Title: GRADIENTS EXPLODE -DEEP NETWORKS ARE SHALLOW -RESNET EXPLAINED

Abstract: Whereas it is believed that techniques such as Adam, batch normalization and, more recently, SeLU nonlinearities "solve" the exploding gradient problem, we show that this is not the case in general and that in a range of popular MLP architectures, exploding gradients exist and that they limit the depth to which networks can be effectively trained, both in theory and in practice. We explain why exploding gradients occur and highlight the collapsing domain problem, which can arise in architectures that avoid exploding gradients. ResNets have significantly lower gradients and thus can circumvent the exploding gradient problem, enabling the effective training of much deeper networks, which we show is a consequence of a surprising mathematical property. By noticing that any neural network is a residual network, we devise the residual trick, which reveals that introducing skip connections simplifies the network mathematically, and that this simplicity may be the major cause for their success.

1. INTRODUCTION:

Arguably, the primary reason for the recent success of neural networks is their "depth", i.e. their ability to compose and jointly train nonlinear functions so that they co-adapt. A large body of work has detailed the benefits of depth (e.g. Montafur et al. (2014) ; Delalleau & Bengio (2011) ; Martens et al. (2013) ; Bianchini & Scarselli (2014) ; Shamir & Eldan (2015) ; Telgarsky (2015) ; Mhaskar & Shamir (2016) ).

The exploding gradient problem has been a major challenge for training very deep feedforward neural networks at least since the advent of gradient-based parameter learning (Hochreiter, 1991) . In a nutshell, it describes the phenomenon that as the gradient is backpropagated through the network, it may grow exponentially from layer to layer. This can, for example, make the application of vanilla SGD impossible for networks beyond a certain depth. Either the step size is too large for updates to lower layers to be useful or it is too small for updates to higher layers to be useful. While this intuitive notion is widely understood, there are important gaps in the foundational understanding of this phenomenon. In this paper, we take a significant step towards closing those gaps.

To begin with, there is no well-accepted metric for determining the presence of pathological exploding gradients. Should we care about the length of the gradient vector? Should we care about the size of individual components of the gradient vector? Should we care about the eigenvalues of the Jacobians of individual layers? Depending on the metric used, different strategies arise for combating exploding gradients. For example, manipulating the width of layers a suggested by e.g. Anonymous (2018d) ; Han et al. (2017) can greatly impact the size of gradient vector components but leaves the length of the gradient vector relatively unchanged.

The underlying problem is that it is unknown whether exploding gradients according to any of these metrics necessarily lead to training difficulties. There is a large body of evidence that gradient explosion defined by some metric when paired with some optimization algorithm on some architectures and datasets is associated with poor results (e.g. Schoenholz et al. (2017) ; Yang & Schoenholz (2017) ). But, can we make general statements about entire classes of algorithms and architectures? Algorithms such as RMSprop (Tieleman & Hinton, 2012) , Adam (Kingma & Ba, 2015) or vSGD (Schaul et al., 2013) are light modifications of SGD that rescale different parts of the gradient vector and are known to be able to lead to improved training outcomes. This raises an another important unanswered question. Are exploding gradients merely a numerical quirk to be overcome by simply rescaling different parts of the gradient vector or are they reflective of an inherently difficult optimization problem that cannot be easily tackled by simple modifications to a stock algorithm? It has become a common notion that techniques such as introducing normalization layers (e.g. Ioffe & Szegedy (2015) , Ba et al. (2016) , Chunjie et al. (2017) , Salimans & Kingma (2016) ) or careful initial scaling of weights (e.g. He et al. (2015) , Glorot & Bengio (2015) , Saxe et al. (2014) , Mishking & Matas (2016) ) largely eliminate exploding gradients by stabilizing forward activations. This notion was espoused in landmark papers. The paper that introduced batch normalization (Ioffe & Szegedy, 2015) states:

In traditional deep networks, too-high learning rate may result in the gradients that explode or vanish, as well as getting stuck in poor local minima. Batch Normalization helps address these issues.

The paper that introduced ResNet (He et al., 2016b) states:

Is learning better networks as easy as stacking more layers? An obstacle to answering this question was the notorious problem of vanishing/exploding gradients, which hamper convergence from the beginning. This problem, however, has been largely addressed by normalized initialization and intermediate normalization layers, ... We argue that these claims are overly optimistic. While scaling weights or normalizing forward activations can reduce gradient growth defined according to certain metrics in certain situations, these techniques are not effective in general and can cause other problems even when they are effective. We intend to add nuance to these ideas which have been widely adopted by the community (e.g. Chunjie et al. (2017) ; Balduzzi et al. (2017) ). In particular, we intend to correct the misconception that stabilizing forward activations is sufficient for avoiding exploding gradients (e.g. Klambauer et al. (2017) ).

ResNet (He et al., 2016b) and other neural network architectures utilizing skip connections (e.g. Huang et al. (2017) , Szegedy et al. (2016) ) have been highly successful recently. While the performance of networks without skip connections starts to degrade when depth is increased beyond a certain point, the performance of ResNet continues to improve until a much greater depth is reached. While favorable changes to properties of the gradient brought about by the introduction of skip connections have been demonstrated for specific architectures (e.g. Yang & Schoenholz (2017) ; Balduzzi et al. (2017) ), a general explanation for the power of skip connections has not been given.

Our contributions are as follows:

1. We introduce the 'gradient scale coefficient' (GSC), a novel measurement for assessing the presence of pathological exploding gradients (section 2). It is robust to confounders such as network scaling (section 2) and layer width (section 3) and can be used directly to show that training is difficult (section 4). Therefore, we propose the unification of research on the exploding gradient problem under this metric.

2. We demonstrate that exploding gradients are in fact present in a variety of popular MLP architectures, including architectures utilizing techniques that supposedly combat exploding gradients. We show that introducing normalization layers may even exacerbate the exploding gradient problem (section 3).

3. We show that exploding gradients as defined by the GSC are not a numerical quirk to be overcome by rescaling different parts of the gradient vector, but are indicative of an inherently complex optimization problem and that they limit the depth to which MLP archi-tectures can be effectively trained, rendering very deep MLPs effectively much shallower (section 4). To our knowledge, this is the first time such a link has been established.

4.:

For the first time, we show why exploding gradients are likely to occur in deep networks even when the forward activations do not explode (section 5). We argue that this is a fundamental reason for the difficulty of constructing very deep trainable networks.

5. For the first time, we define the 'collapsing domain problem' for training very deep feedforward networks. We show how this problem can arise precisely in architectures that avoid exploding gradients via careful initial scaling of weights and that it can be at least as damaging to the training process (section 6).

6. For the first time, we show that the introduction of skip connections has a strong gradientreducing effect on deep network architectures in general. We detail the surprising mathematical relationship that makes this possible (section 7).

7. We introduce the 'residual trick' (section 4), which reveals that ResNets are a mathematically simpler version of networks without skip connections and thus approximately achieve what we term the 'orthogonal initial state'. This provides, we argue, the major reason for their superior performance at great depths as well as an important criterion for neural network design in general (section 7).

In section 8, we conclude and derive practical recommendations for designing and training deep networks as well as key implications of our work for deep learning research.

In the appendix in section B, we provide further high-level discussion. In section B.1, we discuss related work including the relationship of exploding gradients with other measures of network trainability, such as eigenspectrum analysis (Saxe et al., 2014) , shattering gradients (Balduzzi et al., 2017) , trajectory lengths (Raghu et al., 2017) , covariate shift (e.g. (Ioffe & Szegedy, 2015) ) and Hessian conditioning (e.g. (Luo, 2017) ). Recently, the behavior of neural networks at great depth was analyzed using mean field theory (Poole et al., 2016; Schoenholz et al., 2017; Yang & Schoenholz, 2017; Anonymous, 2018d) and dynamical systems theory (Haber et al., 2017; Haber & Ruthotto, 2017; Chang et al., 2017; Anonymous, 2018a) . We discuss these lines of work in relation to this paper in sections B.1.1 and B.1.2 respectively. We discuss the implications of our work for the vanishing gradient problem in section B.2. We compare the exploding gradient problem as it occurs in feedforward networks to the exploding and vanishing gradient problems in RNNs (e.g. Pascanu et al. (2013) ) in section B.3. In section B.4, we highlight open research questions and potential future work.

2 EXPLODING GRADIENTS DEFINED -THE GRADIENT SCALE COEFFICIENT

2.1. NOTATION AND TERMINOLOGY:

For the purpose of this paper, we define a neural network f as a succession of layers f l , 0 ≤ l ≤ L, where each layer is a vector-to-vector transformation. We assume a prediction framework, where the 'prediction layer' f 1 is considered to output the prediction of the network and the goal is to minimize the value of the error layer f 0 over the network's prediction and the true label y, summed over some dataset D.

EQUATION

Note that in contrast to standard notation, we denote by f L the lowest layer and by f 0 the highest layer of the network as we are primarily interested in the direction of gradient flow. Let the dimensionality / width of layer l be d l with d 0 = 1 and the dimensionality of the data input x be d.

Each layer except f 0 is associated with a parameter sub-vector θ l that collectively make up the parameter vector θ = (θ 1 , .., θ L ). This vector represents the trainable elements of the network. Depending on the type of the layer, the sub-vector might be empty. For example, a layer composed of tanh nonlinearities has no trainable elements, so its parameter sub-vector is empty. We call these layers 'unparametrized'. In contrast, a fully-connected linear layer has trainable weights, which are encompassed in the parameter sub-vector. We call these layers 'parametrized'.

We say a network that has layers f 0 through f L has 'nominal depth' L. In contrast, we say the 'compositional depth' is equal to the number of parametrized layers in the network, which is the quantity that is commonly referred to as "depth". For example, a network composed of three linear layers, two tanh layers and a softmax layer has nominal depth 6, but compositional depth 3.

Let the 'quadratic expectation' Q of a random variable X be defined as

Q[X] = E[X 2 ]

1 2 , i.e. the generalization of the quadratic mean to random variables. Similarly, let the 'inverse quadratic expectation' Q -1 of a random variable X be defined as Q[X] = E[X -2 ] -1 2 . Further terminology, notation and conventions used only in the appendix are given in section C.

2.2. COLLOQUIAL NOTION OF EXPLODING GRADIENTS:

Colloquially, the exploding gradient problem is understood approximately as follows:

When the error is backpropagated through a neural network, it may increase exponentially from layer to layer. In those cases, the gradient with respect to the parameters in lower layers may be exponentially greater than the gradient with respect to parameters in higher layers. This makes the network hard to train if it is sufficiently deep.

Let J l k (θ, x, y) be the Jacobian of the l'th layer f l with respect to the k'th layer f k evaluated with parameter θ at (x, y), where 0 ≤ l ≤ k ≤ L. Similarly, let T l k (θ, x, y) be the Jacobian of the l'th layer f l with respect to the parameter sub-vector of the k'th layer θ k . Then we might take this colloquial notion to mean that if ||J l k || and / or ||T l k || grow exponentially in k -l, according to some to-be-determined norm ||.||, the network is hard to train if it is sufficiently deep.

However, this notion is insufficient because we can construct networks that can be trained successfully yet have Jacobians that grow exponentially at arbitrary rates. In a nutshell, all we have to do to construct such a network is to take an arbitrary network of desired depth that can be trained successfully and scale each layer function f l and each parameter sub-vector θ l by R -l for some constant R > 1. During training, all we have to do to correct for this change is to scale the gradient sub-vector corresponding to each layer by R -2l . Proposition 1. Consider any r > 1 and any neural network f which can be trained to some error level in a certain number of steps by some gradient-based algorithm. There exists a network f that can also be trained to the same error level as f and to make the same predictions as f in the same number of steps by the same algorithm, and has exponentially growing Jacobians with rate r. (See section E.1 for details.)

Therefore, we need a definition of 'exploding gradients' different from 'exponentially growing Jacobians' if we hope to derive from it that training is intrinsically hard and not just a numerical issue to be overcome by gradient rescaling.

Note that all propositions and theorems are stated informally in the main body of the paper, for the purpose of readability and brevity. In the appendix in sections E and F respectively, they are re-stated in rigorous terms, proofs are provided and the practicality of conditions is discussed.

2.3. THE GRADIENT SCALE COEFFICIENT:

In this section, we outline our definition of 'exploding gradients' which can be used to show hardness of training. It does not suffer from the confounding effect outlined in the previous section.

Definition 1. Let the 'quadratic mean norm' or 'qm norm' of an m × n matrix A be the quadratic mean of its singular values where the sum of squares is divided by its right dimension n. If s 1 , s 2 , .., s min(m,n) are the singular values of A, we write:

||A|| qm = s 2 1 + s 2 2 + .. + s 2 min(m,n) n

An equivalent definition would be ||A|| qm = Q u ||Au|| 2 , where u is a uniformly random unit length vector. In plain language, it measures the expected impact the matrix has on the length of a vector with uniformly random orientation. The qm norm is closely related to the L 2 norm via √ n||A|| qm = ||A|| 2 . We use ||.|| 2 to denote the L 2 norm of both vectors and matrices.

Definition 2. Let the 'gradient scale coefficient (GSC)' for 0 ≤ l ≤ k ≤ L be as follows:

GSC(k, l, f, θ, x, y) = ||J l k || 2 qm ||f k || 2 2 ||f l || 2 2

Definition 3. We say that the network f (θ) has 'exploding gradients with rate r and intercept c' at some point (x, y) if for all k and l we have GSC(k, l, f, θ, x, y) ≥ cr k-l , and in particular GSC(l, 0, f, θ, x, y) ≥ cr l .

Of course, under this definition, any network of finite depth has exploding gradients for sufficiently small c and r. There is no objective threshold for c and r beyond which exploding gradients become pathological. Informally, we will say that a network has 'exploding gradients' if the GSC can be well-approximated by an exponential function.

The GSC combines the norm of the Jacobian with the ratio of the lengths of the forward activation vectors. In plain language, it measures the size of the gradient flowing backward relative to the size of the activations flowing forward. Equivalently, it measures the relative sensitivity of layer l with respect to small random changes in layer k.

Proposition 2. GSC(k, l) measures the quadratic expectation of the relative size of the change in the value of f l in response to a small random change in f k . (See section E.2 for details.)

What about the sensitivity of layers with respect to the parameter? For fully-connected linear layers, we obtain a similar relationship.

Proposition 3. When f k is a fully-connected linear layer without trainable bias parameters and θ k contains the entries of the weight matrix, GSC(k, l)

||θ k ||2||f k+1 ||2 ||f k ||2 √ d k+1

measures the quadratic expectation of the relative size of the change in the value of f l in response to a small random change in θ k . Further, if the weight matrix is randomly initialized, Q -1

θ k ||θ k ||2||f k+1 ||2 ||f k ||2 √ d k+1 = 1. (See section E.3 for details.)

For reasons of space and mathematical simplicity, we focus our analysis for now on multi-layer perceptrons (MLPs) which are comprised only of fully-connected linear layers with no trainable bias parameters, and unparametrized layers. Therefore we also do not use trainable bias and variance parameters in the normalization layers. Note that using very deep MLPs with some architectural limitations as a testbed to advance the study of exploding gradients and related problems is a wellestablished practice (e.g. Balduzzi et al. (2017) ; Yang & Schoenholz (2017) ; Raghu et al. (2017) ).

As Schoenholz et al. (2017) , we focus on training error rather than test error in our analysis as we do not consider the issue of generalization. While exploding gradients have important implications for generalization, this goes beyond the scope of this paper.

In section 2.2, we showed that we can construct trainable networks with exponentially growing Jacobians by simple multiplicative rescaling of layers, parameters and gradients. Crucially, the GSC is invariant to this rescaling as it affects both the forward activations and the Jacobian equally, so the effects cancel out.

Proposition 4. GSC(k, l) is invariant under multiplicative rescalings of the network that do not change the predictions or error values of the network. (See section E.4 for details.)

3. GRADIENTS EXPLODE -DESPITE BOUNDED ACTIVATIONS:

In this section, we show that exploding gradients exist in a range of popular MLP architectures. Consider the decomposability of the GSC. 

J l+1 l+2 ..J k-1 k || qm ≈ ||J l l+1 || qm ||J l+1 l+2 || qm ..||J k-1 k || qm , we have GSC(k, l) ≈ GSC(k, k -1)GSC(k -1, k -2).

.GSC(l + 1, l). (See section E.5 for the proof.)

This suggests that as long as the GSC of individual layers is approximately r > 1, we may have an exponential growth of GSC(k, l) in k -l. In figure 1A , we show GSC(l, 0) for seven MLP architectures. A linear layer is followed by (i) a ReLU nonlinearity ('ReLU'), (ii) layer normalization (Ba et al., 2016) followed by a ReLU nonlinearity ('layer-ReLU'), (iii) batch normalization plus ReLU ('batch-ReLU'), (iv) tanh, (v) layer norm plus tanh ('layer-tanh'), (vi) batch norm plus tanh ('batch-tanh'), (vii) SeLU Klambauer et al. (2017) . All networks have compositional depth 50 (i.e. 50 linear layers) and each layer has 100 neurons. Both data input and labels are Gaussian noise and the error layer computes the dot product between the label and the prediction. The entries of weight matrices are dawn from independent Gaussian distributions with mean zero. Weight matrix entries for ReLU architectures are initialized with variance 2 100 as suggested by He et al. (2015) , weight matrix entries for tanh architectures with variance 1 100 as suggested by Saxe et al. (2014) and Glorot & Bengio (2015) , and weight matrix entries for SeLU architectures with variance 1 100 as suggested by Klambauer et al. (2017) . For further experimental details, see section I.

We find that in four architectures (batch-ReLU, layer-tanh, batch-tanh and SeLU), GSC(l, 0) grows almost perfectly linearly in log-space. This corresponds to gradient explosion. We call those architectures 'exploding architectures'. Among these architectures, a range of techniques that supposedly reduce or eliminate exploding gradients are used: careful initial scaling of weights, normalization layers, SeLU nonlinearities. Adding normalization layers may even bring about or exacerbate exploding gradients. The exploding architectures have all been designed to have stable forward activations and they exhibit gradient explosion under any reasonable metric.

In light of proposition 4, it is not surprising that these techniques are not effective in general at combating exploding gradients as defined by the GSC, as this metric is invariant under multiplicative rescaling. Normalization layers are used to scale the activations. Carefully choosing the initial scale of weights corresponds to a multiplicative scaling of weights. SeLU nonlinearities, again, act to scale down large activations and scale up small activations. While these techniques may of course impact the GSC by changing the fundamental mathematical properties of the network (as can be seen, for example, when comparing ReLU and batch-ReLU), they do not reduce it simply by virtue of controlling the size of forward activations.

In contrast, the other three architectures (ReLU, layer-ReLU and tanh) do not exhibit exploding gradients. However, this apparent advantage comes at a cost, as we further explain in section 5.

