Bubeck–Li–Nagaraj robustness law for arbitrary-weight two-layer networks

Let ψ\psi be any Lipschitz activation. For x1,,xnx_1,\dots,x_n independent uniform on Sd1\mathbb{S}^{d-1} (or distributed as N(0,Id/d)N(0,I_d/d)) and y1,,yny_1,\dots,y_n independent uniform on {1,+1}\{-1,+1\}, let Nm\mathcal{N}_m denote the class of width-mm two-layer networks with arbitrary real weights, biases, and affine skip connection. With high probability, any fNmf\in\mathcal{N}_m fitting the data satisfies

LipSd1(f)cn/m.\operatorname{Lip}_{\mathbb{S}^{d-1}}(f)\ge c\sqrt{n/m}.

Bubeck–Li–Nagaraj conjecture. The stated lower bound should hold for every Lipschitz activation and arbitrary weights, with no restriction on their magnitudes. The conjecture quantifies the robustness cost of fitting random noisy labels with a finite-width two-layer network. The paper proves the conjectured law up to one logarithmic factor for continuous piecewise-linear activations, including ReLU, while the general-activation case remains open in several width and dimension regimes.

Sources & referencesView supporting material

Primary source

Yitzchak Shmalo, “A law of robustness for two-layer neural networks with arbitrary weights”, arXiv:2607.07778 (2026).

Progress summary

Never refreshed

Nothing recorded yet. Refresh searches the literature and the public web for attempts on this problem, and writes the first summary here.

Solutions 0

No solutions have been posted yet.