{
  "schema_version": 1,
  "builder_plan": {
    "scenario": "A self-hosted assistant is too expensive because its model uses most of the GPU memory.",
    "change": "Try the paper's supported lower-precision weights on a copy of your serving setup.",
    "baseline": "The same model at its original precision, on the same GPU.",
    "steps": [
      "Locate the paper's implementation and check its license, model support, data needs, and hardware requirements. Stop here if you cannot obtain the required artifacts.",
      "Save a small set of representative product tasks and expected outcomes. Keep evaluation tasks out of any training or tuning, and choose quality and cost limits before running.",
      "Run the baseline and the proposed change on identical inputs. Keep other settings fixed and repeat paired runs to expose variation.",
      "Save per-task outputs, failures, timings, and all usage costs. Review regressions before expanding the test."
    ],
    "measure": "Peak memory, task pass rate, latency, and total serving cost at the same context and load.",
    "decision": "Keep the change only if it meets your preselected quality and latency limits and improves the metric you care about after setup and operating costs. Otherwise retain the baseline. This is an exploration plan, not a validated recommendation."
  },
  "builder_review": null,
  "arxiv_id": "2609.30037",
  "title": "AERIAL: Adversarial Evaluation of Robustness in Accuracy-Preserving Low-Precision EEG Decoders",
  "summary": "The paper evaluates standard magnitude pruning and INT8 PTQ/QAT (against FP32 baselines) rather than proposing a new method, and shows compression should be adopted for deployment efficiency, not for adversarial robustness, since robustness is unchanged. The costs are the engineering overhead of quantization tooling and simulated-to-native validation, plus accuracy loss if compression is pushed beyond the accuracy-preserving regime tested. What can fail: conclusions are specific to EEGNet/ShallowConvNet on BCI Competition IV-2a, simulated quantization can diverge from native deployment in the remaining 2-5% of cases, and pruning's altered gradient alignment may interact unpredictably with other attack models.",
  "rationale": "Compression methods here are directly usable on a 24 GB GPU, but the paper's contribution is an evaluation showing no robustness benefit, so the reader should validate accuracy and efficiency on their own workload rather than adopt compression expecting a security gain.",
  "technique": "Adversarial evaluation of pruned and quantized EEG decoders",
  "family": "quantizacao",
  "recommendation": "testar",
  "published": "2026-09-24",
  "as_of": "2026-10-18",
  "editorial_status": "indexed",
  "source_url": "https://arxiv.org/abs/2609.30037",
  "independent_implementations": 0,
  "total_implementations": 0,
  "stars": 0,
  "citations": 0,
  "claims": [
    {
      "claim_id": "claim-01",
      "statement": "The paper evaluates standard magnitude pruning and INT8 PTQ/QAT (against FP32 baselines) rather than proposing a new method, and shows compression should be adopted for deployment efficiency, not for adversarial robustness, since robustness is unchanged. The costs are the engineering overhead of quantization tooling and simulated-to-native validation, plus accuracy loss if compression is pushed beyond the accuracy-preserving regime tested. What can fail: conclusions are specific to EEGNet/ShallowConvNet on BCI Competition IV-2a, simulated quantization can diverge from native deployment in the remaining 2-5% of cases, and pruning's altered gradient alignment may interact unpredictably with other attack models.",
      "basis": "inferred",
      "result": "",
      "baseline": "",
      "conditions": "",
      "source_url": "https://arxiv.org/abs/2609.30037",
      "source_page": null,
      "source_excerpt": ""
    },
    {
      "claim_id": "claim-02",
      "statement": "No speed or memory factor is reported. Quantified findings concern robustness: PGD accuracy at epsilon=0.005 stays at 22-24% across FP32, 50% pruning, PTQ, and QAT; pruning lowers bidirectional adversarial transfer to 0.963/0.928 versus 0.994/0.997 for PTQ; native TensorRT PTQ agrees with simulated predictions in 95-98% of cases.",
      "basis": "inferred",
      "result": "",
      "baseline": "",
      "conditions": "",
      "source_url": "https://arxiv.org/abs/2609.30037",
      "source_page": null,
      "source_excerpt": ""
    }
  ],
  "exposure_map": [
    {
      "dimension": "quality",
      "basis": "not_evaluated",
      "finding": "",
      "interpretation": "",
      "limitation": "",
      "next_check": "",
      "source_url": "",
      "source_page": null,
      "source_excerpt": ""
    },
    {
      "dimension": "compute",
      "basis": "not_evaluated",
      "finding": "",
      "interpretation": "",
      "limitation": "",
      "next_check": "",
      "source_url": "",
      "source_page": null,
      "source_excerpt": ""
    },
    {
      "dimension": "latency",
      "basis": "not_evaluated",
      "finding": "",
      "interpretation": "",
      "limitation": "",
      "next_check": "",
      "source_url": "",
      "source_page": null,
      "source_excerpt": ""
    },
    {
      "dimension": "operations",
      "basis": "not_evaluated",
      "finding": "",
      "interpretation": "",
      "limitation": "",
      "next_check": "",
      "source_url": "",
      "source_page": null,
      "source_excerpt": ""
    },
    {
      "dimension": "compatibility",
      "basis": "not_evaluated",
      "finding": "",
      "interpretation": "",
      "limitation": "",
      "next_check": "",
      "source_url": "",
      "source_page": null,
      "source_excerpt": ""
    },
    {
      "dimension": "security",
      "basis": "not_evaluated",
      "finding": "",
      "interpretation": "",
      "limitation": "",
      "next_check": "",
      "source_url": "",
      "source_page": null,
      "source_excerpt": ""
    },
    {
      "dimension": "data_and_training",
      "basis": "not_evaluated",
      "finding": "",
      "interpretation": "",
      "limitation": "",
      "next_check": "",
      "source_url": "",
      "source_page": null,
      "source_excerpt": ""
    },
    {
      "dimension": "reproducibility",
      "basis": "not_evaluated",
      "finding": "",
      "interpretation": "",
      "limitation": "",
      "next_check": "",
      "source_url": "",
      "source_page": null,
      "source_excerpt": ""
    }
  ],
  "risks": [],
  "minimum_test": [],
  "open_questions": [],
  "independent_tests": [],
  "lab_reproductions": [],
  "report_available": false,
  "validation_tier": "unknown",
  "evidence_tier": "unknown",
  "infrastructure_basis": "unknown",
  "equations": [],
  "equations_status": "not_fetched",
  "core_kind": "",
  "equations_fetched_at": "",
  "equations_source_url": "",
  "equations_source_sha256": "",
  "exposures_reviewed_at": "",
  "exposures_source_sha256": ""
}