{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:MPZ3NHTNVOFBPEFBCIYAKVGPKK","short_pith_number":"pith:MPZ3NHTN","canonical_record":{"source":{"id":"2309.16710","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-08-17T14:39:24Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5db4062d69edf9ad5234ebaf171564b74510b986a1a52a882e05776697972ac5","abstract_canon_sha256":"86eb65dc87fbd3d8958f0d6dfcaa0b52596ebce260a8cae2f4c03a208f218b1f"},"schema_version":"1.0"},"canonical_sha256":"63f3b69e6dab8a1790a112300554cf5280930fe1f0d28989dd1f147bd1244766","source":{"kind":"arxiv","id":"2309.16710","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.16710","created_at":"2026-07-05T08:53:51Z"},{"alias_kind":"arxiv_version","alias_value":"2309.16710v2","created_at":"2026-07-05T08:53:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.16710","created_at":"2026-07-05T08:53:51Z"},{"alias_kind":"pith_short_12","alias_value":"MPZ3NHTNVOFB","created_at":"2026-07-05T08:53:51Z"},{"alias_kind":"pith_short_16","alias_value":"MPZ3NHTNVOFBPEFB","created_at":"2026-07-05T08:53:51Z"},{"alias_kind":"pith_short_8","alias_value":"MPZ3NHTN","created_at":"2026-07-05T08:53:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:MPZ3NHTNVOFBPEFBCIYAKVGPKK","target":"record","payload":{"canonical_record":{"source":{"id":"2309.16710","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-08-17T14:39:24Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5db4062d69edf9ad5234ebaf171564b74510b986a1a52a882e05776697972ac5","abstract_canon_sha256":"86eb65dc87fbd3d8958f0d6dfcaa0b52596ebce260a8cae2f4c03a208f218b1f"},"schema_version":"1.0"},"canonical_sha256":"63f3b69e6dab8a1790a112300554cf5280930fe1f0d28989dd1f147bd1244766","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:53:51.984266Z","signature_b64":"aAJ7l39CqHR9/CXM5V14Ebgyv4IYD0zIlOUdacuM9OwrC7k8pbn6zLvltquCgp6CPhIT8VnTeZWWUBbWP9p8CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"63f3b69e6dab8a1790a112300554cf5280930fe1f0d28989dd1f147bd1244766","last_reissued_at":"2026-07-05T08:53:51.983860Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:53:51.983860Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.16710","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:53:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"maajrqn2zgHhuxtl/eaZQMaydOU3gCvIR7wobkMPdhGE9UrReMQ1RegL/Dd5EPhXoN7LJJAF0BgGJMJXPqidCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T03:51:21.848805Z"},"content_sha256":"dd9d4bd3fc56dd3b2a9ac22b36c26efb58bc9ee4c32c595d405c59badf66cabb","schema_version":"1.0","event_id":"sha256:dd9d4bd3fc56dd3b2a9ac22b36c26efb58bc9ee4c32c595d405c59badf66cabb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:MPZ3NHTNVOFBPEFBCIYAKVGPKK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"General Lipschitz: Certified Robustness Against Resolvable Semantic Transformations via Transformation-Dependent Randomized Smoothing","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Dmitrii Korzh, Ivan Oseledets, Mikhail Pautov, Olga Tsymboi","submitted_at":"2023-08-17T14:39:24Z","abstract_excerpt":"Randomized smoothing is the state-of-the-art approach to construct image classifiers that are provably robust against additive adversarial perturbations of bounded magnitude. However, it is more complicated to construct reasonable certificates against semantic transformation (e.g., image blurring, translation, gamma correction) and their compositions. In this work, we propose \\emph{General Lipschitz (GL),} a new framework to certify neural networks against composable resolvable semantic perturbations. Within the framework, we analyze transformation-dependent Lipschitz-continuity of smoothed cl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.16710","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.16710/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:53:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"I1wqFJPCPeB5UqNkrWL8RwIIYNXsVAJkbycty181cqh/znu6Kv6viYXnzg9VsYOFAgexnVgjA9MShQIabS/1Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T03:51:21.849193Z"},"content_sha256":"46caec27228459a50e0e482c7e1a8c9aa2b1bd568a46e761735a5759d80a0644","schema_version":"1.0","event_id":"sha256:46caec27228459a50e0e482c7e1a8c9aa2b1bd568a46e761735a5759d80a0644"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MPZ3NHTNVOFBPEFBCIYAKVGPKK/bundle.json","state_url":"https://