All curves in figure 1A exhibit small jitters. This is because we plotted the value of the GSC at every linear layer, every normalization layer and every nonlinearity layer in the graph and then connected the points corresponding to these values. Layers were placed equispaced on the x axis in the order they occurred in the network. Not every type of layer affects the GSC equally. In fact, we find that as gradients pass through linear layers, they tend to shrink relative to forward activations. In the exploding architectures, this is more than counterbalanced by the relative increase the gradient experience as it passes through e.g. normalization layers. Despite these layer-dependent differences, it is worth noting that each individual layer used in the architectures studied has only a small impact on the GSC. This would not be true for either the forward activations or gradients taken by themselves. For example, passing through a ReLU layer reduces the length of both activation and gradient vector by ≈ √ 2. This relative invariance to individual layers suggests that the GSC measures not just a superficial quantity, but a deep property of the network. This hypothesis is confirmed in the following sections.

Finally, we note that the GSC is also robust to changes in width and depth. Changing the depth has no impact on the rate of explosion of the four exploding architectures as the layer-wise GSC, i.e. GSC(l + 1, l), is itself independent of depth. In figure 1A , we also show the results for the SeLU architecture where each layer contains 200 neurons instead of 100 ('SeLU wide'). We found that the rate of gradient explosion decreases slightly when width increases. We also studied networks with exploding architectures where the width oscillated from layer to layer. GSC(k, 0) still increased approximately exponentially and at a similar rate to corresponding networks with constant width.

A summary of results can be found in table 1.

4. EXPLODING GRADIENTS LIMIT DEPTH -THE RESIDUAL TRICK:



4.1. BACKGROUND: EFFECTIVE DEPTH:

In this section, we introduce the concept of 'effective depth' as defined for the ResNet architecture by Veit et al. (2016) . We denote a residual network by writing each layer f l (except f 0 ) as the sum of a fixed initial function i l and a residual function r l . We define the optimization problem for a residual net analogously to equation 1.

arg min θ E, where E = 1 |D| (x,y)∈D f 0 (y, (i 1 + r 1 (θ 1 )) • (i 2 + r 2 (θ 2 )) • .. • (i L + r L (θ L )) • x) (2)

Let's assume for the sake of simplicity that the dimension of each layer is identical. In that case, the initial function for ResNet is generally chosen to be the identity function. Then, writing the identity matrix as I, we have

df 0 dx = df 0 df 1 (I + dr 1 df 2 )(I + dr 2 df 3 )..(I + dr L-1 df L )(I + dr L dx )

Multiplying out, this becomes the sum of 2 L terms. Almost all of those terms are the product of approximately L 2 identity matrices and L 2 residual Jacobians. However, if the operator norm of the residual Jacobians is less than p for some p < 1, the norm of terms decreases exponentially in the number of residual Jacobians they contain. Let the terms in df0 dx containing λ or more residual Jacobians be called 'λ-residual' and let res λ be the sum of all λ-residual terms. Then:

||res λ || 2 ≤ || df 0 df 1 || 2 L l=λ p l L l

Again, if p < 1, the right hand side decreases exponentially in λ for sufficiently large λ, for example when λ > L 2 , so the combined size of λ-residual terms is exponentially small. Therefore, Veit et al. (2016) argue, the full set of network layers does not jointly co-adapt during training because the information necessary for such co-adaption is contained in terms that contain many or all residual Jacobians. Only sets of layers of size at most λ where res λ is not negligably small co-adapt. The largest such λ is called the 'effective depth' of the network. Veit et al. (2016) argue that if the effective depth is less than the compositional depth of a residual network, the network is not really as deep as it appears, but rather behaves as an ensemble of relatively shallow networks. This argument is bolstered by the success of the stochastic depth (Huang et al., 2016) training technique, where random sets of residual functions are deleted for each mini-batch update. Veit et al. (2016) introduced the concept of effective depth somewhat informally. We give our formal definition in section D. There, we also provide a more detailed discussion of the concept and point out limitations.

4.2. THE RESIDUAL TRICK:

Now we make a crucial observation. Any neural network can be expressed as a residual network as defined in 2. We can simply choose arbitrary initial functions i l and define r l (θ l ) := f l (θ l ) -i l . Specifically, if we train a network f from some fixed initial parameter θ (0) , we can set i l := f l (θ

(0) l ) and thus r l (θ l ) := f l (θ l ) -f l (θ (0) l ).

Then training begins with all residual functions being zero functions. Therefore, all analysis devised for ResNet that relies on the small size of the residual Jacobians can then be brought to bear on arbitrary networks. We term this the 'residual trick'. Indeed, the analysis by Veit et al. (2016) does not rely on the network having skip connections in the computational sense, but only on the mathematical framework of equation 2. Therefore, as long as the operator norms of df l (θ l ) df l+1 -

df l (θ (0) l )

df l+1 are small, f is effectively shallow.

Terminology From now on, we will make a distinction between the terms 'ResNet' and 'residual network'. The former will be used to refer to networks that have an architecture as in He et al. (2016b) that uses skip connections. The latter will be used to refer to arbitrary networks expressed in the framework of equation 2. Networks without skip connections will be referred to as 'vanilla networks'.

4.3. THEORETICAL ANALYSIS:

In this section, we will show that an exploding gradient as defined by the GSC causes the effective training time of deep MLPs to be exponential in depth and thus limits the effective depth that can be achieved.

The proof is based on the insight that the relative size of a gradient-based update ∆θ l on θ l is bounded by the inverse of the GSC if that update is to be useful. The basic assumption underlying gradient-based optimization is that the function optimized is locally approximated by a linear function as indicated by the gradient. Any update made based on a local gradient computation must be small enough so that the updated value lies in the region around the original value where the linear approximation is sufficiently accurate. Let's assume we apply a random update to θ l with relative magnitude 1 GSC(0,l) , i.e. ||∆θ l ||2 ||θ l ||2 = 1 GSC(0,l) . Then under the local linear approximation, according to proposition 3, this would change the output f 0 approximately by a value with quadratic expectation f 0 . Hence, with significant probability, the error would become negative. This is not reflective of the true behavior of the function f 0 in response to changes in θ l of this magnitude. Since gradient-based updates impact the function value even more than random updates, useful gradientbased updates are even more likely to be bounded in relative magnitude by

1 GSC(0,l) .

In a nutshell, if 1 GSC(0,l) decreases exponentially in l, so must the relative size of updates. So for a residual function to reach a certain size relative to the corresponding initial function, an exponential number of updates is required. But to reach a certain effective depth, a certain magnitude of λresidual terms is required and thus a certain magnitude of residual functions relative to corresponding initial functions is required, and thus exponentially many updates. Theorem 1. Under certain conditions, if an MLP has exploding gradients with explosion rate r and intercept c on some dataset, then there exists a constant c such that training this neural network with a gradient-based algorithm to have effective depth λ takes at least c cr λ 4 updates. (See section F.1 for details.)

Importantly, the lower bound on the number of updates required to reach a certain effective depth stated by theorem 1 is independent of the nominal depth of the network. While the constant c depends on some constants that arise in the conditions of the theorem, as long as those constants do not change when depth is increased, neither does the lower bound. Corollary 1. In the scenario of theorem 1, if the number of updates to convergence is bounded, so is effective depth.

Here we simply state that if we reach convergence after a certain number of updates, but theorem 1 indicates that more would be required to attain a greater effective depth, then that greater effective depth is unreachable with that algorithm.

4.4. EXPERIMENTS:

To practically validate our theory of limited effective depth, we train our four exploding architectures (batch-ReLU, layer-tanh, batch-tanh and SeLU) on CIFAR10. All networks studied have a compositional depth of 51 (i.e. 51 linear layers) and 100 neurons in each layer except for the input, prediction and error layers. Full experimental details can be found in section I.

First, we determined the approximate best step size for SGD for each individual linear layer. We started by pre-training the highest layers of each network with a small uniform step size until the training classification error was below 85%, but at most for 10 epochs. Then, for each linear layer, we trained only that layer for 1 epoch with various step sizes while freezing the other layers. The step size that achieved the lowest training classification error after that epoch was selected. Note that we only considered step sizes that induce relative update sizes of 0.1 or less, because larger updates can cause weight instability. The full algorithm for step size selection and a justification is given in section I.4.

In figure 2A , we show the relative update size induced on each linear layer by what was selected to be the best step size as well as 1 GSC(l,0) as a dashed line. In section 4.3, we argued that 1 GSC(l,0) is an upper bound for the relative size of a useful update. We find that this bound holds and is conservative except for a small number of outliers. Even though our algorithm for determining the best step size for each layer gives noisy results, there is a clear trend that lower layers require relatively smaller updates, and that this effect is more pronounced if the gradient explodes with a larger rate. Therefore the foundational assumption underlying theorem 1 holds.

We then smoothed these best step size estimates and trained each network for 500 epochs with those smoothed estimates. Periodically, we scaled all step sizes jointly by 1 3 . In figure 2B , we show the training classification error of each architecture. There is a trend that architectures with less gradient explosion attain a lower final error. Note that, of course, all these error values are still much higher than the state of the art on CIFAR10. This is not a drawback however, as the goal of this section is to study and understand pathological architectures rather than find optimal ones. Those architectures, by definition, attain high errors.

In figure 2C , we show the GSC across the entire network, i.e. GSC(L, 0), as training progresses.

During the initial pre-training phase, this value drops significantly but later regains or even exceeds its original value. In figure 2A , the dashed line indicates the inverse of GSC(l, 0) for each l after pre-training. We find that the GSC actually falls below 1 as the gradient passes through the pretrained layers, but then resumes explosion once it reached the layers that were not pre-trained. We find this behavior surprising and unexpected. We conclude that nonstandard training procedures can have a significant impact on the GSC but that there is no evidence that when all layers are trained jointly, which is the norm, the GSC either significantly increases or decreases during training.

We then went on to measure the effective depth of each network. We devised a conservative, computationally tractable estimate of the cumulative size of updates that stem from λ-residual terms. See section D.2 for details. The effective depth depicted in figure 2D is the largest value of λ such that this estimate has a length exceeding 10 -6 . As expected, none of the architectures reach an effective depth equal to their compositional depth, and there is a trend that architectures that use relatively smaller updates achieve a lower effective depth. It is worth noting that the effective depth increases most sharply at the beginning of training. Once all step sizes have been multiplied by 1 3 several times, effective depth no longer changes significantly while the error, on the other hand, is still going down. This suggests that, somewhat surprisingly, high-order co-adaption of layers takes place towards the beginning of training and that as the step size is reduced, layers are fine-tuned relatively independently of each other.

SeLU and especially tanh-batch reach an effective depth close to their compositional depth according to our estimate. In figure 2E , we show the operator norm of the residual weight matrices after training. All architectures except SeLU, which has a GSC(L, 0) close to 1 after pre-training, show a clear downward trend in the direction away from the error layer. If this trend were to continue for networks that have a much greater compositional depth, then those networks would not achieve an effective depth significantly greater than our 51-linear layer networks. Veit et al. (2016) argue that a limited effective depth indicates a lack of high-order co-adaptation. We wanted to verify that our networks, especially layer-tanh and batch-ReLU, indeed lack these highorder co-adaptations by using a strategy independent of the concept of effective depth to measure this effect. We used Taylor expansions to do this. Specifically, we replaced the bottom k layers of the fully-trained networks by their first-order Taylor expansion around the initial functions. See section G for how this is done. This reduces the compositional depth of the network by k -2. In figure 2F , we show the training classification error in response to compositional depth reduction. We find that the compositional depth of layer-tanh and batch-ReLU can be reduced enormously without suffering a significant increase in error. In fact, the resulting layer-tanh network of compositional depth 15 greatly outperforms the original batch-tanh and batch-ReLU networks. This confirms that these networks lack high-order co-adaptations. Note that cutting the depth by using the Taylor expansion not only eliminates high-order co-adaptions among layers, but also co-adaptions of groups of 3 or more layers among the bottom k layers. Hence, we expect the increase in error induced by removing only high-order co-adaptions to be even lower than what is shown in figure 2F . Unfortunately, this cannot be tractably computed.

Finally, we trained each of the exploding architectures by using only a single step size for each layer that was determined by grid search, instead of custom layer-wise step sizes. As expected, the final error was higher. The results are found in table 2.

4.5. A NOTE ON BATCH NORMALIZATION:

We used minibatches of size 1000 to train all architectures except batch-ReLU, for which we conducted full-batch training. When minibatches were used on batch-ReLU, the training classification error stayed above 89% throughout training. (Random guessing achieves a 90% error.) In essence, no learning took place. This is because of the pathological interplay between exploding gradients and the noise inherent in batch normalization. Under batch normalization, the activations at a neuron are normalized by their mean and standard deviation. These values are estimated using the current batch. Hence, if a minibatch has size b, we expect the noise induced by this process to have relative size ≈1 √ b . But we know that according to proposition 2, under the local linear approximation, this noise leads to a change in the error layer of relative size ≈ GSC √ b . Hence, if the GSC between the error layer and the first batch normalization layer is larger than √ b, learning should be seriously impaired. For the batch-ReLU architecture, this condition was satisfied and consequently, the architecture was untrainable using minibatches. Ironically, the gradient explosion that renders the noise pathological was introduced in the first place by adding batch normalization layers. Note that techniques exist to reduce the dependence of batch normalization on the current minibatch, such as using running averages (Ioffe, 2017) . Other prominent techniques that induce noise and thus can cause problems in conjunction with large gradients are dropout Srivastava et al. (2014) , stochastic nonlinearities (e.g. Gulcehre et al. (2016) ) and network quantization (e.g. (Anonymous, 2018c) ).

5. WHY GRADIENTS EXPLODE -DETERMINANTS VS QM NORM:

Why do exploding gradients occur? As mentioned in section 3, gradients explode with rate r > 1 as long as we have (A) GSC(k, l) ≈ GSC(l + 1, 1)GSC(l + 2, l + 1)..GSC(k, k -1) and (B) GSC(l + 1, 1) ≈ r for all k and l. It turns out that we can show both of these hold in expectation under fairly realistic conditions if we view the network parameter as a random variable.

Theorem 2. Under certain conditions, for any neural network f with random parameter θ composed of layer functions f l that are surjective endomorphisms on the hypersphere, where the absolute singular values of the Jacobian of each layer are IID and differ by at least with probability δ, gradients explode in expectation with rate r(δ, ). (See section F.2 for details.) Proof Summary. Consider a surjective endomorphism f l on the hypersphere and a random input x distributed uniformly on that hypersphere. Surjectivity implies that the absolute determinant of the Jacobian, in expectation over the input, is at least 1. The absolute determinant is the product of the absolute singular values. If those absolute singular values are IID and their expected product is at least 1, the expectation of each absolute singular value is also at least 1. So if these singular values are sufficently different from each other with sufficient probability, the expected quadratic mean of the singular values is at least r > 1. Since both input and output of f l have length 1, the expected GSC will also be at least r.

While the conditions of theorem 2 cannot be fulfilled exactly, it nevertheless reveals an important insight. Exploding gradients tend to arise in practice even when forward activations are stable because in order to preserve the domain of the forward activations from layer to layer, Jacobians of individual layers need to have unit absolute determinants in expectation, and this tends to cause their qm norm values to be greater than 1, and then these values tend to compound exponentially. 1 The theorem is stated for layers that are surjective endomorphisms on the hypersphere. Let 'length-only layer normalization' (LOlayer) be a function that divides its input vector by its length. Then a sequence of a tanh / SeLU layer, a linear layer and a LOlayer layer, all of the same width, when viewed as a single macro-layer, is a surjective endomorphism on the hypersphere, as shown in proposition 6. Consequently, both LOlayer-tanh and LOlayer-SeLU exhibit exploding gradients (table 1). Layer-tanh and SeLU explode at very similar rates to LOlayer-tanh and LOlayer-SeLU respectively. Proposition 6. Any endomorphism on the hypersphere composed of (i) a strictly monotonic, continuous nonlinearity σ that has σ(0) = 0, (ii) multiplication with a full-rank matrix and (iii) length-only layer normalization is bijective. (See section E.6 for the proof.)

Theorem 2 presents two clear avenues for avoiding exploding gradients: (i) use non-surjective layer functions, (ii) ensure that Jacobians get progressively closer to multiples of orthogonal matrices as we go deeper. It turns out that these are exactly the strategies employed by ReLU and ResNet respectively to avoid exploding gradients, and we will discuss these in the next two sections.

6. THE COLLAPSING DOMAIN PROBLEM -HOW NOT TO REDUCE GRADIENTS:

In the previous section, we showed how surjective endomorphisms can exhibit exploding gradients. This suggests that we can avoid exploding gradients by non-surjectivity, i.e. if we reduce the domain of the forward activations from layer to layer. Informally, this can be understood as follows. Consider some layer function f l . If we shrink its co-domain by a factor c, we reduce the eigenvalues of the Jacobian and hence its qm norm by c. If we also ensure that the length of the output stays the same, the GSC is also reduced by c. Similarly, inflating the co-domain would cause the qm norm to increase. This suggests that in neural network design, we can actively trade off exploding gradients and shrinkage of the domain and that eliminating one effect may exacerbate the other. This is precisely what we find in practice. Returning to figure 1 , we now turn our attention to the middle graph (1B). Here, we plot the standard deviation of the activation values at each neuron across datapoints in the layers before each nonlinearity layer ('pre-activations'), averaged over all neurons in the same layer. The four exploding architectures exhibit a near constant standard deviation, whereas the other three architectures (ReLU, layer-ReLU and tanh) exhibit a rapidly collapsing standard deviation, which shows that the activations corresponding to different datapoints become more and more similar with depth. We term a layer-to-layer shrinkage of the domain the 'collapsing domain problem'. But why is this effect a problem? Two reasons.

Collapsing depth causes pseudo-linearity If the pre-activations that are fed into a nonlinearity are highly similar, the nonlinearity can be well-approximated by a linear function. In the tanh architecture we studied, for example, activation values become smaller and smaller as they are propagated forward. If the pre-activations of a tanh nonlinearity have small magnitude, the tanh nonlinearity can be approximated by the identity function. But if a tanh layer is approximately equal to an identity layer, the entire network becomes equivalent to a linear network. We say the network becomes 'pseudo-linear'. Of course, linear networks of any depth have the representational capacity of a linear network of depth 1 and are unable to model nonlinear functions. Hence, a tanh network that is pseudo-linear beyond compositional depth k approximately has the representational capacity of a compositional depth k + 1 tanh network. Based on the decrease in pre-activation standard deviation exhibited by the tanh architecture in figure 1B , a reasonable estimate is that the network of compositional depth 50 has the representational capacity of a network of compositional depth 10.

Similarly, for a ReLU nonlinearity, if either all or most pre-activations are positive or all or most pre-activations are negative, the nonlinearity can be approximated by a linear function. If all or most pre-activations are positive, ReLU can be approximated by the identity function. If all or most pre-activations are negative, ReLU can be approximated by the zero function. In figure 1C , we plot the proportion of pre-activations for each neuron in a nonlinearity layer that are positive or negative, whichever is smaller, averaged over each layer. We call this metric 'sign diversity'. For both ReLU and layer-ReLU, sign diversity decreases rapidly to cause pseudo-linearity from at least, say, the 20th linear layer onwards. None of the four exploding architectures suffers a significant loss in sign diversity.

