code and pre-trained model checkpoints upon paper acceptance. 2 To Reviewer 1, 3, and 4 Q1: How do perturbations in embedding space compare to those in pixel/token space?

Open in new window