pith.science/pith/MPZ3NHTNVOFBPEFBCIYAKVGPKK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MPZ3NHTNVOFBPEFBCIYAKVGPKK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T03:51:21Z","links":{"resolver":"https://pith.science/pith/MPZ3NHTNVOFBPEFBCIYAKVGPKK","bundle":"https://pith.science/pith/MPZ3NHTNVOFBPEFBCIYAKVGPKK/bundle.json","state":"https://pith.science/pith/MPZ3NHTNVOFBPEFBCIYAKVGPKK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MPZ3NHTNVOFBPEFBCIYAKVGPKK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:MPZ3NHTNVOFBPEFBCIYAKVGPKK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"86eb65dc87fbd3d8958f0d6dfcaa0b52596ebce260a8cae2f4c03a208f218b1f","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-08-17T14:39:24Z","title_canon_sha256":"5db4062d69edf9ad5234ebaf171564b74510b986a1a52a882e05776697972ac5"},"schema_version":"1.0","source":{"id":"2309.16710","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.16710","created_at":"2026-07-05T08:53:51Z"},{"alias_kind":"arxiv_version","alias_value":"2309.16710v2","created_at":"2026-07-05T08:53:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.16710","created_at":"2026-07-05T08:53:51Z"},{"alias_kind":"pith_short_12","alias_value":"MPZ3NHTNVOFB","created_at":"2026-07-05T08:53:51Z"},{"alias_kind":"pith_short_16","alias_value":"MPZ3NHTNVOFBPEFB","created_at":"2026-07-05T08:53:51Z"},{"alias_kind":"pith_short_8","alias_value":"MPZ3NHTN","created_at":"2026-07-05T08:53:51Z"}],"graph_snapshots":[{"event_id":"sha256:46caec27228459a50e0e482c7e1a8c9aa2b1bd568a46e761735a5759d80a0644","target":"graph","created_at":"2026-07-05T08:53:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.16710/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Randomized smoothing is the state-of-the-art approach to construct image classifiers that are provably robust against additive adversarial perturbations of bounded magnitude. However, it is more complicated to construct reasonable certificates against semantic transformation (e.g., image blurring, translation, gamma correction) and their compositions. In this work, we propose \\emph{General Lipschitz (GL),} a new framework to certify neural networks against composable resolvable semantic perturbations. Within the framework, we analyze transformation-dependent Lipschitz-continuity of smoothed cl","authors_text":"Dmitrii Korzh, Ivan Oseledets, Mikhail Pautov, Olga Tsymboi","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-08-17T14:39:24Z","title":"General Lipschitz: Certified Robustness Against Resolvable Semantic Transformations via Transformation-Dependent Randomized Smoothing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.16710","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dd9d4bd3fc56dd3b2a9ac22b36c26efb58bc9ee4c32c595d405c59badf66cabb","target":"record","created_at":"2026-07-05T08:53:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"86eb65dc87fbd3d8958f0d6dfcaa0b52596ebce260a8cae2f4c03a208f218b1f","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2023-08-17T14:39:24Z","title_canon_sha256":"5db4062d69edf9ad5234ebaf171564b74510b986a1a52a882e05776697972ac5"},"schema_version":"1.0","source":{"id":"2309.16710","kind":"arxiv","version":2}},"canonical_sha256":"63f3b69e6dab8a1790a112300554cf5280930fe1f0d28989dd1f147bd1244766","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"63f3b69e6dab8a1790a112300554cf5280930fe1f0d28989dd1f147bd1244766","first_computed_at":"2026-07-05T08:53:51.983860Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:53:51.983860Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"aAJ7l39CqHR9/CXM5V14Ebgyv4IYD0zIlOUdacuM9OwrC7k8pbn6zLvltquCgp6CPhIT8VnTeZWWUBbWP9p8CA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:53:51.984266Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.16710","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dd9d4bd3fc56dd3b2a9ac22b36c26efb58bc9ee4c32c595d405c59badf66cabb","sha256:46caec27228459a50e0e482c7e1a8c9aa2b1bd568a46e761735a5759d80a0644"],"state_sha256":"9e431c10f8028a0eb1a846c74f9246e70bd19580cb484d1cc20964027fa7e985"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j4BSU9GPV0jUDgiG4MzgPpBrOS628gm74uurm/L7gtd1nmgwSHWCmsQC8KmxO8Liu0lc8RlbvYBekNJEmmUSAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T03:51:21.851216Z","bundle_sha256":"77d2e6dd45431849a0e997fe115961c57de0b732981dbea75d2769138bc50bd7"}}