Collapsing depth is exploding gradient in disguise In theorem 1, we used the fact that the output of the error layer of the network was positive to bound the size of a useful gradient-based update. In other words, we used the fact that the domain of the error layer was bounded. However, the collapsing domain problem causes not just a reduction of the size of the domain of the error layer, but of all intermediate layers. Hence, we expect the largest useful update to shrink in proportion with the reduction of the size of the domain. Therefore, we suspect that a collapsing domain will ultimately have the same effect on the largest useful update size of each layer as exploding gradients, that is to reduce them and thus cause a low effective depth.

In table 2, we show the final error values achieved by training ReLU, layer-ReLU and tanh on CIFAR10. The errors are substantially higher than those achieved by the exploding architectures, except for batch-ReLU. Also, training with layer-wise step sizes did not help compared to training with a single step size. In figure 4A , we show the estimated best relative update sizes for each layer. This time, there is no downward trend towards lower layers, which is likely why training with a single step size is "sufficient". Interestingly, we note that the difference between the 1 GSC bound and the empirically optimal relative update sizes is now much larger than it is for the exploding architectures (see figure 2A ). This suggests that indeed, collapsing domains may similarly reduce the optimal relative update size, just as exploding gradients. In figure 4D , we find that again, the effective depth reached is significantly lower than the compositional depth of the network and is comparable to that of architectures with exploding gradients.

In figure 4G and H , we plot the pre-activation standard deviation and sign diversity at the highest nonlinearity layer throughout training. Interestingly, pseudo-linearity declines significantly early in training. The networks become less linear through training.

Summary In neural network design, there is an inherent tension between avoiding exploding gradients and preserving the domain of forward activations. Avoiding one effect can bring about or exacerbate the other. Both effects are capable of severely hampering training. This tension is brought about by the discrepancy of determinant and qm norm of layer-wise Jacobians and is a foundational reason for the difficulty in constructing very deep trainable network.

In this paper, we do not give a rigorous definition of the collapsing domain problem, because it is hard to assess and measure. A number of metrics exist which all apply is somewhat different situations. We already discussed two metrics: pre-activation standard deviation and pre-activation sign diversity. In mean field theory, activation correlation plays a prominent role (section B.1.1). In fact, mean field theory is a formidable tool for statically estimating the properties of specific architectures, such as explosion rate and pre-activation standard deviation. See e.g. Schoenholz et al. (2017) for an anlysis of tanh and Arpit et al. (2016) for an analysis of batch-ReLU. We discuss collapsing domains further in the future work section B.4.

7. RESNET REDUCES THE GRADIENT -AND RESNET EXPLAINED:

ResNet and related architectures that utilize skip connections have been very successful recently. One reason for this is that they can be successfully trained to much greater depths than vanilla networks. In this section, we show how skip connections are able to greatly reduce the GSC and thus largely circumvent the exploding gradient problem. 

(v) = S b v + ρ b (v) and Qv||S b v||2

Qv||ρ b (v)||2 = k. k-dilution expresses the idea that the kinds of functions that f b represents are of a certain form if s b is restricted to matrix multiplication. The larger the value of k, the more ρ b is "diluted" by a linear function, bringing f b itself closer and closer to a linear function. Note that the identity function can be viewed as matrix multiplication with the identity matrix. relatively large amount of gradient reduction, and therefore ResNet can be trained successfully to "unreasonably" great depths for general architectures.

To validate our theory, we repeated the experiments in figure 1 with 5 ResNet architectures: layer-ReLU, batch-ReLU, layer-tanh, batch-tanh and layer-SeLU. Each residual block is bypassed by an identity skip connection and composed of 2 sub-blocks of 3 layers each: first a normalization layer, then a nonlinearity layer, and then a fully-connected layer, similar to He et al. (2016a) ; Zaguroyko & Komodakis (2016) . For further architectural details, see section I.1. Comparing figure 3A to figure 1A , we find the gradient growth is indeed much lower for ResNet compared to vanilla networks, with much of it taking place in the lower layers. In figure 3B we find that the rate of domain collapse for layer-ReLU, as measured by pre-activation sign diversity, is also significantly slowed.

We then went on to check whether the gradient reduction experienced is in line with theorem 3. We measured the dilution level k b and growth rate r b at each residual block b and then replaced the growth rate with 1 + (k 2 b + 1)(r b -1). The result of this post-processing is found in figure 3C. Indeed, the GSC of the exploding architectures now again grows almost linearly in log space, with the exception of batch-ReLU in the lowest few layers. The explosion rates closely track those in figure 1A, though they are slightly higher. This confirms that the estimate of the magnitude of gradient reduction from theorem 3 is quite accurate.

We then repeated the CIFAR10 experiments depicted in figure 2 with our 5 ResNet architectures. The results are shown in figure 5 . As expected, in general, ResNet enables higher relative update sizes, achieves lower error, a higher effective depth and is less "robust" to taylor approximation than vanilla networks. The only exception to this trend is the layer-SeLU ResNet when compared to the SeLU vanilla network, which already has a relatively slowly exploding gradient to begin with. Note that the severe reduction of the GSC persists throughout training (figure 5C ). Also see table 2 to compare final error values. Note that in order to make the effective depth results in figure 5D comparable to those in figure 2D , we applied the residual trick to ResNet. We let the initial function i encompass not just the skip function s, but also the initial block function ρ. Hence, we set

i b = s b + ρ b (θ (0) ) and r b = ρ b (θ) -ρ b (θ (0)

). Note that our effective depth values for ResNet are much higher than those of Veit et al. (2016) . This is because we use a much more conservative estimate of this intractable quantity for both ResNet and vanilla networks.

Gradient reduction is achieved not just by identity skip connections but, as theorem 3 suggests, also by skip connections that multiply the incoming value with a Gaussian random matrix. Results for those skip connections can be found in table 1 . Veit et al. (2016) argues that deep ResNets behave like an ensemble of relatively shallow networks. We argue that comparable vanilla networks often behave like ensembles of even shallower networks. Jastrzebski et al. (2018) argues that deep ResNets are robust to lesioning. Additionally, we argue that comparable vanilla networks are often even more robust to depth reduction when considering the first order Taylor expansion.

7.1. THE LIMITS OF DILUTION:

k-dilution has its limits. Any k-diluted function with large k is close to a linear function. Hence, we can view k-dilution as another form of pseudo-linearity that can damage representational capacity. It also turns out that under similar conditions to those used in theorem 3, dilution only disappears slowly as diluted functions are composed. If the diluting linear functions s b are the identity functions, this corresponds to feature refinement as postulated by Jastrzebski et al. (2018) . Proposition 7. Under certain conditions, the composition of B random functions that are k b -diluted in expectation respectively is

l (1 + 1 k 2 b ) -1 -1

2 -diluted in expectation. (See section E.7 for details.)

More simply, assume all the k b are equal to some k. Ignoring higher-order terms, the composition is

1 √ B k-diluted.

The flipside of an O(k 2 ) reduction in gradient via dilution is thus the requirement of O(k 2 ) layers to eliminate that dilution. This indicates that the overall amount of gradient reduction achievable through dilution without incurring catastrophic pseudo-linearity is limited.

7.2. CHOOSING DILUTION LEVELS:

The power of our theory lies in exposing the GSC-reducing effect of skip connections for general neural network architectures. As far as we know, all comparable previous works (e.g. Yang & Schoenholz (2017) ; Balduzzi et al. (2017) ) demonstrated similar effects only for specific architectures. Our argument is not that certain ResNet's achieve a certain level of GSC reduction, but that ResNet users have the power to choose the level of GSC reduction by controlling the amount of dilution. For example, while the level of dilution increases as we go deeper in the style of ResNet architecture we used for experiments in this section, this need not be so. The skip function s and block function ρ can be scaled with constants to achieve arbitrary, desired levels of dilution (Szegedy et al., 2016) . Alternatively, instead of putting all normalization layers in the residual blocks, we can insert them between blocks / skip connections. This would keep the dilution level constant and hence cause gradients to explode again, though at a lower rate compared to vanilla networks.

7.3. THE ORTHOGONAL INITIAL STATE:

Applying the residual trick to ResNet reveals several insights. The difference between ResNet and vanilla networks in terms of skip connections is superficial, because both ResNet and vanilla networks are residual networks in the framework of equation 2. Also, both ResNet and vanilla networks have nonlinear initial functions, because ρ b (θ (0) b ) is initially nonzero and nonlinear. However, there is one key difference. The initial functions of ResNet are closer to a linear transformation and indeed closer to an orthogonal transformation because they are composed of a nonlinear function ρ b (θ

(0) b )

that is significantly diluted by an orthogonal transformation s b . Therefore, ResNet, while being conceptually more complex, is mathematically simpler.

We have shown how ResNets achieve a reduced gradient via k-dilution. And just as with effective depth, the residual trick allows us to generalize this notion to arbitrary networks. Definition 5. We say a residual network f (θ) has an 'orthogonal initial state' if each initial function i l is multiplication with an orthogonal matrix or a slice / multiple thereof and r l (θ l ) is the zero function.

Any network that is trained from an (approximate) orthogonal initial state can benefit from reduced gradients via dilution to the extent to which initial and residual function are uncorrelated. (See section F.3 for more information.). ResNet is a style of architecture that achieves this, but it is far from being the only one. Balduzzi et al. (2017) introduced the 'looks-linear initialization' (LLI) for ReLU networks, which achieves not only an approximate orthogonal initial state, but outperformed ResNet in their experiments. We detail this initialization scheme in section H. In table 2, we show that a simple ReLU network with LLI can achieve an ever lower training error than ResNet on CIFAR10. In figure 6C , we find that indeed LLI reduces the gradient growth of batch-ReLU drastically not just in the initialized state, but throughout training even as the residual functions grow beyond the size achieved under Gaussian initialization (compare figure 6E to 2E and 4E). DiracNet (Zagoruyko & Komodakis, 2017) achieves an approximate orthogonal initial state in a very similar way to LLI. An even simpler but much less powerful strategy is to initialize weight matrices as orthogonal matrices instead of Gaussian matrices. This reduces the gradient growth in the initialized state somewhat (table 1 ).

Using the ensemble view of very deep networks reveals another significant disadvantage of nonorthogonal initial functions. The output computed by an ensemble member must pass through the initial functions of the layers not contained in that ensemble member to reach the prediction layer. Therefore, having non-orthogonal initial functions is akin to taking a shallow network and adding additional, untrainable non-orthogonal layers to it. This has obvious downsides such as a collapsing domain and / or exploding gradient, and an increasingly unfavorable eigenspectrum of the Jacobian (Saxe et al., 2014) . One would ordinarily not make the choice to insert such untrainable layers. While there has been some success with convolutional networks where lower layers are not trained (e.g. Saxe et al. (2011) ; He et al. ( 2016c)), it is not clear whether such networks are capable of outperforming other networks where such layers are trained. While skip connections do not resolve the tension between exploding gradients and collapsing domains, they reduce the pathology by avoiding unnecessary non-orthogonality contained in the initial function.

The big question is now: What is the purpose of not training a network from an orthogonal initial state? We are not aware of such a purpose. Since networks with orthogonal initial functions are mathematically simpler than other networks, we argue they should be the default choice. Using non-orthogonality in the initial function, we believe, is what requires explicit justification. Balduzzi et al. (2017) asks in the title: If ResNet is the answer, then what is the question? We argue that a better question would be: Is there a question to which vanilla networks are the answer?

8. CONCLUSION:

Summary In this paper, we demonstrate that contrary to popular belief, many MLP architectures composed of popular layer types exhibit exploding gradients, and those that do not exhibit collapsing domains (section 3). This tradeoff is caused by the discrepancy between absolute determinants and qm norms of layer-wise Jacobians (section 5). Both sides of this tradeoff cause pathologies. Exploding gradients, when defined by the GSC (section 2) cause low effective depth (section 4). Collapsing domains cause pseudo-linearity and can also cause low effective depth (section 6). However, both pathologies are caused to a surprisingly large degree by untrainable, and thus potentially unnecessary non-orthogonality contained in the initial functions. Making the initial functions more orthogonal via e.g. skip connections leads to improved outcomes (section 7).

Practical Recommendations:

• Train from an orthogonal initial state, i.e. initialize the network such that it is a series of orthogonal linear transformations. This can greatly reduce the growth of the GSC and domain collapse not just in the initial state, but also as training progresses. It can prevent the forward activations from having to pass through unnecessary non-orthogonal transformations. Even if a perfectly orthogonal initial state is not achievable, an architecture that approximates this such as ResNet can still confer significant benefit.

• When not training from an orthogonal initial state, avoid low effective depth. A low effective depth signifies that the network is composed of an ensemble of networks significantly shallower than the full network. If the initial functions are not orthogonal, the values computed by these ensemble members have to pass through what may be unnecessary and harmful non-orthogonal transformations. Low effective depth may be caused by, for example, exploding gradients or a collapsing domain.

• Avoid pseudo-linearity. For the representational capacity of a network to grow with depth, linear layers must be separated by nonlinearities. If those nonlinearities can be approximated by linear functions, they are ineffective. Pseudo-linearity can be caused by, for example, a collapsing domain. (Szegedy et al., 2016) . This may ultimately lead to an effective depth much lower than the compositional depth and individual layers that have a very small impact on learning outcomes, because functions they represent are very close to linear functions. If there is a fixed parameter budget, it may be better spent on width than extreme depth (Zaguroyko & Komodakis, 2016) .

Implications for deep learning research:

• Exploding gradients matter. They are not just a numerical quirk to be overcome by rescaling but are indicative of an inherently difficult optimization problem that cannot be solved by a simple modification to a stock algorithm. • Use GSC as a benchmark for gradient explosion. For the first time, we established a rigorous link between a metric for exploding gradients and hardness of training. The GSC is also robust to network rescaling, layer width and individual layers. • Any neural network is a residual network. The residual trick allows the application of ResNet-specific tools such as the popular theory of effective depth to arbitrary networks. 1 : Key metrics for architectures in their randomly initialized state evaluated on Gaussian noise. In the 'Normalization' column, 'layer' refers to layer normalization, 'batch' refers to batch normalization, 'LOlayer' refers to length-only layer normalization and 'none' refers to an absence of a normalization layer. In the 'Matrix type' column, 'Gaussian' refers to matrices where each entry is drawn from an independent Gaussian distribution with mean zero and a standard deviation that is constant across all entries. 'orthogonal' refers to a uniformly random orthogonal matrix and 'looks-linear' refers to the initialization scheme proposed by Balduzzi et al. (2017) and expounded in section H. In the 'Skip type' column, 'identity' refers to identity skip connections and 'Gaussian' refers to skip connections that multiply the incoming value with a matrix where each entry is drawn from an independent Gaussian distribution with mean zero and a standard deviation that is constant across all entries. 'none' refers to an absence of skip connections. In the 'Normalization' column, 'layer' refers to layer normalization, 'batch' refers to batch normalization and 'none' refers to an absence of a normalization layer. In the 'Matrix type' column, 'Gaussian' refers to matrices where each entry is drawn from an independent Gaussian distribution with mean zero and a standard deviation that is constant across all entries. 'looks-linear' refers to the looks-linear initialization scheme proposed by Balduzzi et al. (2017) and expounded in section H. In the 'Skip type' column, 'identity' refers to identity skip connections and 'none' refers to an absence of skip connections. In the two rightmost columns, we show the training classification error achieved when using a single step size and when using a custom step size for each layer. Whichever error value is lower is shown in bold. For further methodological details, see section I. For a detailed breakdown of these results, see figures 2, 4, 5 and 6. So far, we have discussed exploding gradients and collapsing domains. In this section, we review related metrics and concepts from literature.

A ADDITIONAL EXPERIMENTAL RESULTS:



Epoch:

We build on the work of Balduzzi et al. (2017) , who introduced the concept of gradient shattering. This states that in deep networks, gradients with respect to nearby points become more and more uncorrelated with depth. This is very similar to saying that the gradient is only informative in a smaller and smaller region around the point at which it is taken. This is precisely what happens when gradients explode and also, as we argue in section 6, when the domain collapses. Therefore, the exploding gradient problem and collapsing domain problem can be viewed as a further specification of the shattering gradient problem rather than as a counter-theory or independent phenomenon.

We extend the work of Balduzzi et al. (2017) in several important ways. First, they claim that the exploding gradient problem "has been largely overcome". We show that this is not true, especially in the context of very deep batch-ReLU MLPs, which are central to their paper. Second, by using effective depth we make a rigorous argument as to why exploding gradients cause hardness of training. While Balduzzi et al. (2017) point out that shattering gradients interfere with theoretical guarantees that exist for various optimization algorithms, they do not provide a definitive argument as to why shattering gradients are in fact a problem. Third, our analysis extends beyond ReLU networks.

We also build on the work of Raghu et al. (2017) . They showed that both trajectories and small perturbations, when propagated forward, can increase exponentially in size. However, they do not distinguish too important cases: (i) an explosion that is simply due to an increase in the scale of forward activations and (ii) an explosion that is due to an increase in the gradient relative to forward activations. We are careful to make this distinction and focus only on case (ii). Since this is arguably the more interesting case, we believe the insights generated in our paper are more robust. Saxe et al. (2014) investigated another important pathology of very deep networks: the divergence of singular values in multi-layer Jacobians. As layer-wise Jacobians are multiplied, the variances of their singular values compound. This leads to the direction of the gradient being determined by the dominant eigenvectors of the multi-layer Jacobian rather than the label, which slows down training considerably.

In their seminal paper, Ioffe & Szegedy (2015) motivated batch normalization with the argument that changes to the distribution of intermediate representations, which they term 'covariate shift', are pathological and need to be combated. This argument was then picked up by e.g. Salimans & Kingma (2016) and Chunjie et al. (2017) to motivate similar normalization schemes. We are not aware of any rigorous definition of the 'covariate shift' concept nor do we understand why it is undesirable. After all, isn't the very point of training deep networks to have each layer change the function it computes, to which other layers co-adapt, to which then other layers co-adapt and so on? Having each layer fine-tune its weights in response to shifts in other layers seems to be the very mechanism by which deep networks achieve high accuracy.

A classical notion of trainability in optimization theory is the conditioning of the Hessian. This can also deteriorate with depth. Recently, Luo (2017) introduced an architecture that combats this pathology in an effective and computationally tractable way via iterative numerical methods and matrix decomposition. Matrix decomposition has also been used by e.g. Arjovsky et al. (2016) ; Anonymous (2018b) to maintain orthogonality of recurrent weight matrices. Maybe such techniques could also be used to reduce the divergence of singular values of the layer-wise Jacobian during training.

B.1.1 MEAN FIELD THEORY -EXPLODING GRADIENTS / COLLAPSING DOMAIN VS ORDER / CHAOS Our work bears similarity to a recent line of research studying deep networks using mean field theory (Poole et al., 2016; Schoenholz et al., 2017; Yang & Schoenholz, 2017; Anonymous, 2018d) . Those papers use infinitely wide networks to statically analyze the expected behavior of forward activations and gradients in the initialized state. They identify two distinct regimes, order and chaos, based on whether an infinitesimal perturbation shrinks or grows in expectation respectively as it is propagated forward. This corresponds to the expected qm norm of the layer-wise Jacobian being smaller or larger than 1 respectively. They show that in the chaotic regime, gradient vector length explodes whereas in the ordered regime, gradient vector length vanishes. Further, they show that for tanh MLPs the correlation between forward activation vectors corresponding to two different data inputs converges to 1 ('unit limit correlation') in the ordered regime as activations are propagated forward and to some value less than 1 in the chaotic regime. Specifically, in a tanh MLP without biases, in the chaotic regime, the correlation converges to 0 ('zero limit correlation'). They show how to use mean field theory as a powerful tool for the static analysis of individual network architectures.

As in mean field theory, some of our analysis relies on the expected behavior of networks in their randomly initialized state (theorem 2). Further, it is clear that the order / chaos dichotomy bears similarity to the exploding gradient problem / collapsing domain problem dichotomy as presented in this paper. However, there are also important differences.

One difference is that we argue that the GSC is a better metric for determining the presence of pathological exploding or vanishing gradients than gradient vector length and thus more meaningful than order / chaos. Using the GSC, we obtain very different regions of explosion, vanishing and stability for popular architectures compared to gradient vector length. For a tanh MLP with no biases, using gradient vector length, vanishing is achieved for σ w < 1, stability for σ w = 1 and explosion for σ w > 1. (σ w denotes the standard deviation of weight matrix entries times the square root of the right dimsion of the weight matrix, as defined in Poole et al. (2016) .) For a tanh MLP with no biases, using the GSC, vanishing is impossible, stability is achieved for σ w ≤ 1 and explosion for σ w > 1. For a ReLU MLP with no biases, using gradient vector length, vanishing is achieved for σ w < √ 2, stability for σ w = √ 2 and explosion for σ w > √ 2. For a ReLU MLP with no biases, using the GSC, stability is inevitable.

The advantage of considering GSC can be seen in the case of the ReLU network. For tanh, Schoenholz et al. (2017) showed that order corresponds to an exponential convergence towards a unit limit correlation and chaos corresponds to an exponential convergence towards a zero limit correlation. For a ReLU MLP with no biases and σ w > √ 2, infinitesimal noise grows (chaos), yet the correlation converges sub-exponentially to zero, which is a behavior we would expect from the edge of chaos. As we saw above, using the GSC to define order / chaos that is precisely where we are: the edge of chaos.

A second difference is that the concepts of unit limit correlation and the collapsing domain problem are not the same. In fact, the former can be seen as a special case of the latter. In a tanh MLP with no bias and σ w slightly larger than 1, correlation converges to 0 and eventually, gradients explode. Yet the domain can still collapse dramatically in the short term as shown in figure 1B to cause pseudolinearity. In a tanh MLP with no bias and σ w very large, again, correlation converges to 0 and gradients explode. However, the tanh layer maps all points close to the corners of the hypercube, which corresponds to domain collapse.

We do not use the assumption of infinite width in our analysis. The only possible exception is that the SSD assumption in proposition 7 can be viewed as implying infinite width.

While Schoenholz et al. ( 2017) conjectures that the edge of chaos is necessary for training very deep networks, our paper provides somewhat contrary evidence. Our two best performing vanilla architectures, SeLU and layer-tanh, are both inside the chaotic regime whereas ReLU, layer-ReLU and tanh, which are all on the edge of chaos, exhibit a higher training classification error. Clearly, chaotic architectures avoid pseudo-linearity. The difference between our experiments and those in Schoenholz et al. ( 2017) is that we allowed the step size to vary between layers. This had a large impact, as can be seen in table 2. We believe that our results underscore the importance of choosing appropriate step sizes when comparing the behavior of different neural architectures or training algorithms in general.

In section 4, we present a rigorous argument for the harmful nature of exploding gradients, and thus of chaos as defined by the GSC, at high depth. No comparable argument exists in mean field literature.

While Schoenholz et al. ( 2017) obtained low accuracies for networks exhibiting unit limit correlation, it is not clear a priori that this effect is harmful for accuracy. After all, correlation information is a rather small part of the information present in the data, so the remaining information might be sufficient for learning. As a simple example, consider k-means. Performing k-meafns on an arbitrary dataset yields the same result as first adding a large constant to the data and then performing k-means, even though the addition can easily destroy correlation information. In contrast, in section 6 , we show how collapsing domains can directly harm expressivity and trainability. Yang & Schoenholz (2017) shows that pathologies such as gradient explosion that arise in vanilla networks are reduced in specific ResNet architectures. We extend this finding to general ResNet architectures. Anonymous (2018d) proposes to combat gradient growth by downscaling the weights in the residual block of a ResNet. This corresponds to increased dilution, which indeed reduces gradient growth as shown in section 7. However, we also show in proposition 7 that the reduction achievable in this way may without suffering catastrophic pseudo-linearity be limited. Anonymous (2018d) also proposes to combat the exploding gradient problem by changing the width of intermediate layers.

Our analysis in section 4.4 suggests that this is not effective in reducing the growth of the GSC. Anonymous (2018d) concludes that changing the width combats the exploding gradient problem because they implicitly assume that the pathology of exploding gradients is determined by the scale of individual components of the gradient vector rather than the length of the entire vector or the GSC. They do not justify this assumption. We propose the GSC as a standard for assessing pathological exploding gradients to avoid such ambiguity. Table 3 : Key metrics for architectures derived from dynamical systems theory.

B.1.2 RESNET FROM:

We evaluated those strategies empirically. In table 3, we show the value of the GSC across the network for 8 different architectures in their initialized state applied to Gaussian noise. (See section B.1.2 for details.) All architectures use residual blocks containing a single normalization layer, a single nonlinearity layer and a single linear layer. We initialize the linear layer in four different ways: (i) Gaussian initialization, (ii) skew-symmetric initialization, (iii) initialization as -C T C where C is Gaussian initialized and (iv) Gaussian initialization where weight matrices in successive blocks have correlation 0.5. Initializations (ii), (iii) and (iv) mimic strategies (a), (b) and (d) respectively.

To enable the comparison of the four initialization styles, we normalize each weight matrix to have a unit qm norm. We study all four initializations for both batch-ReLU and layer-tanh.

Initialization (ii) improves slightly over initialization (i). This is expected given theorem 3. One of the key assumptions is that skip and residual function be orthogonal in expectation. While initialization (i) achieves this, under (ii), the two functions are orthogonal not just in expectation, but with probability 1.

Initialization (iii) has gradients that grow much faster than initialization (i). On the one hand, this is surprising as Haber & Ruthotto (2017) states that eigenvalues with negative real parts in the residual Jacobian supposedly slow gradient growth. On the other hand, it is not surprising because introducing correlation between the residual and skip path breaks the conditions of theorem 3.

Initialization (iv) performs comparably to initialization (i) in reducing gradient growth, but requires a larger amount of dilution to achieve this result. Again, introducing correlation between successive blocks and thus between skip and residual function breaks the conditions of theorem 3 and weakens the power of dilution. 

B.2 VANISHING GRADIENTS IN FEEDFORWARD NETWORKS:

We have not experienced vanishing gradients as defined by the GSC in our experiments. Our analysis suggests that strong domain collapse is necessary to not only overcome the gradient growth implied by theorem 2, but reverse it. We conjecture that such domain collapse could actually occur in e.g. ReLU and tanh architecture if a non-zero additive bias was introduced, though this goes beyond the scope of this paper.

B.3 EXPLODING AND VANISHING GRADIENTS IN RNNS:

Exploding gradients and their counterpart, vanishing gradients, have been studied more extensively in the context of on RNNs (e.g. Pascanu et al. (2013) ; Bengio et al. (1994) ).

It is important to note that the problem as it arises in RNNs is similar but also different from the exploding gradient problem in feedforward networks. The goal in RNNs is often to absorb information early on and store that information through many time steps and sometimes indefinitely. In the classical RNN architecture, signals acquired early would be subjected to a non-orthogonal transformation at every time step which leads to all the negative consequences described in this paper. LSTMs (Hochreiter & Schmidhuber, 1997) and GRUs (Cho et al., 2014) , which are the most popular solutions to exploding / vanishing gradients in RNNs, are capable of simply leaving each neuron that is considered part of the latent state completely unmodified from time step to time step unless new information is received that is pertinent to that specific neuron. This solution does not apply in feedforward networks, because it is the very goal of each layer to modify the signal productively. Hence, managing exploding gradients in feedforward networks is arguably more difficult.

Nevertheless, there is similarity between LSTM and the orthogonal initial state because both eliminate non-orthogonality "as much as possible". LSTM can eliminate non-orthogonality completely from time step to time step whereas in the orthogonal initial state, non-orthogonality is eliminated only from the initial function. Again, viewing feedforward networks as ensembles of shallower networks, orthogonal initial functions ensure that information extracted from each ensemble member does not have to pass through non-orthogonal transformations needlessly. This is precisely what LSTM attempts to achieve.

B.4 OPEN RESEARCH QUESTIONS AND FUTURE WORK:

Biases, convolutional and recurrent layers In this paper, we focus our analysis on MLPs without trainable bias and variance parameters. Theorem 1, in its formulation, applies only to such MLPs. Theorems 2, 3 and proposition 7 use assumptions that are potentially harder to achieve in non-MLP architectures. Our experimental evaluation is limited to MLPs.

We think that results very similar to those presented in this paper are acheivable for other types of neural networks, such as those containing trainable biases, convolutional layers or recurrent layers.

The fundamental behavior of those architectures should be the same, though additional nuance and heavier mathematical bookkeeping might come into play.

Analysis of deep gradients has so far focused on MLPs (e.g. 2014)), so a principled extension of these results to other network types would break new and important ground.

Understanding collapsing domains It is difficult to assess or measure the degree to which the domain collapses in a given network. There is no single correct metric to measure this effect and depending on the metric chosen, the set of networks exhibiting collapsing domains may look very different. So far, we discussed pre-activation standard deviation (section 6), pre-activation sign diversity (section 6) and activation correlation (section B.1.1). The volume of the domain and the entropy of the distribution of activations may also be of interest.

Not all domains collapse in the same way. In the tanh architecture we studied in this paper, the domain collapses onto the origin. In linear MLPs, the domain collapses onto the line through the dominant eigenvector of the product of weight matrices, but never collapses onto a single point. In ReLU, the domain collapses onto a ray from the origin. In tanh with very large weights, activation vectors are mapped approximately onto the corners of the hypercube by the tanh layer.

What gradient scale is best? GSC(1, L) indicates the relative responsiveness of the prediction layer with respect to changes in the input layer. Of course, the goal in deep learning, at least within a prediction framework, is to model some ground truth function t that maps data inputs to true labels. That function has itself a GSC at each input location x that measures the relative responsiveness of t(x) to changes in x. If the network is to perfectly represent the ground truth function, the GSCs would also have to match up. If, on the other hand, the GSC of the network differs significantly from that of t, the network is not fitting t well. This suggests that in fact, the "best" value of the GSC is one that matches that of the ground truth. If the GSC of the network is too low, we may experience underfitting. If the GSC of the network is too high, we may experience overfitting.

How to achieve the "right" gradient? To model the ground truth function, we may not just want to consider the overall magnitude of the GSC across the dataset, but to enable the network to have gradients of different magnitudes from one data input to the next; or to learn highly structured gradients. For example, given an image of a dog standing in a meadow, we might desire a high gradient with respect to pixels signifying e.g. facial features of the dog but a low gradient with respect to pixels that make up the meadow, and a uniformly low gradient given an image of a meadow. Such gradients would be very valuable not just in modelling real world functions more accurately and improving generalization, but in making the output of neural networks more explainable and avoiding susceptibility to attacks with adversarial inputs.

Understanding representational capacity and pseudo-linearity In section 7, we explained how dilution reduces gradient growth but may harm representation capacity. While removing untrainable non-orthogonality from the initial functions may not be harmful, to achieve large levels of dilution and thus large amounts of GSC reduction, many ResNet architectures also suppress the size of the residual function relative to the initial function. This may happen naturally when the size of the skip path grows via repeated addition as we go deeper, or by deliberately scaling down residual blocks (Szegedy et al., 2016) . Clearly, if a neural network can only represent functions that are very close to linear functions, it may not be able to model the ground truth function well. However, there exist no mechanisms to determine how much dilution is harmful for a given ground truth function or dataset.

Dilution is not only present in ResNet and special constructs such as looks-linear initialized ReLU networks, but even in vanilla, Gaussian initialized MLPs. For example, a SeLU nonlinearity can be more easily approximated by a linear function in terms of mean square error over a unit Gaussian input than a ReLU nonlinearity. We suspect that this is related to gradients in a SeLU MLP exploding more slowly than in a batch-ReLU MLP. Assessing the total amount of "linearity" present in a network is an open question. Therefore, we also cannot make blanket statements such as "SeLU is superior to batch-ReLU because gradients explode more slowly", because a batch-ReLU MLP with fewer layers might in some sense have as much representational power as a SeLU MLP with more layers.

Finally, the impact of dilution on the representational power conferred by depth is an open question.

How far does the orthogonal initial state take us? An orthogonal initial state reduces gradients via dilution, which allows for relatively larger updates, which enables increased growth of residual functions, which allows for greater effective depth. However, as residual functions grow, dilution decreases, so the gradient increases, so updates must shrink, so the growth of residual functions slows, so the growth of effective depth slows.

In other words, for the network to become deeper, it needs to be shallow.

Therefore, while training from an orthogonal initial state can increase effective depth, we expect this effect to be limited. Additional techniques could be required to learn functions which require a compositional representation beyond this limit.

C FURTHER TERMINOLOGY, NOTATION AND CONVENTIONS:

• x and y are generally used to refer to the components of a datapoint. Then, we have (x, y) ∈ D.

• X refers to a vector of dimension d, i.e. the same dimension as the x component of datapoints. Similarly, Y refers to an element of the domain of possible labels. We call X a 'data input' and Y a 'label input'.

• F l refers to a vector of dimension d l , i.e. the same dimension as f l .

• We write f l (θ, x) as a short form of f l (θ l , f l+1 (..(f L (θ L , x))..)). Sometimes, we omit x and / or θ. In that case, x and / or θ remains implicit. f l (θ, X) is an analogous short form.

• We write f l (θ, f k ) as a short form of f l (θ l , f l+1 (..f k-1 (θ k-1 , f k )..))

. Sometimes, we omit f k and / or θ. In that case, f k and / or θ remain implicit. f l (θ, F k ) is an analogous short form.

• We use f L+1 , i L+1 and F L+1 interchangeably with x or X.

• We say a random vector is 'radially symmetric' if its length is independent of its orientation and its orientation is uniformly distributed.

• We say a random matrix is 'Gaussian initialized' if its entries are independent Gaussian random variables with mean zero and the standard deviation of all entries is the same.

• We say an m * n random matrix is 'orthogonally initialized' if it is a fixed multiple of an m * n submatrix of a max(m, n) * max(m, n) uniformly random orthogonal matrix.

• We use parentheses () to denote vector and matrix elements, i.e. A(3, 4) is the fourth element in the third row of the matrix A.

• Throughout sections E and F, we assume implicitly that the GSC is defined and thus that neural networks are differentiable. All results can be trivially extended to cover networks that are almost surely differentiable and directionally differentiable everywhere, which includes SeLU and ReLU networks.

• All theoretical results apply to arbitrary networks, not just MLPs, unless otherwise stated. However, some assumptions arising in proposition 7 and theorems 2 and 3 may be less easy to achieve in general architectures. We focus our discussion of these assumptions exclusively on the MLPs within the scope of this paper as outlined at the end of section 2.

D EFFECTIVE DEPTH: DETAILS D.1 FORMAL DEFINITION:

Let a 'gradient-based algorithm' for training a mutable parameter vector θ from an initial value θ (0) for a network f be defined as a black box that is able to query the gradient df (θ,X,Y ) dθ at arbitrary query points (X, Y ) but only at the current value of the mutable parameter vector θ. It is able to generate updates ∆θ which are added to the mutable parameter vector θ. Let the sequence of updates be denoted as ∆θ (1) , ∆θ (2) , ... We define the successive states of θ recursively as θ (t) = θ (t-1) +∆θ (t) . For simplicity, assume the algorithm is deterministic.

In a residual network defined according to equation 2, we can write the gradient with respect to a parameter sub-vector as df (θ,X,Y )

dθ l = df0 df1 df1 df2 .. df l-1 df l df l dθ l = df0 df1 ( di1 df2 + dr1 df2 )..( di l-1 df l + dr l-1 df l ) df l dθ l .

Multiplying this out, we obtain 2 l-1 terms. We call a term 'λ-residual' if it contains λ or more Jacobians of residual functions, as opposed to Jacobians of initial functions. Let res λ l (f, θ, X, Y ) be the sum of all λ-residual terms in df (θ,X,Y ) dθ l . Now consider two scenarios. In scenario (1), when the algorithm queries the gradient, it receives { df (θ,X,Y ) dθ1 , df (θ,X,Y ) dθ2 , .., df (θ,X,Y ) dθ L } i.e. the "regular" gradient. In scenario (2), it receives

{ df (θ,X,Y ) dθ1 -res λ 1 (f, θ, X, Y ), df (θ,X,Y ) dθ2 -res λ 2 (f, θ, X, Y ), .., df (θ,X,Y ) dθ L -res λ L (f, θ, X, Y )}, i.

e. a version of the gradient where all λ-residual terms are removed. Let the parameter vector attain states θ (1) , θ (2) , .. in scenario (1) and θ (1,λ) , θ (2,λ) , .. in scenario (2). Then we say the 'λ-contribution' at time t is θ (t) -θ (t,λ) . Finally, we say the 'effective depth at time t with threshold h' is the largest λ such that there exists an l with ||θ

(t) l -θ (t,λ) l || 2 ≥ h.

There is no objectively correct value for the threshold h. In practice, we find that the λ-contribution decreases quickly when λ is increased beyond a certain point. Hence, the exact value of h is not important when comparing different networks by effective depth.

The impact that the shift θ

(t) l -θ (t,λ) l

has on the output of the network is influenced by the scale of θ (t) l as well as GSC(l, 0). If those values vary enormously between layers, it may be advisable to set different thresholds for different layers.

D.2 COMPUTATIONAL ESTIMATE:

Unfortunately, computing the effective depth measure is intractable as it would require computing exponentially many gradient terms. In this section, we explain how we estimate effective depth in our experiments.

In this paper, we train networks only by stochastic gradient descent with either a single step size for all layers or a custom step size for each layer. Our algorithm for computing effective depth assumes this training algorithm.

Vanilla networks Assume that the network is expressed as a residual network as in equation 2. Let B be the batch size, let c (t) l be the step size used at layer l for the t'th update and let ((X (t,1) , Y (t,1) ), (X (t,2) , Y (t,2) ), .., (X (t,B) , Y (t,B) )) be the batch of query points used to compute the t'th update. Then SGD computes

∆θ (t) l = c (t) l b

df 0 (θ (t-1) , X (t,b) , Y (t,b) )

dθ (t-1) l θ (t) l = θ (t-1) l + ∆θ (t) l

For any update t and query point b, we estimate its λ-contribution at layer l as follows. For unparametrized layers, ||r k || op is set to zero. For linear layers, it is the operator norm of the residual weight matrix. The final estimate of the length of the λ-contribution at layer l for the entire training period is then simply the sum of the lengths of the estimated λ-contributions over all time points and query points.

