{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:Q5UQOZAAAC5ND2RS6I2ASR2K37","short_pith_number":"pith:Q5UQOZAA","canonical_record":{"source":{"id":"2409.20139","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-30T09:41:34Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"42f4cea76cca8ec180d1f10fff45b09389fb116ffb81ec17db41bb2eba3bfdb5","abstract_canon_sha256":"53d033c0a5d44cb3d6461000b3cfbe284f1e731d48368e4def75d7f729521013"},"schema_version":"1.0"},"canonical_sha256":"876907640000bad1ea32f23409474adfc7b4c072f371008b9bf8cfab0b01426e","source":{"kind":"arxiv","id":"2409.20139","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.20139","created_at":"2026-07-05T09:13:39Z"},{"alias_kind":"arxiv_version","alias_value":"2409.20139v1","created_at":"2026-07-05T09:13:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.20139","created_at":"2026-07-05T09:13:39Z"},{"alias_kind":"pith_short_12","alias_value":"Q5UQOZAAAC5N","created_at":"2026-07-05T09:13:39Z"},{"alias_kind":"pith_short_16","alias_value":"Q5UQOZAAAC5ND2RS","created_at":"2026-07-05T09:13:39Z"},{"alias_kind":"pith_short_8","alias_value":"Q5UQOZAA","created_at":"2026-07-05T09:13:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:Q5UQOZAAAC5ND2RS6I2ASR2K37","target":"record","payload":{"canonical_record":{"source":{"id":"2409.20139","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-30T09:41:34Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"42f4cea76cca8ec180d1f10fff45b09389fb116ffb81ec17db41bb2eba3bfdb5","abstract_canon_sha256":"53d033c0a5d44cb3d6461000b3cfbe284f1e731d48368e4def75d7f729521013"},"schema_version":"1.0"},"canonical_sha256":"876907640000bad1ea32f23409474adfc7b4c072f371008b9bf8cfab0b01426e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:13:39.568336Z","signature_b64":"NiiIfw6zh7KSapRb2UgLVPUjTomElcbiWoWDEiJCpqZhH56rnITk/pwmfoNBSamq2qqCVJo9iJ5/SlhW/i0VBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"876907640000bad1ea32f23409474adfc7b4c072f371008b9bf8cfab0b01426e","last_reissued_at":"2026-07-05T09:13:39.567944Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:13:39.567944Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.20139","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:13:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wAcjv89g9RHAKN2PoEIrVDSJUjZXzo1a1Js0Xwuf6M3t+ThXStj4XBDgKtkvfPouLgFJfAwUbAPPhYEQBrFWCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T08:31:46.213820Z"},"content_sha256":"5e3922907ae3e2589eafdbbd123963b1d542ce1e23ebf923c87125a7f82d8949","schema_version":"1.0","event_id":"sha256:5e3922907ae3e2589eafdbbd123963b1d542ce1e23ebf923c87125a7f82d8949"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:Q5UQOZAAAC5ND2RS6I2ASR2K37","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Characterizing Model Robustness via Natural Input Gradients","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Adri\\'an Rodr\\'iguez-Mu\\~noz, Antonio Torralba, Tongzhou Wang","submitted_at":"2024-09-30T09:41:34Z","abstract_excerpt":"Adversarially robust models are locally smooth around each data sample so that small perturbations cannot drastically change model outputs. In modern systems, such smoothness is usually obtained via Adversarial Training, which explicitly enforces models to perform well on perturbed examples. In this work, we show the surprising effectiveness of instead regularizing the gradient with respect to model inputs on natural examples only. Penalizing input Gradient Norm is commonly believed to be a much inferior approach. Our analyses identify that the performance of Gradient Norm regularization criti"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.20139","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.20139/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:13:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jK1aQQvfpS4eQAs5RG1kxG5Q4CXMSYTfWDrsg51BZSrtCEDXOMBaR1wN2G11fz2cFyX2oE3Y4iO2BVnk1v8lCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T08:31:46.214204Z"},"content_sha256":"0129eb2ebf7ac144454df8644ab2e0c6e693482f9662f26fbf174c16136313ca","schema_version":"1.0","event_id":"sha256:0129eb2ebf7ac144454df8644ab2e0c6e693482f9662f26fbf174c16136313ca"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Q5UQOZAAAC5ND2RS6I2ASR2K37/bundle.json","state_url":"