{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:MY7QJDLEXUIIV5RPRTLWVUGA7Y","short_pith_number":"pith:MY7QJDLE","canonical_record":{"source":{"id":"2302.02829","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-06T14:46:51Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"9a33bc5433798a8c90115a1f0de2ec394c64cb1b3057dea395a83bcc5fa037e1","abstract_canon_sha256":"6990c9dc032f868c7f100c94b535422bcbd406500a5cca2d73678cafdf4a69a4"},"schema_version":"1.0"},"canonical_sha256":"663f048d64bd108af62f8cd76ad0c0fe2d005934fcb0650e31f0794b8f4ac916","source":{"kind":"arxiv","id":"2302.02829","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.02829","created_at":"2026-07-05T05:39:07Z"},{"alias_kind":"arxiv_version","alias_value":"2302.02829v1","created_at":"2026-07-05T05:39:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.02829","created_at":"2026-07-05T05:39:07Z"},{"alias_kind":"pith_short_12","alias_value":"MY7QJDLEXUII","created_at":"2026-07-05T05:39:07Z"},{"alias_kind":"pith_short_16","alias_value":"MY7QJDLEXUIIV5RP","created_at":"2026-07-05T05:39:07Z"},{"alias_kind":"pith_short_8","alias_value":"MY7QJDLE","created_at":"2026-07-05T05:39:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:MY7QJDLEXUIIV5RPRTLWVUGA7Y","target":"record","payload":{"canonical_record":{"source":{"id":"2302.02829","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-06T14:46:51Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"9a33bc5433798a8c90115a1f0de2ec394c64cb1b3057dea395a83bcc5fa037e1","abstract_canon_sha256":"6990c9dc032f868c7f100c94b535422bcbd406500a5cca2d73678cafdf4a69a4"},"schema_version":"1.0"},"canonical_sha256":"663f048d64bd108af62f8cd76ad0c0fe2d005934fcb0650e31f0794b8f4ac916","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:39:07.223947Z","signature_b64":"YVEtF23NDobx2w4oJm9M7PZWkXS/6pIZEXMvBqJpyTE96NiJ72KRDZ+eoA1EZHkEKXdmu0YYTpuWwab2wHHsBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"663f048d64bd108af62f8cd76ad0c0fe2d005934fcb0650e31f0794b8f4ac916","last_reissued_at":"2026-07-05T05:39:07.223484Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:39:07.223484Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2302.02829","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:39:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mjhsHHcsFrDPhhBwqU+ZwtdGNVOq0vwdIte906R9iJ/kLQPiQRmDQPJFJnXCNxtLwIKg7Qmg6TSwUjrCx+6dDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T13:50:56.594016Z"},"content_sha256":"27bcc9fdb1ab984bb9abded3650ebfb9f2fb32a0c9562949384bec364da65d62","schema_version":"1.0","event_id":"sha256:27bcc9fdb1ab984bb9abded3650ebfb9f2fb32a0c9562949384bec364da65d62"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:MY7QJDLEXUIIV5RPRTLWVUGA7Y","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Collective Robustness Certificates: Exploiting Interdependence in Graph Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Aleksandar Bojchevski, Jan Schuchardt, Johannes Gasteiger, Stephan G\\\"unnemann","submitted_at":"2023-02-06T14:46:51Z","abstract_excerpt":"In tasks like node classification, image segmentation, and named-entity recognition we have a classifier that simultaneously outputs multiple predictions (a vector of labels) based on a single input, i.e. a single graph, image, or document respectively. Existing adversarial robustness certificates consider each prediction independently and are thus overly pessimistic for such tasks. They implicitly assume that an adversary can use different perturbed inputs to attack different predictions, ignoring the fact that we have a single shared input. We propose the first collective robustness certific"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.02829","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.02829/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:39:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8wlL4wkI4NyEPCh7ryCfE9KMSV7eMN1hGiY/dry3RPRPDgU2AGPaCzSMsimjz0leIDJgh2dvxWvn0s3pgSuyDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T13:50:56.594405Z"},"content_sha256":"4e20410078fda474987f4732d53baec9656563e2944cf933e249244c8cd6ae83","schema_version":"1.0","event_id":"sha256:4e20410078fda474987f4732d53baec9656563e2944cf933e249244c8cd6ae83"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MY7QJDLEXUIIV5RPRTLWVUGA7Y/bundle.json","state_url":"https