The core assumption here is that applying the Jacobian of the initial function of a given layer will increase the lengths of all terms approximately equally, no matter how many residual Jacobians they contain. In other words, we assume that in λ-residual terms, the large singular values of layer-wise Jacobians do not compound disproportionately compared to other terms. This is similar to the core assumption in theorem 1 in section F.1.

We conservatively bound the impact of the Jacobian of the initial function with the impact of the Jacobian of the entire layer, i.e.

|| df 0 df k+1 ||2 || df 0 df k ||2 .

We use ||r k || op as a conservative estimate on how a residual Jacobian will increase the length of a term.

We use the sum of the lengths of all λ-residual terms in a batch as a conservative bound on the length of the λ-contribution of the batch. In essence, we assume that all λ-residual terms have the same orientation.

Finally, we use the sum of the lengths of the λ-contributions within each update as an estimate of the length of the total λ-contribution of the entire training period. On the one hand, this is conservative as we implicitly assume that the λ-contributions of each batch have the same orientation. On the other hand, we ignore indirect effects that λ-contributions in early batches have on the trajectory of the parameter value and hence on λ-contributions of later batches. Since we are ultimately interested in effective depth, we can ignore these second-order effects as they are negligible when the total λcontribution is close to a small threshold h.

Overall, we expect that our estimate of the effective depth (e.g. figure 2D ) is larger than its actual value. This is bolstered by the robustness of some of our trained networks to Taylor expansion (see figure 2F ).

ResNet For ResNet architectures, we need to tweak our estimate of effective depth to take into account skip connections. Below, we detail how the variable arr is modified as it crosses a skip connection / residual block. We write f n (f m ) = s n (f m ) + ρ n (f m ), where f n is the layer at which the skip connection terminates, f m is the layer at which the skip connection begins, s n is the function computed by the skip connection and ρ n (f m ) = ρ n (f n+1 (..f m-1 (f m )..)) is the function computed by the residual block. We write f k = i k + r k for n + 1 ≤ k ≤ m -1 and ρ n = i n + r n , i.e. we break down each layer in the residual block into an initial function and a residual function. . The impact of the residual functions in the block is, correctly, unaffected by the skip connection and bounded by the operator norm, as before.

D.3 DISCUSSION:

The effective depth measure has several limitations.

One can train a linear MLP to have effective depth much larger than 1, but the result will still be equivalent to a depth 1 network.

Consider the following training algorithm: first randomly re-sample the weights, then apply gradient descent. Clearly, this algorithm is equivalent to just running gradient descent in any meaningful sense. The re-sampling step nonetheless blows up the residual functions so as to significantly increase effective depth.

The effective depth measure is very susceptible to the initial step size. In our experiments, we found that starting off with unnecessarily large step sizes, even if those step sizes were later reduced, lead to worse outcomes. However, because of the inflating impact on the residual function, the effective depth would be much higher nonetheless.

Effective depth may change depending on how layers are defined. In a ReLU MLP, for example, instead of considering a linear transformation and the following ReLU operation as different layers, we may define them to be part of the same layer. While the function computed by the network and the course of gradient-based training do not depend on such redefinition, effective depth can be susceptible to such changes.

E PROPOSITIONS AND PROOFS E.1 PROPOSITION 1:

Proposition 1. Given:

• a neural network f of nominal depth L • an initial parameter value θ (0)

• a mutable parameter value θ that can take values in some closed, bounded domain Θ • some deterministic algorithm that is able to query gradients of f at the current parameter value and at query points in D and that is able to apply updates ∆θ to the parameter value

• constant r

Assume:

• Running the algorithm on f with θ initialized to θ (0) for a certain number of updates T causes θ to attain a value θ at which f attains some error value E final on D.

• At every triplet (θ, X, Y ) ∈ Θ × D, we have ||J l k || = 0 and ||T l k || = 0 for all 0 ≤ l ≤ k ≤ L.

Then we can specify some other neural network f and some other initial parameter value θ (0) such that the following claims hold:

1. f has nominal depth L and the same compositional depth as f . 2. The algorithm can be used to compute T updates by querying gradients of f at the current parameter value and at query points in D which cause θ to attain a value θ where f attains error E final on D and makes the same predictions as f ( θ) on D.

3. At every triplet (θ, X, Y ) ∈ Θ × D, we have ||T l k || ≥ r k-l for all 0 ≤ l ≤ k ≤ L and ||J l k || ≥ r k-l for all 0 ≤ l ≤ k ≤ L except (k, l) = (1, 0).

Proof. Since Θ and D are closed and bounded, so is Θ × D. Therefore for all 0 ≤ l ≤ k ≤ L, both ||J l k || and ||T l k || attain their infimum on that domain if it exists. ||.|| is non-negative, so the infimum exists. ||.|| is non-zero on the domain, so the infimum, and therefore the minimum, is positive. Since f has finite depth, there is an r such that for all tuplets (θ, X, Y, k, l), we have ||J l k || ≥ r k-l and ||T l k || ≥ r k-l . Let R = r r . Now, we define f via its layer functions.

f 0 = f 0 f 1 (θ 1 , F 2 ) = f 1 (Rθ 1 , R 2 F 2 ) f l (θ l , F l+1 ) = R -l f l (R l θ l , R l+1 F l+1 ) for 2 ≤ l ≤ L -1 f L (θ L , X) = R -L f L (R L θ L , X)

f and f clearly have the same nominal and compositional depth, so claim (1) holds. Given any vector v with L sub-vectors, define the transformation R(v) as R(v) l = R l v l . Finally, we set θ (0) := R -1 (θ (0) ).

We use the algorithm to train f as follows. Whenever the algorithm queries some gradient value df dθ , we instead submit to it the value R -1 ( df dθ ). Whenever the algorithm wants to apply an update ∆θ to the parameter, we instead apply R -1 (∆θ). Let S (t) , 0 ≤ t ≤ T be the state of the system after applying t updates to θ under this training procedure. Let S (t) , 0 ≤ t ≤ T be the state of the system after applying t updates to θ when the algorithm is run on f . Then the following invariances hold.

A θ (t) = R -1 (θ (t) ), where θ (t) is the value of θ under S (t) and θ (t) is the value of θ under S (t) .

B f makes the same predictions and attains the same error on D under S (t) as f under S (t) .

C Any state the algorithm maintains is equal under both S (t) and S (t) .

We will show these by induction. At time t = 0, we have θ (0) = R -1 (θ (0) ) as chosen, so (A) holds. It is easy to check that (B) follows from (A). Since the algorithm has thus far not received any inputs, (C) also holds. Now for the induction step. Assuming that

θ (t) = R -1 (θ (t) ), it is easy to check that df (θ (t) ) dθ = R( df (θ (t) ) dθ

). Therefore, whenever the algorithm queries a gradient of f , it will re

- ceive R -1 ( df (θ (t) ) dθ ) = R -1 (R( df (θ (t) ) dθ )) = df (θ (t) ) dθ

. Therefore, the algorithm receives the same inputs under both S (t) and S (t) . Since the internal state of the algorithm is also the same, and the algorithm is deterministic, the update returned by the algorithm is also the same and so is the internal state after the update is returned, which completes the induction step for (C). Because the algorithm returns the same update in both cases, after the prescribed post-processing of the update under f , we have ∆θ t+1) ). This completes the induction step for (A) and again, (B) follows easily from (A).

(t) = R -1 (∆θ (t) ). Therefore θ (t+1) = θ (t) + ∆θ (t) = R -1 (θ (t) ) + R -1 (∆θ (t) ) = R -1 (θ (t) + ∆θ (t) ) = R -1 (θ (

(B) implies directly that claim (2) holds. Finally, for any tuplet (θ, X, Y, k, l), we have

EQUATION

also holds, which completes the proof.

Notes::

• The condition that the Jacobians of f always have non-zero norms may be unrealistic. For practical purposes, it should be enough to have Jacobians that mostly have non-zero norms. This leads to a network f that has exploding Jacobians wherever f has Jacobians of size above some threshold, where that threshold can be arbitrarily chosen. • Claim (3) of the proposition does not include the case (k, l) = (1, 0) and it does not include Jacobians with respect to the input X. These Jacobians have to be the same between f and f if we require f to have the same error and predictions as f . However, if we are ok with multiplicatively scaled errors and predictions, claim (3) can be extended to cover those two cases. Scaled training errors and predictions are generally not a problem in e.g. classification.

• Note that not only does the algorithm achieve the same predictions in the same number of updates for both f and f , but the computation conducted by the algorithm is also identical, so f is as "easy to train" as f no matter how we choose to quantify this as long as we know to apply the scaling transformation. • There are no constraints on the explosion rate r . If we can successfully train a network with some explosion rate, we can successfully train an equivalent network with an arbitrary explosion rate. • f is very similar to f , so this proposition can be used to construct trainable networks with exploding Jacobians of any shape and depth as long as there exists some trainable network of that shape and depth. • The proposition can be easily be extended to non-deterministic algorithms by using distributions and expectations. • The proposition can be easily extended to use directional derivatives instead of total derivatives to cover e.g. ReLU and SeLU nonlinearities.

E.2 PROPOSITION 2:

Proposition 2. Let U be the uniform distribution over the hypersphere. Then GSC(k, l) measures the quadratic expectation Q of the relative size of the change in the value of f l in response to a change in f k that is a small multiple of a random variable drawn from U .

Equivalently, GSC(k, l) = lim →0 Q u∼U ||f l (f k + u)-f l (f k )|| 2 ||f l (f k )|| 2 ||f k + u-f k || 2 ||f k || 2

Proof. We use LΣR T to denote the singular value decomposition and s i to denote singular values.

lim →0 Q u ||f l (f k + u)-f l (f k )||2 ||f l (f k )||2 ||f k + u-f k ||2 ||f k ||2 = lim →0 Q u ||f l (f k + u) -f l (f k )|| 2 ||f k || 2 ||f l (f k )|| 2 = lim →0 ||f k || 2 ||f l (f k )|| 2 Q u ||f l (f k + u) -f l (f k )||| 2 = lim →0 ||f k || 2 ||f l (f k )|| 2 Q u ||f l (f k ) + J l k u + O( 2 ) -f l (f k )|| 2 = lim →0 ||f k || 2 ||f l (f k )|| 2 Q u ||J l k u + O( 2 ) e || 2 = ||f k || 2 ||f l (f k )|| 2 Q u ||J l k u|| 2 = ||f k || 2 ||f l (f k )|| 2 Q u ||LΣR T u|| 2 = ||f k || 2 ||f l (f k )|| 2 Q u ||Σu|| 2 = ||f k || 2 ||f l (f k )|| 2 Q u min(d k ,d l ) i=1 s 2 i u(i) 2 = ||f k || 2 ||f l (f k )|| 2 E u min(d k ,d l ) i=1 s 2 i u(i) 2 = ||f k || 2 ||f l (f k )|| 2 min(d k ,d l ) i=1 s 2 i E u u(i) 2 = ||f k || 2 ||f l (f k )|| 2 1 d k min(d k ,d l ) i=1 s 2 i = ||f k || 2 ||f l (f k )|| 2 ||Σ|| qm = ||f k || 2 ||f l (f k )|| 2 ||J l k || qm = GSC(k, l)

Proposition 3. Let U be the uniform distribution over the hypersphere. Assume f k is a fullyconnected linear layer without trainable bias parameters and θ k contains the entries of the weight matrix. Then GSC(k, l)

||θ k ||2||f k+1 ||2 ||f k ||2 √ d k+1

measures the quadratic expectation Q of the relative size of the change in the value of f l in response to a change in θ k that is a small multiple of a random variable drawn from U .

Equivalently, GSC(k, l)

||θ k ||2||f k+1 ||2 ||f k ||2 √ d k+1 = lim →0 Q u∼U ||f l (f k (θ k + u,f k+1 ))-f l (f k (θ k ,f k+1 ))|| 2 ||f l || 2 ||θ k + u-θ k || 2 ||θ k || 2

Further, if θ k is random and

• all entries of θ k have the same quadratic expectation

• all products of two different entries of θ k have an expectation of 0

• the orientation of θ k is independent of its length

we have Q -1 θ k ||θ k ||2||f k+1 ||2 ||f k ||2 √ d k+1 = 1.

Proof. Throughout this derivation, we will use θ k to refer to both the parameter sub-vector and the weight matrix. Similarly, we will use u to refer to both a perturbation of the parameter sub-vector and of the weight matrix. We use LΣR T to denote the singular value decomposition and s i to denote singular values.

lim →0 Q u ||f l (f k (θ k + u,f k+1 ))-f l (f k (θ k ,f k+1 ))||2 ||f l ||2 ||θ k + u-θ k ||2 ||θ k ||2 = lim →0 ||θ k || 2 ||f l || 2 Q u ||f l (f k (θ k + u, f k+1 )) -f l (f k (θ k , f k+1 ))|| 2 = lim →0 ||θ k || 2 ||f l || 2 Q u ||f l ((θ k + u)f k+1 ) -f l (θ k f k+1 )|| 2 = lim →0 ||θ k || 2 ||f l || 2 Q u ||f l (θ k f k+1 + uf k+1 ) -f l (θ k f k+1 )|| 2 = lim →0 ||θ k || 2 ||f l || 2 Q u ||f l (θ k f k+1 ) + J l k uf k+1 + O( 2 ) -f l (θ k f k+1 )|| 2 = lim →0 ||θ k || 2 ||f l || 2 Q u ||J l k uf k+1 + O( 2 ) || 2 = ||θ k || 2 ||f l || 2 Q u ||J l k uf k+1 || 2 = ||θ k || 2 ||f l || 2 Q u ||LΣR T uf k+1 || 2 = ||θ k || 2 ||f l || 2 Q u ||Σuf k+1 || 2 = ||θ k || 2 ||f l || 2 Q u min(d k ,d l ) i=1 ( d k+1 j=1 s i u(i, j)f k+1 (j)) 2 = ||θ k || 2 ||f l || 2 E u min(d k ,d l ) i=1 ( d k+1 j=1 s i u(i, j)f k+1 (j)) 2 = ||θ k || 2 ||f l || 2 E u min(d k ,d l ) i=1 d k+1 j=1 d k+1 m=1 s 2 i u(i, j)f k+1 (j)u(i, m)f k+1 (m) = ||θ k || 2 ||f l || 2 min(d k ,d l ) i=1 d k+1 j=1 d k+1 m=1 s 2 i f k+1 (j)f k+1 (m)E u u(i, j)u(i, m) = ||θ k || 2 ||f l || 2 min(d k ,d l ) i=1 d k+1 j=1 d k+1 m=1 s 2 i f k+1 (j)f k+1 (m)δ jm E u u(i, j) 2 = ||θ k || 2 ||f l || 2 min(d k ,d l ) i=1 d k+1 j=1 s 2 i f k+1 (j) 2 E u u(i, j) 2 = ||θ k || 2 ||f l || 2 1 d k d k+1 min(d k ,d l ) i=1 d k+1 j=1 s 2 i f k+1 (j) 2 = ||θ k || 2 ||f l || 2 d k+1 1 d k min(d k ,d l ) i=1 s 2 i d k+1 j=1 f k+1 (j) 2 = ||θ k || 2 ||f l || 2 d k+1 ||Σ|| qm ||f k+1 || 2 = ||θ k || 2 ||f l || 2 d k+1 ||J l k || qm ||f k+1 || 2 = GSC(k, l) ||θ k || 2 ||f k+1 || 2 ||f k || 2 d k+1

Further, assume that θ k is random and fulfills the conditions stated. Under those conditions, θ k is the product of a random scalar length variable and an independent random vector orientation variable θ k of unit length. Then for all

1 ≤ i ≤ d k and 1 ≤ j ≤ d k+1 , we have Eθ k (i, j) 2 = E 2 θ k (i, j) 2 = E 2 E θ θ k (i, j) 2 and so Qθ k (i, j) = Qθ k (i,j) Q

. Since all entries of θ k have the same quadratic expectation, all entries in θ k have the same quadratic expectation. Further,

1 = ||θ k || 2 = Q||θ k || 2 = E i,j θ k (i, j) 2 = d k d k+1 Eθ k (1, 1) 2 = d k d k+1 Qθ k (1, 1), so the quadratic expectation of each entry of θ k is 1 √ d k d k+1 . Further, for all 1 ≤ i 1 , i 2 ≤ d k and 1 ≤ j 1 , j 2 ≤ d k+1 with (i 1 , j 1 ) = (i 2 , j 2 ), we have 0 = Eθ k (i 1 , j 1 )θ k (i 2 , j 2 ) = Eθ k (i 1 , j 1 ) θ k (i 2 , j 2 ) = E 2 E θ θ k (i 1 , j 1 )θ k (i 2 , j 2 )

, so the expectation of the product of two different entries of θ k is 0.

Then, we have:

Q -1 θ k ||θ k || 2 ||f k+1 || 2 ||f k || 2 d k+1 = ||f k+1 || 2 d k+1 Q -1 ||θ k || 2 ||f k || 2 = ||f k+1 || 2 d k+1 Q -1 ||θ k || 2 2 ||f k || 2 2 = ||f k+1 || 2 d k+1 Q -1 ||θ k || 2 2 ||θ k f k+1 || 2 2 = ||f k+1 || 2 d k+1 E ||θ k f k+1 || 2 2 ||θ k || 2 2 -1 = ||f k+1 || 2 d k+1 E || θ k f k+1 || 2 2 || θ k || 2 2 -1 = ||f k+1 || 2 d k+1 E ||θ k f k+1 || 2 2 ||θ k || 2 2 = ||f k+1 || 2 d k+1 E||θ k f k+1 || 2 2 -1 = ||f k+1 || 2 d k+1 E i ( j θ k (i, j)f k+1 (j)) 2 -1 = ||f k+1 || 2 d k+1 E i,j,m θ k (i, j)f k+1 (j)θ k (i, m)f k+1 (m) -1 = ||f k+1 || 2 d k+1 E i,j θ k (i, j) 2 f k+1 (j) 2 -1 = ||f k+1 || 2 d k+1 j f k+1 (j) 2 i Eθ k (i, j) 2 -1 = ||f k+1 || 2 d k+1 j f k+1 (j) 2 i (Qθ k (i, j)) 2 -1 = ||f k+1 || 2 d k+1 j f k+1 (j) 2 i 1 d k d k+1 -1 = ||f k+1 || 2 d k+1 ||f k+1 || 2 2 d k 1 d k d k+1 -1 = 1

The conditions stated in the proposition for the random parameter sub-vector θ k are fulfilled, for example, if the corresponding weight matrix is either Gaussian initialized or orthogonally initialized. Therefore, the most popular initialization strategies for weight matrices are covered by this proposition.

E.4 PROPOSITION 4:

Proposition 4. Given:

• some network f of nominal depth L

• some parameter value θ = (θ 1 , .., θ L )

• constants c 2 , .., c L and γ 1 , .., γ L

• a network f of nominal depth L defined via its layer functions as follows.

f 0 = f 0 f 1 (θ 1 , F 2 ) = f 1 (γ 1 θ 1 , c 2 F 2 ) f l (θ l , F l+1 ) = c l f l (γ l θ l , 1 c l+1 F l+1 ) for 2 ≤ l ≤ L -1 f L (θ L , X) = c L f L (γ L θ L , X) • a parameter value θ = (θ 1 , .., θ L ) defined via θ l = 1 γ l θ l

Then for all tuples (θ, θ , X, Y ), GSC(k, l, f, θ, X, Y ) = GSC(k, l, f , θ , X, Y ).

