Why it matters

Certified robustness aspires to formal guarantees. Understanding shapes research.

Advertisement

The architecture

Bound perturbation set.

Prove output stability.

Randomized smoothing common.

Certified robustnessInput + perturb ballbounded setRandomized smoothingsample perturbationsCertified outputwith probabilityRandomized smoothing extends from CV; LLM guarantees remain narrow
Certified robust.
Advertisement

How it works end to end

Randomized smoothing: extended from CV.

Text: harder due to discreteness.

Narrow guarantees.