The Velado Bound: A Geometric Lower Bound on Adversarial Detectability via Fisher-Rao Information Geometry

We prove a fundamental lower bound on adversarial perturbations in conservation-constrained probability systems. For states x, x' on the probability simplex S_n lying in different entropy bands, the product of Fisher-Rao geodesic distance D and semantic impact I satisfies D·I ≥ κ, where κ = (ΔH)²/M emerges from simplex geometry. The bound is derived via Cauchy-Schwarz inequality on the Fisher-Rao manifold and establishes a geometrically forbidden region where high-impact, low-detectability attacks cannot exist. We call this the Adversarial Uncertainty Principle. Empirical validation on H100 GPU confirms the forbidden quadrant {D<0.5, I>0.5} remains empty across 10⁵ trials. Priority: U.S. Provisional Application No. 63/958,306, filed January 12, 2026.

Authors

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2026-01-12
DOI
https://doi.org/10.5281/zenodo.18219257
Primary Topic
Adversarial Robustness in Machine Learning
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

The Velado Bound: A Geometric Lower Bound on Adversarial Detectability via Fisher-Rao Information Geometry

Rafael Velado
Zenodo (CERN European Organization for Nuclear Research)
Adversarial Robustness in Machine Learning
article

The Velado Bound: A Geometric Lower Bound on Adversarial Detectability via Fisher-Rao Information Geometry

Rafael Velado
article en

Abstract

We prove a fundamental lower bound on adversarial perturbations in conservation-constrained probability systems. For states x, x' on the probability simplex S_n lying in different entropy bands, the product of Fisher-Rao geodesic distance D and semantic impact I satisfies D·I ≥ κ, where κ = (ΔH)²/M emerges from simplex geometry. The bound is derived via Cauchy-Schwarz inequality on the Fisher-Rao manifold and establishes a geometrically forbidden region where high-impact, low-detectability attacks cannot exist. We call this the Adversarial Uncertainty Principle. Empirical validation on H100 GPU confirms the forbidden quadrant {D<0.5, I>0.5} remains empty across 10⁵ trials. Priority: U.S. Provisional Application No. 63/958,306, filed January 12, 2026.

Zenodo (CERN European Organization for Nuclear Research)
Life in Land
Openalex Percentile: Top 91%
Adversarial Robustness in Machine Learning
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.