99e314b1b43706773153e7ef375fc68c-AuthorFeedback.pdf

We expect this guaranteed upper bound to16 beslowlyincreasing on the interval [0, ]. Note that no attack (including adaptive attacks) can achieve a lower accuracy than certified (i.e. As suggested, Table A24 extends Sec. PubMed is about 10 times bigger than Citeseer47 (seeTable2).