{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:UYPOAHHOZMF4BASQZCJ7ISDUIZ","short_pith_number":"pith:UYPOAHHO","canonical_record":{"source":{"id":"2405.13922","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-05-22T18:52:09Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"0075680125055443b65f027ad81bd8c11274c5332b4965f2d3da08650c6894a1","abstract_canon_sha256":"d3d1a0b16859f6da75429a9cf72753724cea05e51a0d23bb14b683d1c020afe0"},"schema_version":"1.0"},"canonical_sha256":"a61ee01ceecb0bc08250c893f44874466b19cf226affdcf387c8e9f77a89be3e","source":{"kind":"arxiv","id":"2405.13922","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.13922","created_at":"2026-07-05T10:19:24Z"},{"alias_kind":"arxiv_version","alias_value":"2405.13922v3","created_at":"2026-07-05T10:19:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.13922","created_at":"2026-07-05T10:19:24Z"},{"alias_kind":"pith_short_12","alias_value":"UYPOAHHOZMF4","created_at":"2026-07-05T10:19:24Z"},{"alias_kind":"pith_short_16","alias_value":"UYPOAHHOZMF4BASQ","created_at":"2026-07-05T10:19:24Z"},{"alias_kind":"pith_short_8","alias_value":"UYPOAHHO","created_at":"2026-07-05T10:19:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:UYPOAHHOZMF4BASQZCJ7ISDUIZ","target":"record","payload":{"canonical_record":{"source":{"id":"2405.13922","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-05-22T18:52:09Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"0075680125055443b65f027ad81bd8c11274c5332b4965f2d3da08650c6894a1","abstract_canon_sha256":"d3d1a0b16859f6da75429a9cf72753724cea05e51a0d23bb14b683d1c020afe0"},"schema_version":"1.0"},"canonical_sha256":"a61ee01ceecb0bc08250c893f44874466b19cf226affdcf387c8e9f77a89be3e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:19:24.251815Z","signature_b64":"J4k+x0LNFio3DeXwqzt62oLNa5FcNs06Jtt/4sd488b80WswVkmuNbowNsYIgRPHacYYKoEeTaMmJzaQ7DozCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a61ee01ceecb0bc08250c893f44874466b19cf226affdcf387c8e9f77a89be3e","last_reissued_at":"2026-07-05T10:19:24.251329Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:19:24.251329Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.13922","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:19:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"X2tzFWniXv6iSWIYwjSiO7W45uG+u4VeybnkYtxbaZ8VO2LifbFnoVSMWAA4/M++3xhoWxhpQ6gEwMjAc76HAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T06:51:06.682866Z"},"content_sha256":"a6e0ebeadfbc1fbe46da07726c6b8fecfcde6d004501aa448f4f5e88699408f9","schema_version":"1.0","event_id":"sha256:a6e0ebeadfbc1fbe46da07726c6b8fecfcde6d004501aa448f4f5e88699408f9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:UYPOAHHOZMF4BASQZCJ7ISDUIZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Certification of Uncertainty Calibration under Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Adel Bibi, Cornelius Emde, Francesco Pinto, Philip H.S. Torr, Thomas Lukasiewicz","submitted_at":"2024-05-22T18:52:09Z","abstract_excerpt":"Since neural classifiers are known to be sensitive to adversarial perturbations that alter their accuracy, \\textit{certification methods} have been developed to provide provable guarantees on the insensitivity of their predictions to such perturbations. Furthermore, in safety-critical applications, the frequentist interpretation of the confidence of a classifier (also known as model calibration) can be of utmost importance. This property can be measured via the Brier score or the expected calibration error. We show that attacks can significantly harm calibration, and thus propose certified cal"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.13922","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.13922/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:19:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3Hs2SI8Y6v6EoyJnKIO7SqZ74HnPfBNphgbpT6b4hA9YL4Hd/40wLu3GS+02Mh17mw24jvYiV4lyUajGoi9PAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T06:51:06.683356Z"},"content_sha256":"b6ef3a378b490df25e6710e2ebd295af37c9da81a49a3dc4c5bdde63dc8dc7b0","schema_version":"1.0","event_id":"sha256:b6ef3a378b490df25e6710e2ebd295af37c9da81a49a3dc4c5bdde63dc8dc7b0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UYPOAHHOZMF4BASQZCJ7ISDUIZ/bundle.json","state_url":"https://pith.science/pith/UYPOAHHOZMF4BASQZCJ7ISDUIZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UYPOAHHOZMF4BASQZCJ7ISDUIZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T06:51:06Z","links":{"resolver":"https://pith.science/pith/UYPOAHHOZMF4BASQZCJ7ISDUIZ","bundle":"https://pith.science/pith/UYPOAHHOZMF4BASQZCJ7ISDUIZ/bundle.json","state":"https://pith.science/pith/UYPOAHHOZMF4BASQZCJ7ISDUIZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UYPOAHHOZMF4BASQZCJ7ISDUIZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:UYPOAHHOZMF4BASQZCJ7ISDUIZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d3d1a0b16859f6da75429a9cf72753724cea05e51a0d23bb14b683d1c020afe0","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-05-22T18:52:09Z","title_canon_sha256":"0075680125055443b65f027ad81bd8c11274c5332b4965f2d3da08650c6894a1"},"schema_version":"1.0","source":{"id":"2405.13922","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.13922","created_at":"2026-07-05T10:19:24Z"},{"alias_kind":"arxiv_version","alias_value":"2405.13922v3","created_at":"2026-07-05T10:19:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.13922","created_at":"2026-07-05T10:19:24Z"},{"alias_kind":"pith_short_12","alias_value":"UYPOAHHOZMF4","created_at":"2026-07-05T10:19:24Z"},{"alias_kind":"pith_short_16","alias_value":"UYPOAHHOZMF4BASQ","created_at":"2026-07-05T10:19:24Z"},{"alias_kind":"pith_short_8","alias_value":"UYPOAHHO","created_at":"2026-07-05T10:19:24Z"}],"graph_snapshots":[{"event_id":"sha256:b6ef3a378b490df25e6710e2ebd295af37c9da81a49a3dc4c5bdde63dc8dc7b0","target":"graph","created_at":"2026-07-05T10:19:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.13922/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Since neural classifiers are known to be sensitive to adversarial perturbations that alter their accuracy, \\textit{certification methods} have been developed to provide provable guarantees on the insensitivity of their predictions to such perturbations. Furthermore, in safety-critical applications, the frequentist interpretation of the confidence of a classifier (also known as model calibration) can be of utmost importance. This property can be measured via the Brier score or the expected calibration error. We show that attacks can significantly harm calibration, and thus propose certified cal","authors_text":"Adel Bibi, Cornelius Emde, Francesco Pinto, Philip H.S. Torr, Thomas Lukasiewicz","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-05-22T18:52:09Z","title":"Towards Certification of Uncertainty Calibration under Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.13922","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a6e0ebeadfbc1fbe46da07726c6b8fecfcde6d004501aa448f4f5e88699408f9","target":"record","created_at":"2026-07-05T10:19:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d3d1a0b16859f6da75429a9cf72753724cea05e51a0d23bb14b683d1c020afe0","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-05-22T18:52:09Z","title_canon_sha256":"0075680125055443b65f027ad81bd8c11274c5332b4965f2d3da08650c6894a1"},"schema_version":"1.0","source":{"id":"2405.13922","kind":"arxiv","version":3}},"canonical_sha256":"a61ee01ceecb0bc08250c893f44874466b19cf226affdcf387c8e9f77a89be3e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a61ee01ceecb0bc08250c893f44874466b19cf226affdcf387c8e9f77a89be3e","first_computed_at":"2026-07-05T10:19:24.251329Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:19:24.251329Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"J4k+x0LNFio3DeXwqzt62oLNa5FcNs06Jtt/4sd488b80WswVkmuNbowNsYIgRPHacYYKoEeTaMmJzaQ7DozCA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:19:24.251815Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.13922","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a6e0ebeadfbc1fbe46da07726c6b8fecfcde6d004501aa448f4f5e88699408f9","sha256:b6ef3a378b490df25e6710e2ebd295af37c9da81a49a3dc4c5bdde63dc8dc7b0"],"state_sha256":"fea30b826a5979fec3b53a96db7b34bc6e9e154e426d3fd30a566fbc9b5cae51"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xH2RDgoHzQrj7xb5shppQKy/ZtI+u3yPpEt7zGJdXN/EEhim5pZrtY8yqO4OjLiRXl5bSjSNFScS5qB30iuaCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T06:51:06.685586Z","bundle_sha256":"5455cd703b18b48f4bf12b43b3ff703c8becedc3a34cded56a1997095f176e53"}}