Essay
The quiet math of adversarial hardening, and why it isn't the moat
A specific number, 0.05, decides whether a perturbation stays invisible to a viewer and poisonous to a model. The math is elegant. Building a company on the math is a different problem.