{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:ZW2U22N5PZJECEF33DQZ7W37NC","short_pith_number":"pith:ZW2U22N5","canonical_record":{"source":{"id":"2109.06098","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-13T16:19:25Z","cross_cats_sorted":["cs.CV","cs.NA","math.NA","stat.ML"],"title_canon_sha256":"5a47ac29129c988c9b606a81098857cb8c8fac85bc2b7301de789f2b288f81a7","abstract_canon_sha256":"98421cfed98b4a303e9889fa0346bc9b98e215b5390ed2e1c383af89c6428051"},"schema_version":"1.0"},"canonical_sha256":"cdb54d69bd7e524110bbd8e19fdb7f6883208a4ca8a7def4ea003f930b32574b","source":{"kind":"arxiv","id":"2109.06098","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.06098","created_at":"2026-07-05T10:39:12Z"},{"alias_kind":"arxiv_version","alias_value":"2109.06098v2","created_at":"2026-07-05T10:39:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.06098","created_at":"2026-07-05T10:39:12Z"},{"alias_kind":"pith_short_12","alias_value":"ZW2U22N5PZJE","created_at":"2026-07-05T10:39:12Z"},{"alias_kind":"pith_short_16","alias_value":"ZW2U22N5PZJECEF3","created_at":"2026-07-05T10:39:12Z"},{"alias_kind":"pith_short_8","alias_value":"ZW2U22N5","created_at":"2026-07-05T10:39:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:ZW2U22N5PZJECEF33DQZ7W37NC","target":"record","payload":{"canonical_record":{"source":{"id":"2109.06098","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-13T16:19:25Z","cross_cats_sorted":["cs.CV","cs.NA","math.NA","stat.ML"],"title_canon_sha256":"5a47ac29129c988c9b606a81098857cb8c8fac85bc2b7301de789f2b288f81a7","abstract_canon_sha256":"98421cfed98b4a303e9889fa0346bc9b98e215b5390ed2e1c383af89c6428051"},"schema_version":"1.0"},"canonical_sha256":"cdb54d69bd7e524110bbd8e19fdb7f6883208a4ca8a7def4ea003f930b32574b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:39:12.656625Z","signature_b64":"OqbQsfxdsPrlA6/rxjQ5ao4JXY5Ev8XKNdwaD+6Rb1WQAhNvpGAVsTZNjXxEZlvNXzKtd0iIok6y2ikdc0yNBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cdb54d69bd7e524110bbd8e19fdb7f6883208a4ca8a7def4ea003f930b32574b","last_reissued_at":"2026-07-05T10:39:12.656080Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:39:12.656080Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2109.06098","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:39:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2TFycpH+YRyWD/aeTrhqk6GZEcjqyg9T3QbPKLkviIdtIePD5K4F6myqGy//Cv3atDHfCyFnqs2Ma0eqAdjtDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T05:58:28.863412Z"},"content_sha256":"6445da1a322bc97879679aa741536c500e89dcaaeffad8d3a8a47e512dc0be8d","schema_version":"1.0","event_id":"sha256:6445da1a322bc97879679aa741536c500e89dcaaeffad8d3a8a47e512dc0be8d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:ZW2U22N5PZJECEF33DQZ7W37NC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The mathematics of adversarial attacks in AI -- Why deep learning is unstable despite the existence of stable neural networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.NA","math.NA","stat.ML"],"primary_cat":"cs.LG","authors_text":"Alexander Bastounis, Anders C Hansen, Verner Vla\\v{c}i\\'c","submitted_at":"2021-09-13T16:19:25Z","abstract_excerpt":"The unprecedented success of deep learning (DL) makes it unchallenged when it comes to classification problems. However, it is well established that the current DL methodology produces universally unstable neural networks (NNs). The instability problem has caused an enormous research effort -- with a vast literature on so-called adversarial attacks -- yet there has been no solution to the problem. Our paper addresses why there has been no solution to the problem, as we prove the following mathematical paradox: any training procedure based on training neural networks for classification problems"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.06098","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2109.06098/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:39:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZW7gX1YBp94x7skNx/YaWQ/i9w5H6gdJWeY6YhgIAxGJivAvLWspTh+zap/KPJaJhZTmMNyVpXcKfecDYuJCBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T05:58:28.863806Z"},"content_sha256":"ad359c35c2d9d390d459051ad89297a6712561c4f8718e7712c50e16cd432c6b","schema_version":"1.0","event_id":"sha256:ad359c35c2d9d390d459051ad89297a6712561c4f8718e7712c50e16cd432c6b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZW2U22N5PZJECEF33DQZ7W37NC/bundle.json","state_url":"https://pith.science