Focused Width in Adversarial Fake Detection: A Separation
Abstract
We study the adversarial fake detection model introduced by Mendelson, Paouris and Vershynin. In this model, a genuine sample is , while a fake sample is produced as , where the adversary first observes and then chooses an admissible perturbation from a prescribed set . The central quantity is the detectability radius , which formalizes the transition scale at which fake samples become reliably distinguishable from genuine ones. Mendelson, Paouris and Vershynin introduced the focused width as a geometric parameter for this radius and conjectured that, for every origin-symmetric set , it characterizes up to universal constants. In this note, we disprove this conjecture for a broad class of discrete sets. More precisely, we consider any origin-symmetric set lying between the hypercube and the odd integer grid: \begin{equation*} \{-1,1\}^n\subset\mathscr{T}_n\subset ( 2\mathbb{Z}+1)^n. \end{equation*} For every such , we prove that . Thus, in the Gaussian model, the focused width can overestimate the detectability radius by a factor and therefore does not characterize it in general. We further show that this logarithmic scale is not intrinsic: in the corresponding non-Gaussian model with product Laplace data, the focused width benchmark can even exceed the detectability radius by at least a polynomial factor of order .
Cite
@article{arxiv.2607.05379,
title = {Focused Width in Adversarial Fake Detection: A Separation},
author = {Gao Huang},
journal= {arXiv preprint arXiv:2607.05379},
year = {2026}
}
Comments
14pages