff0c6c2"},"schema_version":"1.0"},"canonical_sha256":"cf027689a2878f8d2db72b765c7fecc97478866e0c59504b4b56e7aa35bc669e","source":{"kind":"arxiv","id":"1906.06032","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.06032","created_at":"2026-07-04T23:59:49Z"},{"alias_kind":"arxiv_version","alias_value":"1906.06032v2","created_at":"2026-07-04T23:59:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.06032","created_at":"2026-07-04T23:59:49Z"},{"alias_kind":"pith_short_12","alias_value":"Z4BHNCNCQ6HY","created_at":"2026-07-04T23:59:49Z"},{"alias_kind":"pith_short_16","alias_value":"Z4BHNCNCQ6HY2LNX","created_at":"2026-07-04T23:59:49Z"},{"alias_kind":"pith_short_8","alias_value":"Z4BHNCNC","created_at":"2026-07-04T23:59:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:Z4BHNCNCQ6HY2LNXFN3FY77MZF","target":"record","payload":{"canonical_record":{"source":{"id":"1906.06032","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-14T05:46:10Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"0d63a3c370ce7762ffc516efa5ae41bf7e76055236829fabb804928c88816c89","abstract_canon_sha256":"2303d1572b563e8257d20978e01012863fd4052691f31d7fcbdfa8052ff0c6c2"},"schema_version":"1.0"},"canonical_sha256":"cf027689a2878f8d2db72b765c7fecc97478866e0c59504b4b56e7aa35bc669e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-04T23:59:49.585384Z","signature_b64":"FpEi7h/NTxpry0iM0Y9hBaOH7AkkghBV7ckltUdgd5GGiHsx8bNnx899v7xhm7g4s7dT6b6LcKgrFjFB5Bu+DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cf027689a2878f8d2db72b765c7fecc97478866e0c59504b4b56e7aa35bc669e","last_reissued_at":"2026-07-04T23:59:49.584940Z","signature_status":"signed_v1","first_computed_at":"2026-07-04T23:59:49.584940Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1906.06032","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:59:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j08x+U8vodG3RQrgJ59GtVnhUZ8G3CH8LEdDuYDwvvI4CeGNUjePvc7PEIF1cubzOrrLoGYYT1jc6jxieRUACQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T02:28:20.219391Z"},"content_sha256":"094d78b2b78142f5a00528d861c05b4024fdffba9872d943a926da28edf214c3","schema_version":"1.0","event_id":"sha256:094d78b2b78142f5a00528d861c05b4024fdffba9872d943a926da28edf214c3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:Z4BHNCNCQ6HY2LNXFN3FY77MZF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Training Can Hurt Generalization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Aditi Raghunathan, Fanny Yang, John C. Duchi, Percy Liang, Sang Michael Xie","submitted_at":"2019-06-14T05:46:10Z","abstract_excerpt":"While adversarial training can improve robust accuracy (against an adversary), it sometimes hurts standard accuracy (when there is no adversary). Previous work has studied this tradeoff between standard and robust accuracy, but only in the setting where no predictor performs well on both objectives in the infinite data limit. In this paper, we show that even when the optimal predictor with infinite data performs well on both objectives, a tradeoff can still manifest itself with finite data. Furthermore, since our construction is based on a convex learning problem, we rule out optimization conc"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.06032","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1906.06032/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:59:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6HbRIkyeXnkgIkLDXwO/CGiN1PnSBXGywoDU5xEIwh1052QbnjeJz+PqSKuSTghXCSjZ7eMC2MBWxz2DepwmDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T02:28:20.220311Z"},"content_sha256":"f04937efe581e54d7748275565a9bffe7ce62d219edabb9d19ba63958c5df19a","schema_version":"1.0","event_id":"sha256:f04937efe581e54d7748275565a9bffe7ce62d219edabb9d19ba63958c5df19a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Z4BHNCNCQ6HY2LNXFN3FY77MZF/bundle.json","state_url":"https://pith.science/pith/Z4BHNCNCQ6HY2LNXFN3FY77MZF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Z4BHNCNCQ6HY2LNXFN3FY77MZF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T02:28:20Z","links":{"resolver":"https://pith