Proof. Let c 0 = c 1 = 1. Then we have ||f l || 2 = c l ||f l || 2 for 0 ≤ l ≤ L and we have

||J l k || qm = || c l c k J l k || qm = c l c k ||J l k || qm for 0 ≤ l ≤ k ≤ L, so GSC (k, l) = ||J l k ||qm||f k ||2 ||f l ||2 = c l c k ||J l k ||qmc k ||f k ||2 c l ||f l ||2 = GSC(k, l) for 0 ≤ l ≤ k ≤ L as required.

Here, we consider general multiplicative rescalings provided they do not change the predictions and error values of the network. To ensure this, each layer function must compensate for the factor introduced by the previous layer as well as for the rescaling of the parameter. Not all network transformations that are used in practice to control the scale of forward activations fall under this proposition. Changing the scale of weights in a tanh or SeLU network or adding normalization layers is not covered. These changes can have a drastic impact on the high-level properties of the network, as shown throughout the paper. On the other hand, changing the scale of weights in a ReLU network is covered by the proposition, as long as the error layer f 0 also compensates for this rescaling. Also, changing the scale of weights in any architecture where linear layers are followed by a normalization layer is covered by the proposition.

E.5 PROPOSITION 5:

Proposition 5. Assuming the approximate decomposability of the norm of the product of Jacobians, i.e.

||J l l+1 J l+1 l+2 ..J k-1 k || qm ≈ ||J l l+1 || qm ||J l+1 l+2 || qm ..||J k-1 k || qm , we have GSC(k, l) ≈ GSC(k, k -1)GSC(k -1, k -2)..GSC(l + 1, l). Proof. GSC(k, l) = ||J l k || qm ||f k || 2 ||f l || 2 = ||J l l+1 J l+1 l+2 ..J k-1 k || qm ||f k || 2 ||f l || 2 ≈ ||J l l+1 || qm ||J l+1 l+2 || qm ..||J k-1 k || qm ||f k || 2 ||f l || 2 = ||J l l+1 || qm ||J l+1 l+2 || qm ..||J k-1 k || qm ||f k || 2 ||f l || 2 ||f l+1 || 2 ||f l+1 || 2 ||f l+2 || 2 ||f l+2 || 2 .. ||f k-1 || 2 ||f k-1 || 2 = ||J l l+1 || qm ||f l+1 || 2 ||f l || 2 ||J l+1 l+2 || qm ||f l+2 || 2 ||f l+1 || 2 .. ||J k-1 k || qm ||f k || 2 ||f k-1 || 2 = GSC(k, k -1)GSC(k -1, k -2)..GSC(l + 1, l) E.6 PROPOSITION 6

Proposition 6. Any endomorphism on the hypersphere composed of (i) a strictly monotonic, continuous nonlinearity σ that has σ(0) = 0, (ii) multiplication with a full-rank matrix and (iii) length-only layer normalization is bijective.

Proof. We will prove this by showing that the inverse image of any point under such an endomorphism is a single point. Take any point on the hypersphere. The inverse image under length-only layer normalization is a ray from the origin not including the origin. The inverse image of this ray under multiplication with a full-rank matrix is also a ray from the origin not including the origin. What remains to be shown is that the inverse image of this ray under the nonlinearity layer, when intersected with the hypersphere, yields a single point. We will show this via a series of claims. Let the dimension of the hypersphere be d and its radius be r.

Claim 1: If a point on this ray has an inverse image, that inverse image is a single point.

Let this point on the ray be x. Assume its inverse image contains two points y and z. Then for 1 ≤ i ≤ d, σ(y(i)) = x(i) and σ(z(i)) = x(i) and so σ(y(i)) = σ(z(i)). But y = z, so there exists an i such that y(i) = z(i). So there exist two different values y(i) and z(i) at which σ returns the same result. But σ is strictly monotonic. Contradiction.

Claim 2: If two points x 1 and x 2 on the ray have inverse images y 1 and y 2 and x 1 is closer to the origin than x 2 , then for

1 ≤ i ≤ d, we have |y 1 (i)| ≤ |y 2 (i)|.

For 1 ≤ i ≤ d, σ attains x 2 (i) at y 2 (i) and 0 at 0. Since σ is strictly monotonic, continuous and 0 ≤ |x 1 (i)| ≤ |x 2 (i)| and x 1 (i) and x 2 (i) have the same sign, σ attains x 1 (i) at a point between 0 and y 2 (i). Hence, |y 1 (i)| ≤ |y 2 (i)| as required.

Claim 3: The function f that assigns to each point on the ray that has an inverse image the length of that inverse image is strictly increasing in the direction away from the origin.

Take any two points on the ray x 1 and x 2 that have inverse images y 1 and y 2 where x 1 is closer to the origin. By the previous claim, for 1 ≤ i ≤ d, we have |y 1 (i)| ≤ |y 2 (i)| and therefore ||y 1 || 2 ≤ ||y 2 || 2 and therefore f (x 1 ) ≤ f (x 2 ). Assume f (x 1 ) = f (x 2 ). Then we must have

|y 1 (i)| = |y 2 (i)| for 1 ≤ i ≤ d.

Since σ is strictly monotonic and σ(0) = 0, σ either preserves the sign of all inputs or reverses the sign of all inputs. Since x 1 (i) and x 2 (i) have the same sign, so do y 1 (i) and y 2 (i). So y 1 (i) = y 2 (i), so y 1 = y 2 , so the forward images of y 1 and y 2 are the same, so

x 1 = x 2 . Contradiction. So f (x 1 ) = f (x 2 ), so f (x 1 ) < f (x 2 ).

Claim 4: The function f that assigns to each point on the ray that has an inverse image the length of that inverse image is continuous.

Since f is only defined on a 1-dimensional space, it is enough to show left-continuity and rightcontinuity.

Part 1: left-continuity. Take a sequence of points on the ray with inverse images that approach some point x lim on the ray from the left and assume that x lim also has an inverse image y lim . Then we need to show that the length of y lim is the limit of the lengths of the inverse images of the sequence. It is enough to show this for the monotonic re-ordering of the sequence. Let that monotonic re-ordering be x n . Then we have x n → x lim and ||x n || increases. By claim 2, for 1 ≤ i ≤ d, |y n (i)| is an increasing sequence. This means that |y n (i)| either converges or it is an unbounded sequence. If the latter is true, then it will exceed |y lim (i)|. But since x lim is at least as large as all x n , again by claim 2 we must have |y lim (i)| ≥ |y n (i)|. Contradiction. So |y n (i)| converges. Since σ is strictly monotonic and σ(0), σ either preserves the sign of all values or it reverses the sign of all values. Since for each 1 ≤ i ≤ d, the x n (i) all have the same sign because the x n are on a ray, the y n (i) all have the same sign and so since |y n (i)| converges, y n (i) converges. Let its limit be y lim (i). Because σ is continuous, its value at y lim (i) is the limit of σ(y n (i)). But that is x lim (i). So if y lim is the vector made up of the y lim (i), it is the inverse image of x lim . i.e. y lim = y lim . Since ||.|| 2 is also a continuous function, ||y n || 2 → ||y lim || 2 and so ||y n || 2 → ||y lim || 2 and so f (x n ) → f (x) as required.

Part 2: right-continuity. This case is analogous. We have a decreasing sequence x n and so decreasing sequences |y n (i)| and so convergent sequences y n (i) with a limit y lim that is equal to y lim and so f (x n ) → f (x) as required.

Claim 5: The co-domain of the function f that assigns to each point on the ray that has an inverse image the length of that inverse image is the positive reals.

We argue by contradiction. Assume the co-domain of f is not the positive reals. Then the set S of positive reals not attained by f is non-empty. Let s be the infimum of S.

Case 1: s = 0. Since σ is strictly monotonic with σ(0) = 0, there exists an > 0 such that σ attains all values in the interval [-, ]. So all points on the ray for which all components have absolute value less than have an inverse image, so there exists an > 0 such that all points on the ray with length in the interval (0, ] have an inverse image, so f is defined there. Further, if we extend the domain of f to include the origin, we have f (0) = 0. But by the same argument used for claim 4, f is then right-continuous at 0. Since f is also continuous and defined on (0, ], it attains all values in the interval [0, f ( )]. Specifically, if f is restricted to its original domain (the ray), it still attains all values in (0, f ( )]. So the infimum of S is at least f ( ). Contradiction. Case 2: s > 0 and s ∈ S. Then there exists a sequence x n of points on the ray such that f (x n ) → s and f (x n ) is strictly increasing. By claim 3, ||x n || 2 is strictly increasing. Let the inverse images of the x n be y n . By claim 2, |y n (i)| is increasing for 1 ≤ i ≤ d. Since |y n (i)| ≤ ||y n || 2 < s, |y n (i)| is bounded from above, so it converges. As σ is strictly monotonic and σ(0) = 0, σ either preserves the sign or reverses it for all inputs. So since the x n (i) all have the same sign, so do the y n (i). So y n (i) converges. Let this limit be y lim (i). Since for 1 ≤ i ≤ d, y n (i) → y lim (i), we have y n → y lim where y lim is the vector composed of the y lim (i). Since σ is continuous, the forward image of y lim is the limit of forward images of the y n . Since the forward images of the y n lie on the ray, so does their limit. Hence, the forward image of y lim lies on the ray. Call it x lim . Since length is also continuous, s = lim n→inf ||y n || 2 = ||y lim || 2 . So f (x lim ) = s so s ∈ S. Contradiction. Case 3: s > 0 and s ∈ S. Then there is a point x on the ray for which f (x) = s. Let its inverse image be y. Let I be the set of indeces i with 1 ≤ i ≤ d and x(i) = 0. Since σ has σ(0) = 0 and it is strictly monotonic, y(i) = 0. For i ∈ I, let σ max (i) = σ(2y(i)). Since σ has σ(0) = 0 and it is strictly monotonic, we have |σ(2y(i))| > |σ(y(i))| > 0 and so |σ max (i)| > |x(i)| > 0 and also σ max (i) and x(i) have the same sign. Let C = min i∈I σmax(i)

x(i) . Take some vector y that can vary. Since σ is continuous, as y (i) varies between y(i) and 2y(i), it attains all values between x(i) and σ max (i). So for all 1 ≤ c ≤ C, we can set y (i) to some value y c (i) such that σ(y c (i)) = cx(i). So the vector y c that has the aforementioned y c (i) components for i ∈ I and has zero components for i ∈ I is the inverse image of cx. So f is defined on cx for 1 ≤ c ≤ C. Let s := f (Cx). By claim 3, f is strictly increasing so s > s. By claim 4, f is continuous. So between x and Cx, f takes all values between and including s and s . Also, by the original definition of s, f attains all positive real values less than s. So f attains all positive real values less than s . But s was defined to be the infimum of positive real values that f does not attain. Contradiction.

Claim 6: The inverse image of the ray intersects the hypersphere in a single point. By claim 5, there is a point on the ray that has an inverse image of length r. By claim 3, there is exactly one such point. Therefore, the inverse image of the ray contains exactly one point of length r, so it intersects the hypersphere in exactly one point, as required.

The proposition also applies if each neuron in the nonlinearity layer uses a different nonlinearity σ i as long as it fulfills the stated conditions.

E.7 PROPOSITION 7:

We say a random function f b is 'k-diluted in expectation' with respect to random vector v if there exists a random matrix S b and a random function

ρ b such that f b (v) = S b v + ρ b (v) and Q||S b v||2 Q||ρ b (v)||2 = k.

We say a random function ρ(v) is 'scale-symmetric decomposable' (SSD) if it can be written as

u ρ ρ ( v ||v||2 )||v|| 2

, where ρ is a random scalar function and u ρ is uniformly distributed on the hypersphere and independent of both ρ and v.

We say a random matrix S is 'scale-symmetric decomposable' (SSD) if Sv, when viewed as a function of the vector v is SSD. 

independent, f 1 • f 2 • .. • f B is b (1 + 1 k 2 b ) -1 -1

2 -diluted in expectation with respect to u.

Proof. Let U be the uniform distribution over unit length vectors and u ∼ U . We will procede by induction over B, where the induction hypothesis includes the following claims.

1.

f 1 • f 2 • .. • f B is b (1 + 1 k 2 b ) -1 -1 2 -diluted in expectation. 2. Q||f 1 •f 2 •..•f B (u)|| 2 = (Q||S 1 S 2 ..S B u|| 2 ) 2 + (Q||f 1 • f 2 • .. • f B (u) -S 1 S 2 ..S B u|| 2 ) 2 3. S 1 S 2 ..S B u, f 1 • f 2 • .. • f B (u) and f 1 • f 2 • .. • f B (u) -S 1 S 2 .

.S B u are all radially symmetric Let's start by looking at the case B = 1. Claim (1) follows directly from the conditions of the proposition. We have:

Q||f 1 (u)|| 2 = Q||S 1 u + ρ 1 (u)|| 2 = Q (S 1 u + ρ 1 (u)).(S 1 u + ρ 1 (u)) = E(S 1 u + ρ 1 (u)).(S 1 u + ρ 1 (u)) = E(S 1 u).(S 1 u) + 2E(S 1 u).ρ 1 (u) + Eρ 1 (u).ρ 1 (u) = E... + 2E(S 1 u).(u ρ1 ρ1 ( u ||u|| 2 )||u|| 2 ) + E... = E... + 2E u,S1, ρ 1 (S 1 u).( ρ1 ( u ||u|| 2 )||u|| 2 E uρ 1 u ρ1 ) + E... = E(S 1 u).(S 1 u) + 0 + Eρ 1 (u).ρ 1 (u) = (Q||S 1 u|| 2 ) 2 + (Q||ρ 1 (u)|| 2 ) 2 = (Q||S 1 u|| 2 ) 2 + (Q||f 1 (u) -S 1 u|| 2 ) 2

This is claim (2). For any u, ρ 1 (u) is radially symmetric because ρ 1 is SSD. If S 1 is SSD, S 1 u is also radially symmetric for arbitrary u. If S 1 is a multiple of the identity, S 1 u is radially symmetric because u is radially symmetric. In either case, S 1 u is radially symmetric. Because the orientation of ρ 1 (u) is governed only by u ρ1 which is independent of both u and S 1 , the orientations of S 1 u and ρ 1 (u) are independent. But the sum of two radially symmetric random variables with independent orientations is itself radially symmetric, so f 1 (u) is also radially symmetric. This yields claim (3). Now for the induction step. Set B to some value and also define k

• := B b=2 (1 + 1 k 2 b ) -1 -1 2 , S • := S 2 S 3 ..S B , f • := f 2 • .. • f B and ρ • := f • -S • . Then the induction hypothesis yields that f • is k • -diluted in expectation, that Q||f • (u)|| 2 = Q||S • u|| 2 + Q||ρ • (u)|| 2 and that f • (u), ρ • (u) and S • u are radially symmetric. This implies that f•(u) ||f•(u)||2 , ρ•(u) ||ρ•(u)||2 and S•u ||S•u||2 are uniformly distributed unit length vectors. Define c • := Q||S • u|| 2 . Then k • -dilution in expectation implies Q||ρ • (u)|| 2 = c• k• and hence Q||f • (u)|| 2 = 1 + 1 k 2 • c • . Similarly, let

c 1 := Q||S 1 u|| 2 and then Q||ρ 1 (u)|| 2 = c1 k1 and analogously to the B = 1 case we have Q||f

1 (u)|| 2 = (Q||S 1 u|| 2 ) 2 + (Q||f 1 (u) -S 1 u|| 2 ) 2 = c 2 1 + ( c1 k1 ) 2 = 1 + 1 k 2 1 c 1 . We have Q||ρ 1 (f • (u))|| 2 = Eρ 1 (f • (u)).ρ 1 (f • (u)) = E(u ρ1 ρ1 ( f • (u) ||f • (u)|| 2 )||f • (u)|| 2 ).(u ρ1 ρ1 ( f • (u) ||f • (u)|| 2 )||f • (u)|| 2 ) = E ||f•(u)||2, f• (u) ||f• (u)|| 2 ,ρ1 ||f • (u)|| 2 2 (u ρ1 ρ1 ( f • (u) ||f • (u)|| 2 )).(u ρ1 ρ1 ( f • (u) ||f • (u)|| 2 )) = E ||f•(u)||2 ||f • (u)|| 2 2 E f• (u) ||f• (u)|| 2 ,ρ1 (u ρ1 ρ1 ( f • (u) ||f • (u)|| 2 )).(u ρ1 ρ1 ( f • (u) ||f • (u)|| 2 )) = (1 + 1 k 2 • )c 2 • E f• (u) ||f•(u)|| 2 ,ρ1 ρ 1 ( f • (u) ||f • (u)|| 2 ).ρ 1 ( f • (u) ||f • (u)|| 2 ) = (1 + 1 k 2 • )c 2 • (Q||ρ 1 ( f • (u) ||f • (u)|| 2 )|| 2 ) 2 = 1 + 1 k 2 • c • c 1 k 1 If S 1 is SSD, analogously, we have Q||S 1 S • u|| 2 = c • c 1 , Q||S 1 ρ • (u)|| 2 = c• k• c 1 and Q||S 1 f • (u)|| 2 = 1 + 1 k 2 • c • c 1 . If S 1 is a multiple of the identity, by the definition of c 1 , it is c 1 times the identity. Therefore Q||S 1 S • u|| 2 = Q||c 1 S • u|| 2 = c • c 1 , Q||S 1 ρ • (u)|| 2 = Q||c 1 ρ • (u)|| 2 = c• k• c 1 and Q||S 1 f • (u)|| 2 = Q||c 1 f • (u)|| 2 = 1 + 1 k 2 • c • c 1 also hold. Then we have Q||f 1 (f • (u)) -S 1 S • u|| 2 Q||S 1 (f • (u)) + ρ 1 (f • (u)) -S 1 S • u|| 2 Q||S 1 (S • u + ρ • (u)) + ρ 1 (f • (u)) -S 1 S • u|| 2 Q||S 1 ρ • (u) + ρ 1 (f • (u))|| 2 = E(S 1 ρ • (u)).(S 1 ρ • (u)) + E(S 1 ρ • (u)).ρ 1 (f • (u)) + Eρ 1 (f • (u)).ρ 1 (f • (u)) = E... + 2E(S 1 ρ • (u)).(u ρ1 ρ1 ( f • (u) ||f • (u)|| 2 )||f • (u)|| 2 ) + E... = E... + 2E f•(u),ρ•(u),S1, ρ 1 (S 1 ρ • (u)).( ρ1 ( f • (u) ||f • (u)|| 2 )||f • (u)|| 2 E uρ 1 u ρ1 ) + E... = E(S 1 ρ • (u)).(S 1 ρ • (u)) + 0 + Eρ 1 (f • (u)).ρ 1 (f • (u)) = (Q||S 1 ρ • (u)|| 2 ) 2 + (Q||ρ 1 (f • (u))|| 2 ) 2 = c • k • c 1 2 + 1 + 1 k 2 • c • c 1 k 1 2 = c • c 1 1 k 2 • + (1 + 1 k 2 • ) 1 k 2 1 = c • c 1 -1 + (1 + 1 k 2 • )(1 + 1 k 2 1 )

And analogously we have

Q||f 1 (f • (u))|| 2 Q||S 1 (f • (u)) + ρ 1 (f • (u))|| 2 = (Q||S 1 f • (u)|| 2 ) 2 + (Q||ρ 1 (f • (u))|| 2 ) 2 = 1 + 1 k 2 • c • c 1 2 + 1 + 1 k 2 • c • c 1 k 1 2 = c • c 1 (1 + 1 k 2 • )(1 + 1 k 2 1 ) So Q||S1S•u||2 Q||f1(f•(u))-S1S•u||2 = c•c1 c•c1 -1+(1+ 1 k 2 • )(1+ 1 k 2 1 ) = (-1 + (1 + 1 k 2 • )(1 + 1 k 2 1 )) -1 2 . Substituting back k • , S • and f • , we obtain claim (1). Claim (2), when substituting in k • , S • and f • becomes Q||f 1 (f • (u))|| 2 = (Q||S 1 S • u|| 2 ) 2 + (Q||f 1 (f • (u)) -S 1 S • u|| 2 ) 2 . Substituting the identities we obtained results in c • c 1 (1 + 1 k 2 • )(1 + 1 k 2 1 ) = (c • c 1 ) 2 + c • c 1 -1 + (1 + 1 k 2 • )(1 + 1 k 2 1 ) 2 ,

which is true, so we have claim (2).