/pith/ZW2U22N5PZJECEF33DQZ7W37NC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZW2U22N5PZJECEF33DQZ7W37NC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T05:58:28Z","links":{"resolver":"https://pith.science/pith/ZW2U22N5PZJECEF33DQZ7W37NC","bundle":"https://pith.science/pith/ZW2U22N5PZJECEF33DQZ7W37NC/bundle.json","state":"https://pith.science/pith/ZW2U22N5PZJECEF33DQZ7W37NC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZW2U22N5PZJECEF33DQZ7W37NC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:ZW2U22N5PZJECEF33DQZ7W37NC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"98421cfed98b4a303e9889fa0346bc9b98e215b5390ed2e1c383af89c6428051","cross_cats_sorted":["cs.CV","cs.NA","math.NA","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-13T16:19:25Z","title_canon_sha256":"5a47ac29129c988c9b606a81098857cb8c8fac85bc2b7301de789f2b288f81a7"},"schema_version":"1.0","source":{"id":"2109.06098","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.06098","created_at":"2026-07-05T10:39:12Z"},{"alias_kind":"arxiv_version","alias_value":"2109.06098v2","created_at":"2026-07-05T10:39:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.06098","created_at":"2026-07-05T10:39:12Z"},{"alias_kind":"pith_short_12","alias_value":"ZW2U22N5PZJE","created_at":"2026-07-05T10:39:12Z"},{"alias_kind":"pith_short_16","alias_value":"ZW2U22N5PZJECEF3","created_at":"2026-07-05T10:39:12Z"},{"alias_kind":"pith_short_8","alias_value":"ZW2U22N5","created_at":"2026-07-05T10:39:12Z"}],"graph_snapshots":[{"event_id":"sha256:ad359c35c2d9d390d459051ad89297a6712561c4f8718e7712c50e16cd432c6b","target":"graph","created_at":"2026-07-05T10:39:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2109.06098/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The unprecedented success of deep learning (DL) makes it unchallenged when it comes to classification problems. However, it is well established that the current DL methodology produces universally unstable neural networks (NNs). The instability problem has caused an enormous research effort -- with a vast literature on so-called adversarial attacks -- yet there has been no solution to the problem. Our paper addresses why there has been no solution to the problem, as we prove the following mathematical paradox: any training procedure based on training neural networks for classification problems","authors_text":"Alexander Bastounis, Anders C Hansen, Verner Vla\\v{c}i\\'c","cross_cats":["cs.CV","cs.NA","math.NA","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-13T16:19:25Z","title":"The mathematics of adversarial attacks in AI -- Why deep learning is unstable despite the existence of stable neural networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.06098","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6445da1a322bc97879679aa741536c500e89dcaaeffad8d3a8a47e512dc0be8d","target":"record","created_at":"2026-07-05T10:39:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"98421cfed98b4a303e9889fa0346bc9b98e215b5390ed2e1c383af89c6428051","cross_cats_sorted":["cs.CV","cs.NA","math.NA","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-13T16:19:25Z","title_canon_sha256":"5a47ac29129c988c9b606a81098857cb8c8fac85bc2b7301de789f2b288f81a7"},"schema_version":"1.0","source":{"id":"2109.06098","kind":"arxiv","version":2}},"canonical_sha256":"cdb54d69bd7e524110bbd8e19fdb7f6883208a4ca8a7def4ea003f930b32574b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cdb54d69bd7e524110bbd8e19fdb7f6883208a4ca8a7def4ea003f930b32574b","first_computed_at":"2026-07-05T10:39:12.656080Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:39:12.656080Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OqbQsfxdsPrlA6/rxjQ5ao4JXY5Ev8XKNdwaD+6Rb1WQAhNvpGAVsTZNjXxEZlvNXzKtd0iIok6y2ikdc0yNBg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:39:12.656625Z","signed_message":"canonical_sha256_bytes"},"source_id":"2109.06098","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6445da1a322bc97879679aa741536c500e89dcaaeffad8d3a8a47e512dc0be8d","sha256:ad359c35c2d9d390d459051ad89297a6712561c4f8718e7712c50e16cd432c6b"],"state_sha256":"4949721cc6c09f3ee7c1acf9c7a0f19949589fe9f04c94b8f2ecd97df1f71927"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ApfX8MqI3Tw5leP5kAJF/vYqjOy4/faSUskGLzn+OfNIfOWilPUFJ/F6yGghMY4qJeKV8goNdEJ7SmTM8DoMBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T05:58:28.866103Z","bundle_sha256":"b30812366f58cbd9726c590df116f7f6aae4e1b87f05f6630907b1d88e1f1374"}}