.science/pith/Z4BHNCNCQ6HY2LNXFN3FY77MZF","bundle":"https://pith.science/pith/Z4BHNCNCQ6HY2LNXFN3FY77MZF/bundle.json","state":"https://pith.science/pith/Z4BHNCNCQ6HY2LNXFN3FY77MZF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Z4BHNCNCQ6HY2LNXFN3FY77MZF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:Z4BHNCNCQ6HY2LNXFN3FY77MZF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2303d1572b563e8257d20978e01012863fd4052691f31d7fcbdfa8052ff0c6c2","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-14T05:46:10Z","title_canon_sha256":"0d63a3c370ce7762ffc516efa5ae41bf7e76055236829fabb804928c88816c89"},"schema_version":"1.0","source":{"id":"1906.06032","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.06032","created_at":"2026-07-04T23:59:49Z"},{"alias_kind":"arxiv_version","alias_value":"1906.06032v2","created_at":"2026-07-04T23:59:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.06032","created_at":"2026-07-04T23:59:49Z"},{"alias_kind":"pith_short_12","alias_value":"Z4BHNCNCQ6HY","created_at":"2026-07-04T23:59:49Z"},{"alias_kind":"pith_short_16","alias_value":"Z4BHNCNCQ6HY2LNX","created_at":"2026-07-04T23:59:49Z"},{"alias_kind":"pith_short_8","alias_value":"Z4BHNCNC","created_at":"2026-07-04T23:59:49Z"}],"graph_snapshots":[{"event_id":"sha256:f04937efe581e54d7748275565a9bffe7ce62d219edabb9d19ba63958c5df19a","target":"graph","created_at":"2026-07-04T23:59:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1906.06032/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While adversarial training can improve robust accuracy (against an adversary), it sometimes hurts standard accuracy (when there is no adversary). Previous work has studied this tradeoff between standard and robust accuracy, but only in the setting where no predictor performs well on both objectives in the infinite data limit. In this paper, we show that even when the optimal predictor with infinite data performs well on both objectives, a tradeoff can still manifest itself with finite data. Furthermore, since our construction is based on a convex learning problem, we rule out optimization conc","authors_text":"Aditi Raghunathan, Fanny Yang, John C. Duchi, Percy Liang, Sang Michael Xie","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-14T05:46:10Z","title":"Adversarial Training Can Hurt Generalization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.06032","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:094d78b2b78142f5a00528d861c05b4024fdffba9872d943a926da28edf214c3","target":"record","created_at":"2026-07-04T23:59:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2303d1572b563e8257d20978e01012863fd4052691f31d7fcbdfa8052ff0c6c2","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-06-14T05:46:10Z","title_canon_sha256":"0d63a3c370ce7762ffc516efa5ae41bf7e76055236829fabb804928c88816c89"},"schema_version":"1.0","source":{"id":"1906.06032","kind":"arxiv","version":2}},"canonical_sha256":"cf027689a2878f8d2db72b765c7fecc97478866e0c59504b4b56e7aa35bc669e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cf027689a2878f8d2db72b765c7fecc97478866e0c59504b4b56e7aa35bc669e","first_computed_at":"2026-07-04T23:59:49.584940Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-04T23:59:49.584940Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FpEi7h/NTxpry0iM0Y9hBaOH7AkkghBV7ckltUdgd5GGiHsx8bNnx899v7xhm7g4s7dT6b6LcKgrFjFB5Bu+DA==","signature_status":"signed_v1","signed_at":"2026-07-04T23:59:49.585384Z","signed_message":"canonical_sha256_bytes"},"source_id":"1906.06032","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:094d78b2b78142f5a00528d861c05b4024fdffba9872d943a926da28edf214c3","sha256:f04937efe581e54d7748275565a9bffe7ce62d219edabb9d19ba63958c5df19a"],"state_sha256":"050efc77e781054b30d8b9a636d0e089b88902651c31c0cd7408f09aaba7bb4e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JLlTfkCxljlKAd9wZjnn9SqEpi7lwGmYx34avjMOAY+TlpiTSuyLYvC9egHyF0AhE/pK5pDhuMPPYdh83zEuAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T02:28:20.230266Z","bundle_sha256":"7021271fd7b1bb864ce2194d4c3a26682aa1b739b4ff48299a73483e9b7b528e"}}