Appendix A Method Details

Consider our approach for local Lipschitz bound computation. The third entry varies under perturbation. A.2 Why not consider linear ReLU outputs? We refer to these outputs as linear ReLU outputs. For simplicity, let us consider the standard ReLU activation.