://pith.science/pith/MY7QJDLEXUIIV5RPRTLWVUGA7Y/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MY7QJDLEXUIIV5RPRTLWVUGA7Y/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T13:50:56Z","links":{"resolver":"https://pith.science/pith/MY7QJDLEXUIIV5RPRTLWVUGA7Y","bundle":"https://pith.science/pith/MY7QJDLEXUIIV5RPRTLWVUGA7Y/bundle.json","state":"https://pith.science/pith/MY7QJDLEXUIIV5RPRTLWVUGA7Y/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MY7QJDLEXUIIV5RPRTLWVUGA7Y/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:MY7QJDLEXUIIV5RPRTLWVUGA7Y","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6990c9dc032f868c7f100c94b535422bcbd406500a5cca2d73678cafdf4a69a4","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-06T14:46:51Z","title_canon_sha256":"9a33bc5433798a8c90115a1f0de2ec394c64cb1b3057dea395a83bcc5fa037e1"},"schema_version":"1.0","source":{"id":"2302.02829","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.02829","created_at":"2026-07-05T05:39:07Z"},{"alias_kind":"arxiv_version","alias_value":"2302.02829v1","created_at":"2026-07-05T05:39:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.02829","created_at":"2026-07-05T05:39:07Z"},{"alias_kind":"pith_short_12","alias_value":"MY7QJDLEXUII","created_at":"2026-07-05T05:39:07Z"},{"alias_kind":"pith_short_16","alias_value":"MY7QJDLEXUIIV5RP","created_at":"2026-07-05T05:39:07Z"},{"alias_kind":"pith_short_8","alias_value":"MY7QJDLE","created_at":"2026-07-05T05:39:07Z"}],"graph_snapshots":[{"event_id":"sha256:4e20410078fda474987f4732d53baec9656563e2944cf933e249244c8cd6ae83","target":"graph","created_at":"2026-07-05T05:39:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.02829/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In tasks like node classification, image segmentation, and named-entity recognition we have a classifier that simultaneously outputs multiple predictions (a vector of labels) based on a single input, i.e. a single graph, image, or document respectively. Existing adversarial robustness certificates consider each prediction independently and are thus overly pessimistic for such tasks. They implicitly assume that an adversary can use different perturbed inputs to attack different predictions, ignoring the fact that we have a single shared input. We propose the first collective robustness certific","authors_text":"Aleksandar Bojchevski, Jan Schuchardt, Johannes Gasteiger, Stephan G\\\"unnemann","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-06T14:46:51Z","title":"Collective Robustness Certificates: Exploiting Interdependence in Graph Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.02829","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:27bcc9fdb1ab984bb9abded3650ebfb9f2fb32a0c9562949384bec364da65d62","target":"record","created_at":"2026-07-05T05:39:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6990c9dc032f868c7f100c94b535422bcbd406500a5cca2d73678cafdf4a69a4","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-06T14:46:51Z","title_canon_sha256":"9a33bc5433798a8c90115a1f0de2ec394c64cb1b3057dea395a83bcc5fa037e1"},"schema_version":"1.0","source":{"id":"2302.02829","kind":"arxiv","version":1}},"canonical_sha256":"663f048d64bd108af62f8cd76ad0c0fe2d005934fcb0650e31f0794b8f4ac916","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"663f048d64bd108af62f8cd76ad0c0fe2d005934fcb0650e31f0794b8f4ac916","first_computed_at":"2026-07-05T05:39:07.223484Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:39:07.223484Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YVEtF23NDobx2w4oJm9M7PZWkXS/6pIZEXMvBqJpyTE96NiJ72KRDZ+eoA1EZHkEKXdmu0YYTpuWwab2wHHsBw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:39:07.223947Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.02829","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:27bcc9fdb1ab984bb9abded3650ebfb9f2fb32a0c9562949384bec364da65d62","sha256:4e20410078fda474987f4732d53baec9656563e2944cf933e249244c8cd6ae83"],"state_sha256":"4b1bf106b42cec6834b5074a7695c7d9e9642e8b29e1d4cc1737a16d76dff1f0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"efD1EtMS3dufrG9QDPrWmQ0E9+IyobGedGRSb9ygqO0VAPM8bHAU3ev7zmHduZ1N+5OBc13ah2IOmDr02rowAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T13:50:56.597186Z","bundle_sha256":"ff7a13146e299dbce488aaa27c99017e07d96b11f5f3f8704a1738bee3404deb"}}