https://pith.science/pith/Q5UQOZAAAC5ND2RS6I2ASR2K37/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Q5UQOZAAAC5ND2RS6I2ASR2K37/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T08:31:46Z","links":{"resolver":"https://pith.science/pith/Q5UQOZAAAC5ND2RS6I2ASR2K37","bundle":"https://pith.science/pith/Q5UQOZAAAC5ND2RS6I2ASR2K37/bundle.json","state":"https://pith.science/pith/Q5UQOZAAAC5ND2RS6I2ASR2K37/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Q5UQOZAAAC5ND2RS6I2ASR2K37/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:Q5UQOZAAAC5ND2RS6I2ASR2K37","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"53d033c0a5d44cb3d6461000b3cfbe284f1e731d48368e4def75d7f729521013","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-30T09:41:34Z","title_canon_sha256":"42f4cea76cca8ec180d1f10fff45b09389fb116ffb81ec17db41bb2eba3bfdb5"},"schema_version":"1.0","source":{"id":"2409.20139","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.20139","created_at":"2026-07-05T09:13:39Z"},{"alias_kind":"arxiv_version","alias_value":"2409.20139v1","created_at":"2026-07-05T09:13:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.20139","created_at":"2026-07-05T09:13:39Z"},{"alias_kind":"pith_short_12","alias_value":"Q5UQOZAAAC5N","created_at":"2026-07-05T09:13:39Z"},{"alias_kind":"pith_short_16","alias_value":"Q5UQOZAAAC5ND2RS","created_at":"2026-07-05T09:13:39Z"},{"alias_kind":"pith_short_8","alias_value":"Q5UQOZAA","created_at":"2026-07-05T09:13:39Z"}],"graph_snapshots":[{"event_id":"sha256:0129eb2ebf7ac144454df8644ab2e0c6e693482f9662f26fbf174c16136313ca","target":"graph","created_at":"2026-07-05T09:13:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.20139/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarially robust models are locally smooth around each data sample so that small perturbations cannot drastically change model outputs. In modern systems, such smoothness is usually obtained via Adversarial Training, which explicitly enforces models to perform well on perturbed examples. In this work, we show the surprising effectiveness of instead regularizing the gradient with respect to model inputs on natural examples only. Penalizing input Gradient Norm is commonly believed to be a much inferior approach. Our analyses identify that the performance of Gradient Norm regularization criti","authors_text":"Adri\\'an Rodr\\'iguez-Mu\\~noz, Antonio Torralba, Tongzhou Wang","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-30T09:41:34Z","title":"Characterizing Model Robustness via Natural Input Gradients"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.20139","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5e3922907ae3e2589eafdbbd123963b1d542ce1e23ebf923c87125a7f82d8949","target":"record","created_at":"2026-07-05T09:13:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"53d033c0a5d44cb3d6461000b3cfbe284f1e731d48368e4def75d7f729521013","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-30T09:41:34Z","title_canon_sha256":"42f4cea76cca8ec180d1f10fff45b09389fb116ffb81ec17db41bb2eba3bfdb5"},"schema_version":"1.0","source":{"id":"2409.20139","kind":"arxiv","version":1}},"canonical_sha256":"876907640000bad1ea32f23409474adfc7b4c072f371008b9bf8cfab0b01426e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"876907640000bad1ea32f23409474adfc7b4c072f371008b9bf8cfab0b01426e","first_computed_at":"2026-07-05T09:13:39.567944Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:13:39.567944Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NiiIfw6zh7KSapRb2UgLVPUjTomElcbiWoWDEiJCpqZhH56rnITk/pwmfoNBSamq2qqCVJo9iJ5/SlhW/i0VBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:13:39.568336Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.20139","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5e3922907ae3e2589eafdbbd123963b1d542ce1e23ebf923c87125a7f82d8949","sha256:0129eb2ebf7ac144454df8644ab2e0c6e693482f9662f26fbf174c16136313ca"],"state_sha256":"f9245134ed8d46e9319bf8d4996ba1ba572c1e32a053bf5edecf6a236a1498f2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mUEfpbJr2QdwMsA3iqOVInwouvt7x8tgRHbQR2YUHGmOvg8u7qnYDwmkD3upjf57XzkJYaMk90dMYUuc6d5TDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T08:31:46.216299Z","bundle_sha256":"19daf56fafe04147319cdaaa92ba1be68ec03cb3bfa968686ab4429866ecb25a"}}