Consider S 1 S 2 ..S B u = S 1 S • u. We know S • u is radially symmetric by the induction hypothesis, so if S 1 is a multiple of the identity, so is

S 1 S • u. If S 1 is SSD, then S 1 S • u is radially symmetric for any value of S • u. In either case, S 1 S • u is radially symmetric. Consider f 1 f 2 ..f B u = f 1 f • u.

We know f • u is radially symmetric by the induction hypothesis. We also have

f 1 f • u = S 1 f • u + ρ 1 (f • u). We just showed S 1 f • u is radially symmetric. Because ρ 1 is SSD, ρ 1 (f • u

) is radially symmetric with an orientation independent of that of S 1 f • u because it is governed only by u ρ1 . The sum of two radially symmetric random variables with independent orientation is itself radially symmetric, so

f 1 f • u is radially symmetric. Finally, consider f 1 f 2 ..f B u -S 1 S 2 ..S B u = S 1 ρ • (u) + ρ 1 (f • (u)).

We know ρ • (u) is radially symmetric by the induction hypothesis so as before, S 1 ρ • (u) is radially symmetric. And again, ρ 1 (f • (u)) is radially symmetric with independent orientation, so the sum f 1 f 2 ..f B u -S 1 S 2 ..S B u is radially symmetric.

So we also have claim (3). This completes the proof.

A Gaussian initialized matrix and an orthogonally initialized matrix are both SSD. Therefore the condition that the S b are either the identity or SSD is fulfilled for all popular skip connection types.

Unfortunately, many ResNets do not quite fulfill the SSD condition on ρ b , but they come close. If the last operation of each ρ b is multiplication with an SSD matrix, a popular choice, the orientation of ρ b is indeed governed by an independent, uniform unit length vector u ρ as required. However, many choices of ρ b do not preserve the length of the incoming vector ||v|| 2 as in an SSD function. However, because the inputs to each ρ b are random and high-dimensional, we do not expect their lengths to vary much, especially if the original inputs to the network have themselves been normalized. So the loss of the information of the length of the incoming vector should not cause the overall behavior to change significantly.

A block function ρ b that is SSD, for example, is any such function that is composed of only linear and ReLU layers, where the final layer is Gaussian or orthogonally initialized.

Finally, note that this proposition applies only in expectation over randomly initialized matrices.

As long as those matrices are high-dimensional, we expect it to apply approximately to specific realizations of those matrices as well.

F THEOREMS AND PROOFS:

F.1 THEOREM 1 -EXPLODING GRADIENTS LIMIT DEPTH See section D for the formal definition of effective depth and related concepts.

Consider some MLP f with nominal depth L and layers f l , 1 ≤ l ≤ L. Let its compositional depth be N and its linear layers be f ln , 1 ≤ n ≤ N where l 1 < l 2 < .. < l N . Let each linear layer be the sum of an unparametrized initial function i ln and a parametrized residual function r ln (θ ln ). i ln represents multiplication with the initial weight matrix and is used interchangeably to denote that initial weight matrix. r ln (θ ln ) represents multiplication with the residual weight matrix and is used interchangeably to denote that residual weight matrix. The parameter sub-vector θ ln contains the entries of the residual weight matrix.

Let an N -trace φ N be a subset of {1, .., N }. Let Φ N be the set of all possible N -traces and let Φ λ N be the set of all N -traces of size λ or more. We define the 'gradient term' G(φ N , f, θ, X, Y ) := J 0 J 1 ..J l N +1 -1 where J k = J k k+1 if layer k is not a linear layer, J k = r ln (θ ln ) if layer k corresponds to linear layer l n and n ∈ φ N , and J k = i ln if layer k corresponds to linear layer l n and n ∈ φ N .

Let res:

Λ N (f, θ, X, Y ) := N -1 λ=Λ φ N -1 ∈Φ λ N -1 G(φ N -1 , f, θ, X, Y ).

Theorem 1. Consider an MLP f as defined above with all parameter sub-vectors initialized to θ (0) ln = 0. Taken some set of possible query points D. Let each of the parameter sub-vectors be updated with a sequence of updates ∆θ

(t) ln such that θ (t) ln = θ (t-1) ln + ∆θ (t)

ln with 1 ≤ t ≤ T . Let alg be a fixed function and Λ an integer. Further assume:

1. ∆θ (t) ln = alg( df (θ (t-1) ,X (t) ,Y (t) ) dθ (t-1) ln

) for some (X (t) , Y (t) ) ∈ D 2. there exist constants r and c such that

||∆θ (t) ln ||2 ||i ln ||2 ≤ 1

cr n for all n and t 3. there exists a constant c ≥ 1 such that

||alg df (θ (t-1) ,X (t) ,Y (t) ) dθ (t-1) l N -alg df (θ (t-1) ,X (t) ,Y (t) ) dθ (t-1) l N -res Λ N (f, θ (t-1) , X (t) , Y (t) ) || 2 ||alg df (θ (t-1) ,X (t) ,Y (t) ) dθ (t-1) l N || 2 ≤ c N -1 λ=Λ φ N -1 ∈Φ λ N -1 n∈φ N -1 ||r ln (θ (t) ln )|| 2 ||i ln || 2

for all N and t. Then for all N we have

4.. T ≤ ch:

1 ||i l N || 2 || T t=1 alg df (θ (t-1) , X (t) , Y (t) ) dθ (t-1) l N -alg df (θ (t-1) , X (t) , Y (t) ) dθ (t-1) l N -res Λ (f, θ (t-1) , X (t) , Y (t) ) || 2 ≤ h Proof. For all T ≤ T , we have ||θ (T ) ln || 2 = || T t=1 ∆θ (t) ln || 2 ≤ T t=1 ||∆θ (t) ln || 2 ≤ T cr n ||i ln || 2 ≤ T cr n ||i ln || 2 . Then we have 1 ||i l N || 2 || T t=1 alg df (θ (t-1) , X (t) , Y (t) ) dθ (t-1) l N -alg df (θ (t-1) , X (t) , Y (t) ) dθ (t-1) l N -res Λ (f, θ (t-1) , X (t) , Y (t) ) || 2 ≤ 1 ||i l N || 2 T t=1 ||alg df (θ (t-1) , X (t) , Y (t) ) dθ (t-1) l N -alg df (θ (t-1) , X (t) , Y (t) ) dθ (t-1) l N -res Λ (f, θ (t-1) , X (t) , Y (t) ) || 2 ≤ 1 ||i l N || 2 T t=1 ||alg df (θ (t-1) , X (t) , Y (t) ) dθ (t-1) l N || 2 c N -1 λ=Λ φ N -1 ∈Φ λ N -1 n∈φ N -1 ||r (t) ln (θ ln )|| 2 ||i ln || 2 = c T t=1 ||∆θ (t) l N || 2 ||i l N || 2 N -1 λ=Λ φ N -1 ∈Φ λ N -1 n∈φ N -1 ||r ln (θ (t) ln )|| 2 ||i ln || 2 ≤ c T cr N N -1 λ=Λ φ N -1 ∈Φ λ N -1 n∈φ N -1 ||θ (t) ln || 2 ||i ln || 2 ≤ T c cr N N λ=Λ φ N -1 ∈Φ λ N -1 n∈φ N -1 T cr n ≤ T c cr N ∞ λ=Λ ( T c ) λ φ∞∈Φ λ ∞ n∈φ∞ 1 r n

Let K(λ, n) be the number of ways to choose λ distinct positive integers such that their sum is n.

Clearly, K(λ, n) = 0 for n < λ(λ+1)

2:

. For n ≥ λ(λ+1)

, the largest number that can be chosen is n

-λ(λ+1) 2 + λ and so K(λ, n) ≤ (n -λ(λ+1) 2 + λ) λ = (n -λ(λ-1) 2 ) λ . So we have T c cr N ∞ λ=Λ ( T c ) λ φ∞∈Φ λ ∞ n∈φ∞ 1 r n = T c cr N ∞ λ=Λ ( T c ) λ n K(λ, n) r n = T c cr N ∞ λ=Λ ( T c ) λ ∞ n= λ(λ-1) 2 +1 K(λ, n) r n ≤ T c cr N ∞ λ=Λ ( T c ) λ ∞ n= λ(λ-1) 2 +1 (n -λ(λ-1) 2 ) λ r n = T c cr N ∞ λ=Λ ( T c ) λ r -λ(λ-1) 2 ∞ n=1 n λ r n < T c cr N ∞ λ=Λ ( T c ) λ r -λ(λ-1) 2 λ λ (ln r) -λ ≤ c ∞ λ=Λ ( T c ) λ+1 r -λ(λ-1) 2 λ λ (ln r) -λ ≤ c ∞ λ=Λ ( ch 1 Λ 32rc (ln r) 3 r Λ 4 c ) λ+1 r -λ(λ-1) 2 λ λ (ln r) -λ < ∞ λ=Λ h λ+1 Λ ( 1 2 ) λ+1 ( 1 16 ) λ+1 (ln r) 2λ+3 r -1 4 λ 2 λ λ < ∞ λ=Λ h λ+1 Λ ( 1 2 ) λ+1

< h alg represents the gradient-based algorithm and the quantity that is ultimately bounded by h is the first-order approximation of the relative λ-contribution at layer l N until time T . To obtain that the network has effective depth Λ, all we need is to set h to a small value. In that case, the first-order approximation is sufficient. Now, we analyze the four conditions in turn.

Condition (1) states that the algorithm computes the update. For convenience, we write the algorithm as a deterministic function of the gradient of the layer for which the update is computed. The proof can be trivially extended to algorithms that use the gradients of other layers, past gradients and as well randomness if we add the same dependencies to condition (3). Also for convenience, we assume a batch size of 1. We can apply the result to larger batch sizes, for example, by having alg use past gradients and setting the majority of updates to zero.

Condition (2) reflects the argument from section 4.3 that the area around the current parameter value in which the gradient is reflective of the function is bounded by a hypersphere of relative radius 1 GSC(ln,0) , and the assumption that gradients explode, i.e. GSC(l n , 0) ≥ cr ln . Note that for convenience, we divide the size of the update ||∆θ || 2 . This is realistic given the general observation that the largest useful update size decreases in practice when training a deep network. Therefore, we can bound all updates by the largest useful update size in the initialized state.

The strongest condition is (3). It can be understood as making two distinct assertions.

Firstly, ignoring the alg() function, it bounds the length of the sum of the Λ-residual terms. In essence, it requires that on average, the size of these terms is "what one would expect" given the L 2 norm of the initial and residual weight matrices up to some constant c . In other words, we assume that in λ-residual terms, the large singular values of layer-wise Jacobians do not compound disproportionately compared to the full gradient. The bound is however also very conservative in the sense that it implicitly assumes that all λ-residual terms have the same orientation.

Secondly, it asserts that alg() is "relatively Lipschitz" over the gradient. This is fulfilled e.g. for SGD and SGD with custom layer-wise step sizes as used in our experiments. It is fulfilled by SGD with momentum as long as size of the momentum term is bounded below. In theory, it is not fulfilled by RMSprop or Adam as gradients on individual weight matrix entries can be "scaled up" arbitrarily via the denominator. In practice, the regularization term used in the denominator prevents this, although this is rarely necessary.

Finally, condition (4) states that the training time is limited. Importantly, the bound on T is exponential in Λ and independent of both L and N . Note that we did not attempt to make the bound tight. As it stands, unfortunately, the bound too loose to have much practical value. It would indicate that networks can be trained to far greater depth than is possible in practice. The limitation of effective depth in practice is studied in section 4.4.

F.2 THEOREM 2 -WHY GRADIENTS EXPLODE:

Theorem 2. Consider a neural network f with random parameter θ composed of layer functions f l that are surjective endomorphisms on the d-dimensional hypersphere. Let J l := J l l+1 . Let S be the hypersphere and let S be the uniform distribution on it. Let F l , 1 ≤ l ≤ L, be random vectors independent of θ where F l ∼ S. Assume:

1. The θ l are independent of each other.

2. Each Jacobian J l (θ l , F l+1 ) has d -1 nonzero singular values which, as F l+1 and θ l vary, are independent and drawn from some distribution P l .

3. There exist some > 0 and δ > 0 such that

P p l ∼P l (||p l | -E q l ∼P l (|q l |)| > ) > δ for all l.

4. f l (θ l , F l+1 ) is a uniformly distributed vector on the hypersphere.

5. For any unit length vector u, J l (θ l , F l+1 )u can be written as l (θ l , F l+1 , u)u l . Here, l is random scalar independent of both u l and f l (θ l , F l+1 ). u l , conditioned on f l (θ l , F l+1 ), is uniformly distributed in the space of unit length vectors orthogonal to f l (θ l , F l+1 ).

Let X ∼ S be a random vector independent of θ. Then setting r(δ,

) := √ 1 + δ 2 we have Q θ,X GSC(k, l, f, θ, X) ≥ d-1 d r(δ, ) k-l .

Proof. The hypersphere is a d -1-dimensional subspace in R d . Hence, any endomorphism f l on that subspace will have Jacobians with at least one zero singular value with right eigenvector equal to the normal of the subspace at the input and left eigenvector equal to the normal of the subspace at the output. Since the subspace is the unit hypersphere, the normal at the input is the input and the normal at the output is the output. By assumption, the Jacobian has no other zero singular values.

Let the singular values of the Jacobian be s 1 , .., s d-1 , s d . WLOG we set s d = 0.

Throughout this proof, we use det(J l ) to denote the product of singular values of the Jacobian excluding the zero singular value, i.e. det(J l ) = Similarly, we have

Q F l+1 ,θ l ||J l (θ l , F l+1 )|| qm = Q F l+1 ,θ l d-1 i=1 s 2 i d -1 = E F l+1 ,θ l d-1 i=1 s 2 i d -1 = E F l+1 ,θ l s 2 1 = (E F l+1 ,θ l |s 1 |) 2 + Var F l+1 ,θ l (|s 1 |) ≥ 1 + δ 2

The last identity uses condition (3). Let θ l k := (θ l , θ l+1 , .., θ k-1 ). Now, we will prove the following claim by induction:

(A) f l (θ l L , X) is a uniformly distributed vector on the hypersphere independent of θ 1 l . Since X ∼ S, by condition (4), we have f L (θ L , X) ∼ S. Also, since X is independent of θ 1 L and θ L is independent of θ 1 L , f L (θ L , X) is independent of θ 1 L , as required. Now for the induction step. Assume (A) is true for some l. Then by the induction hypothesis, f l (θ l L , X) ∼ S and f l (θ l L , X) is independent of θ 1 l and thus independent of θ 1 l-1 . Then by condition (4), f l-1 (θ l-1 L , X) = f l-1 (θ l-1 , f l (θ l L , X)) ∼ S. Also, since both θ l-1 and f l (θ l L , X) are independent of θ 1 l-1 , so is f l-1 (θ l-1 L , X). This completes the induction step. Analogously, we have claim (A2): f l (θ l k , F k ) is a uniformly distributed vector on the hypersphere independent of θ 1 l . Now we will prove the following claim by induction on k -l.

(B) For any unit length vector u, J l k (θ l k , F k )u can be written as l k (θ l k , F k , u)u l . Here, l k is a random scalar independent of both u l and f l (θ l k , F k ). u l , conditioned on f l (θ l k , F k ), is uniformly distributed in the space of unit length vectors orthogonal to f l (θ l k , F k ). The case k = l + 1 is equivalent to condition (5). For the induction step, consider

= Q θ,X,u ||J l+1 k u|| 2 = Q θ,X GSC(k, l + 1, f, θ, X) ≥ d -1 d 1 + δ 2 k-l-1

The last line comes from the induction hypothesis. Now, let's look at the second term Q θ l ,f l+1 ,u l+1 ||J l l+1 (θ l , f l+1 )u l+1 || 2 . u l+1 if uniform among unit length vectors orthogonal to f l+1 . But this leads to u l+1 being orthogonal to the normal of the hypersphere at f l+1 and thus orthogonal to the right null space of J l l+1 . Since u l+1 is also independent of θ l , we have Q θ l ,f l+1 ,u l+1 ||J l l+1 (θ l , f l+1 )u l+1 || 2 = Q θ l ,f l+1 ||J l l+1 (θ l , f l+1 )|| qm . By claim (A), f l+1 is ∼ S and independent of θ l , so

Q θ l ,f l+1 ||J l l+1 (θ l , f l+1 )|| qm ≥ √ 1 + δ 2 .

Putting those results together, we obtain

Q θ,X GSC(k, l, f, θ, X) = (Q l+1 k l+1 k )(Q θ l ,f l+1 ,u l+1 ||J l l+1 (θ l , f l+1 )u l+1 || 2 ) ≥ d -1 d 1 + δ 2 k-l-1 1 + δ 2 = d -1 d 1 + δ 2 k-l

This is the desired claim.

Let's look at the conditions.

Condition (1) is standard for randomly initialized weight matrices.

Conditions (4) and ( 5) are both fulfilled if the last two operations of each layer function are multiplication with a weight matrix and length-only layer normalization and that weight matrix is Gaussian or orthogonally initialized.

If the weight matrix is orthogonally initialized, this is easy to see, because the linear transformation and the normalization operation commute. If we exchange those two operations then the last operation applied in both f l (θ l , F l+1 ) and J l (θ l , F l+1 )u is the orthogonal transformation, which decouples the orientations of both terms from the length of J l (θ l , F l+1 )u as well as decoupling the orientations of the terms from each other up to preserving their angle. Finally, note that J l (θ l , F l+1 )u always lies in the left-null space of J l (θ l , F l+1 ). But that space is orthogonal to f l (θ l , F l+1 ), and hence the two terms are orthogonal as required.

