Center Smoothing: Certified Robustness for Networks with Structured Outputs Appendix

Let, y be a point in that intersection. The rest of the procedure remains the same as algorithm 1. (figure 3). However, models trained without noise also produce non-trivial certificates.