If the weight matrix is Gaussian initialized, note that the product of a Gaussian initialized matrix and an orthogonally initialized matrix is Gaussian initialized. Hence, we can insert an additional orthogonally initialized matrix and then proceed with the previous argument to show that conditions (4) and ( 5) are fulfilled.

After applying a linear transformation with one of the two initializations, conditions (4) and (5) hold except for the length of f l is not 1. Hence, even if length-only layer normalization is not used as part of the endomorphism, we expect (4) and ( 5) to hold approximately in practice.

As far as we can tell, conditions (2) and (3) are not fulfilled in practice. They are both used to derive from unit determinants a greater than unit qm norm. As long this implications holds for practical layer functions, (2) and (3) are not necessary. = ||gR(u)||2||u||2 ||ρ(u)||2||g||2 , ignoring the skip connection. Therefore r can be viewed as the growth of the GSC. Similarly, Q||gR(u)+gS||2Q||u||2 Q||ρ(u)+Su||2Q||g||2 represents the growth of the GSC after the skip connection has been added.

The key assumptions are E(Su).(ρ(u)) = 0 and E(gR(u)).(gS) = 0. In plain language, we assume that the function computed by the skip connection is uncorrelated to the function computed by the residual block and that the same is true for the gradient flowing through them. For the forward direction, this is true if either the skip connection is Gaussian / orthogonally initialized or the last layer of the residual block is linear and Gaussian / orthogonally initialized and if the randomness of the initialization is absorbed into the expectation. Unfortunately, for the backward direction, such a statement cannot be made because the gradient has a complex dependence both on S and R. However, the assumption that this dependence between the forward and backward direction is immaterial has proven realistic in mean field theory based studies (see section B.1.1). Under this assumption, as in the forward direction, we require that either the skip connection is Gaussian / orthogonally initialized or the first layer of the residual block is linear and Gaussian / orthogonally initialized. Note that even if both assumptions are only fulfilled approximately, this is not catastrophic to the theorem.

The other assumption is Q||gS||2Q||u||2 Q||Su||2Q||g||2 = 1. This is true if S is an orthogonal matrix and so specifically if S is the identity matrix. If S is Gaussian / orthogonally initialized, this is true if the randomness of the initialization is absorbed into the Q terms. Again, if this assumption only holds approximately, it is not catastrophic to the theorem.

An implicit assumption made is that the distribution of the incoming gradient g is unaffected by the addition of the skip connection, which is of course not quite true in practice. The addition of the skip connection also has an indirect effect on the distribution and scale of the gradient as it flows further towards the input layer.

The experiments in figure 3 bear out the theory discussed here.

G TAYLOR APPROXIMATION OF A NEURAL NETWORK:

We define the first-order Taylor approximation T l of the bottom layers up to layer l recursively. Write i l (x) as the short form of i l (i l+1 (..i L (x)..)). Then T L (θ, X) = f L (θ L , X) T l (θ, X) = i l (T l+1 (θ, X)) + r l (θ l , i l+1 (X)) + L k=l+1 dr l (θ l , i l+1 (X))

di k (X) r k (θ k , i k+1 (X)) for l < L

The maximum number of parametrized residual functions composed in T l is 2. Otherwise, only addition and composition with fixed functions is used. Hence, the compositional depth of T l is min(L -l, 2). Hence, the network f Taylor(l) := f 0 (y, f 1 (..f l-1 (T l (X))..)) has compositional depth max(l + 1, L).

For ResNet architectures, as in section D.2, we divide each layer in the residual block into its initial and residual function. Then the definition of the Taylor expansion remains as above, except a term s l (T m (θ, X)) is added at each layer l where a skip connection, represented by skip function s l , terminates. T m is the Taylor expansion at the layer where the skip connection begins.

H LOOKS-LINEAR INITIALIZATION:

The looks-linear initialization ('LLI') of ReLU MLPs achieves an approximate orthogonal initial state. Consider a ReLU MLP with some number of linear layers and a ReLU layer between each (E D f l+1 (i) 2 ) -(E D f l+1 (i)) 2 for all 1 ≤ i ≤ d l+1 . We then computed the quadratic mean of those standard deviations as a summary statistic for the layer. • Pre-activation sign diversity: For each nonlinearity layer l, at each neuron in f l+1 , we computed min(pos, 1 -pos), where pos is the fraction of activations that were positive across the 10.000 datapoints. We then computed the mean of those values across the layer as a summary statistic.

Finally, we obtained a summary statistic for each layer and architecture by averaging the results over the 100 datasets. Results are shown in table 1 , figure 1 and figure 3.

I.3 PROTOCOL FOR CIFAR10 EXPERIMENTS:

For CIFAR10 experiments, we preprocessed each feature to have zero mean and unit variance. We used the training set of 50.000 datapoints and disregarded the test set. We used batches of size 1.000 except for the vanilla batch-ReLU architecture with Gaussian initialization, for which we used a batch size of 50.000. (See section 4.5 for the explanation.)

We trained each architecture we studied (see table 2 for the full list) with SGD in two ways. First, with a single step size for all layers. Second, with a custom step size for each layer.

Single step size We perform a grid search over the following starting step sizes: {1e5, 3e4, 1e4, 3e3, .., 1e -4, 3e -5, 1e -5}. For each of those 21 starting step sizes, we train the network until the end-of-epoch training classification error has not decreased for 5 consecutive epochs. Once that point is reached, the step size is divided by 3 and training continues. Once the end-of-epoch training classification error has again not decreased for 5 epochs, the step size is divided by 3 again. This process is repeated until training terminates. Termination occurs either after 500 epochs or after the step size is divided 11 times, whichever comes first. The starting step size that obtains the lowest final training classification error is selected as the representative step size for which results are presented in the paper.

Custom step sizes:

In this scenario, we use a different starting step size for each layer. After those step sizes are computed, smoothed and scaled as described in section I.4, we train the pre-trained network with those step sizes. As before, periodically, we divide all step sizes jointly by 3. As before, training is terminated after 11 divisions or when 500 epochs are reached, whichever comes first.

We compute the following metrics:

• Largest relative update size for each layer induced by the estimated optimal step size during the epoch where that optimal step size was estimated. See section I.4 for details. See table 2 and figures 2, 4, 5 and 6 for results.

I.4 SELECTING CUSTOM STEP SIZES:

We estimated the optimal step size for each linear layer under SGD for our CIFAR10 experiments. This turned out to be more difficult than expected. In the following, we describe the algorithm we used. It has five stages.

Scaling Finally, we jointly scale all layer-wise step sizes with a single constant. That value is chosen as in the selection phase by trying a small constant, training for one epoch, rewinding that epoch, multiplying that constant by 1.5, rinse, repeat. Again, that process was terminated once any layer experiences an update of relative size at least 0.1. This stage is necessary because the size of the update on the entire parameter vector when all layers are trained jointly is ≈ √ 51 times larger than when only single layers are trained as in the selection phase. Hence, a scaling constant less than 1 is usually needed to compensate. Again, some architectures benefited from using clipping, where we terminated the scaling constant search as soon as one exhibited an error more than 0.1% above the current best scaling constant. Vanilla tanh, vanilla layer-tanh, ResNet layer-tanh and looks-linear layer-ReLU used this clipping.

Formally, for each architecture, we trained three networks to completion. One using no clipping, one using only clipping during the scaling phase, and using the clipping phase as well as clipping during the scaling phase. Whichever of these three networks had the lowest end-of-training error was selected for presentation in the paper. To compare, for single step size training, we compared 21 end-of-training error values.

:

Summary For the first time, we established a direct link between exploding gradients and severe training difficulties that cannot be overcome by gradient rescaling. These difficulties arise in MLPs composed of the most popular layer types, even those that utilize techniques that stabilize forward activations which are believed to combat exploding gradients. The gradient scale coefficient not only underpins this analysis, but is largely invariant to the confounders of network scaling (proposition 4), layer width and individual layers (section 3). Therefore we argue the GSC is the best metric for the study of exploding gradients in general.

It is possible to define probability distributions over matrices where the expected determinant is 1 and the expected qm norm is less than 1, though these examples are contrived and tend not to occur in practice.

Figures and Tables:

Figure 1: Key metrics for architectures in their randomly initialized state evaluated on Gaussian noise. The x axis in the left graph shows depth in terms of the number of linear layers counted from the input. Note: The curve for ReLU-layer is shadowed by tanh in the figure A and by ReLU in figure C.

Figure 2: Key metrics for architectures trained on CIFAR10. See main text for explanation.

Let s b , 1 ≤ b ≤ B be the function computed by the b'th skip connection. Let ρ b be the function computed by the b'th residual block. b = B corresponds to the lowest block and b = 1 corresponds to the highest block. Let f b = s b + ρ b . Definition 4. We say a function f b is 'k-diluted' with respect to a random vector v if there exists a matrix S b and a function ρ b such that f b

Figure 3: Key metrics for ResNet architectures at various depths. Left and right graph only show values between skeip connections. The x axis shows depth in terms of the number of linear layers counted from the input. Note: The curve for layer-tanh and batch-tanh is shadowed by SeLU in the right graph.

Figure4: Key metrics for architectures with collapsing domain trained on CIFAR10. The top left graph shows the estimated optimal relative update size in each layer according to the algorithm described in section I.3. Remaining graphs show results obtained from training with a single step as this achieved lower error than training with layer-wise step sizes (see table2). The top two rows are equivalent to graphs in figure2. The bottom row shows pre-activation standard deviation and preactivation sign diversity (see section I.2 for definition) of the highest nonlinearity layer as training progresses.

A DYNAMICAL SYSTEMS VIEW Recently,Haber et al. (2017);Haber & Ruthotto (2017);Chang et al. (2017);Anonymous (2018a)   proposed ResNet architectures inspired by dynamical systems and numerical methods for ordinary differential equations. The central claim is that these architectures are stable at arbitrary depth, i.e. both forward activations and gradients (and hence GSC) are bounded as depth goes to infinity. They propose four practical strategies for building and training ResNets: (a) ensuring that residual and skip functions compute vectors orthogonal to each other by using e.g. skew-symmetric weight matrices (b) ensuring that the Jacobian of the skip function has eigenvalues with negative real part by using e.g. weight matrices factorized as -C T C (c) scaling each residual function by 1/B where B is the number of residual blocks in the network and (d) regularizing weights in successive blocks to be similar via a fusion penalty.ArchitectureGSC(L, 0) (base 10 log) GSC(L, 0) dilution-corrected (base 10 log) batch-ReLU (i) 0

arr := [1]; 2 for k = 0 to l -1 do 3 size = size(arr); 4 arr.push back(arr[size -1] * ||r k || op ); 5 for i = size -1 to 1 do 6 arr[i] = arr[i] arr[i -1] * ||r k || op ; 11 for i = λ to size(arr) -1 do 12 out = out + arr[λ]; 13 end 14 return out * c (t) l * ||f l+1 || 2 ;

arr copy = arr; 2 for k = n to m -1 do 3 size = size(arr); 4 arr.push back(arr[size -1] * ||r k || op );5 for i = size -1 to 1 do 6 arr[i] = arr[i] arr[i -1] * ||r k || op ; i = 0 to size(arr copy ) -1 do arr[i] = arr[i] + arr copy [i]In line 11, the combined effect of the skip connection and the initial functions of the residual block is approximated by the effect of the entire block, i.e. In the same line, we must subtract the impact of the initial functions accumulated while passing through the residual block, i.e.

a dataset D of datapoints (x, y) • a closed, bounded domain D of possible query points (X, Y ) • a function ||.|| from matrices to the reals that has c||.|| = ||c.|| and ||.|| ≥ 0

Let u be a uniformly distributed unit length vector. Given random functions f b , 1 ≤ b ≤ B, which are k b -diluted in expectation with respect to u, a matrix S b that is either SSD or a multiple of the identity and an SSD random function ρ b := f b -S b where all the S b and ρ b are

|| 2 by the weight matrix in the initialized state ||i ln || 2 instead of ||θ (t-1) ln

s i . We use ||J l || qm to denote the quadratic mean of the singular values excluding the zero singular value, i.e. ||J l || qm = As f l is surjective, for fixed θ l , we have by integration by substitution S 1 ≤S | det(J l (θ l , F l+1 ))|dF l+1 .But we also haveS | det(J l (θ l ,F l+1 ))|dF l+1 S 1 F l+1 | det(J l (θ l , F l+1 ))| and so E F l+1 | det(J l (θ l , F l+1 ))| ≥ 1and soE F l+1 ,θ l | det(J l (θ l , F l+1 ))| ≥ 1 and so E F l+1 ,θ l | d-1 i=1 s i | = E F l+1 ,θ l d-1 i=1 |s i | ≥ 1.But the nonzero singular values are assumed to be independent by condition (2).SoE F l+1 ,θ l d-1 i=1 |s i | = (E F l+1 ,θ l |s i |) d-1 for 1 ≤ i ≤ d -1. So (E F l+1 ,θ l |s i |) d-1 ≥ 1 and so E F l+1 ,θ l |s i | ≥ 1 for 1 ≤ i ≤ d -1.

THEOREM 3 -SKIP CONNECTIONS REDUCE THE GRADIENT Theorem 3. Let g and u be random vectors. Consider a function f that is k-diluted with respect to u, a matrix S and a function ρ. Let R(v) be the Jacobian of ρ at input v. Let r := Q||gR(u)||2Q||u||2Q||ρ(u)||2Q||g||2 .u represents the incoming activation vector of some residual block and g the incoming gradient. r represents a type of expectation over the ratio GSC(b+1||g b+1 ||2||f b+1 ||2 ||g b ||2||f b ||2 = ||g b R(f b+1 )||2||f b+1 ||2 ||g b ||2||ρ(f b+1 )||2

Effective depth throughout training: see section D.2 for details. λ-contributions are accumulated from batch to batch. • Training classification error at the end of each epoch. • Training classification error when compositional depth is reduced via Taylor expansion after training: see section G for details. • GSC, pre-activation standard deviation and pre-activation sign diversity: for details, see the end of section I.2. Note that the expectations over the dataset were computed by maintaining exponential running averages across batches. • Operator norms of residual weight matrices after training.

Keep in mind that skip connections help in general, but other techniques do not Diluting a nonlinear function with an uncorrelated linear function can greatly help with the pathologies described above. Techniques such as normalization layers, careful initialization of weights or SeLU nonlinearities can prevent the explosion or vanishing of forward activations. Adam, RMSprop or vSGD can improve performance even if forward activations explode or vanish. While those are important functionalities, these techniques in general neither help address gradient explosion relative to forward activations as indicated by the GSC nor collapsing domains.• As the GSC grows, adjust the step size. If it turns out that some amount of growth of the GSC is unavoidable or desirable, weights in lower layers could benefit from experiencing a lower relative change during each update. Optimization algorithms such as RMSprop or Adam may partially address this. • Control dilution level to control network properties. Skip connections, normalization layers and scaling constants can be placed in a network to trade off gradient growth and representational capacity. Theorem 3 can be used for a static estimate of the amount of gradient reduction achieved. Similarly, proposition 7 can be used for a static estimate of the overall dilution of the network. • Great compositional depth may not be optimal. Networks with more than 1000 layers have recently been trained(He et al., 2016b).Haber & Ruthotto (2017)  gave a formalism for training arbitrarily deep networks. However, ever larger amounts of dilution are required to prevent gradient explosion

Table content: <table/>

Step size matters when studying the behavior of networks. We found that using different step sizes for different layers had a profound impact on the training success of various architectures. Many studies that investigate fundamental properties of deep networks either do not consider layerwise step sizes (e.g. Schoenholz et al. (2017)) or do not even consider different global step sizes (e.g.Keskar et al. (2017)). This can lead to inaccurate conclusions.

Table content: <table><tr><td colspan="4">Nonlinearity Normalization Matrix type Skip type</td><td>Width</td><td colspan="3">GSC(L, 0) St. Dev. Sign Div.</td></tr><tr><td>ReLU</td><td>none</td><td>Gaussian</td><td>none</td><td>100</td><td>1.52</td><td>0.22</td><td>0.030</td></tr><tr><td>ReLU</td><td>layer</td><td>Gaussian</td><td>none</td><td>100</td><td>1.16</td><td>0.096</td><td>0.029</td></tr><tr><td>ReLU</td><td>LOlayer</td><td>Gaussian</td><td>none</td><td>100</td><td>1.30</td><td>0.10</td><td>0.030</td></tr><tr><td>ReLU</td><td>batch</td><td>Gaussian</td><td>none</td><td>100</td><td>5728</td><td>1.00</td><td>0.41</td></tr><tr><td>tanh</td><td>none</td><td>Gaussian</td><td>none</td><td>100</td><td>1.26</td><td>0.096</td><td>0.50</td></tr><tr><td>tanh</td><td>layer</td><td>Gaussian</td><td>none</td><td>100</td><td>72.2</td><td>1.00</td><td>0.50</td></tr><tr><td>tanh</td><td>LOlayer</td><td>Gaussian</td><td>none</td><td>100</td><td>71.9</td><td>1.00</td><td>0.50</td></tr><tr><td>tanh</td><td>batch</td><td>Gaussian</td><td>none</td><td>100</td><td>93.6</td><td>1.00</td><td>0.50</td></tr><tr><td>SeLU</td><td>none</td><td>Gaussian</td><td>none</td><td>100</td><td>6.36</td><td>0.97</td><td>0.42</td></tr><tr><td>SeLU</td><td>LOlayer</td><td>Gaussian</td><td>none</td><td>100</td><td>7.00</td><td>0.98</td><td>0.42</td></tr><tr><td>ReLU</td><td>batch</td><td>Gaussian</td><td>none</td><td>200</td><td>5556</td><td>1.00</td><td>0.42</td></tr><tr><td>ReLU</td><td>batch</td><td>Gaussian</td><td>none</td><td>100/200</td><td>5527</td><td>1.00</td><td>0.41</td></tr><tr><td>SeLU</td><td>none</td><td>Gaussian</td><td>none</td><td>200</td><td>5.86</td><td>0.99</td><td>0.45</td></tr><tr><td>SeLU</td><td>none</td><td>Gaussian</td><td>none</td><td>100/200</td><td>6.09</td><td>0.98</td><td>0.43</td></tr><tr><td>ReLU</td><td>none</td><td>orthogonal</td><td>none</td><td>100</td><td>1.29</td><td>0.20</td><td>0.03</td></tr><tr><td>ReLU</td><td>layer</td><td>orthogonal</td><td>none</td><td>100</td><td>1.00</td><td>0.10</td><td>0.03</td></tr><tr><td>ReLU</td><td>batch</td><td>orthogonal</td><td>none</td><td>100</td><td>5014</td><td>1.00</td><td>0.42</td></tr><tr><td>tanh</td><td>none</td><td>orthogonal</td><td>none</td><td>100</td><td>1.18</td><td>0.10</td><td>0.50</td></tr><tr><td>tanh</td><td>layer</td><td>orthogonal</td><td>none</td><td>100</td><td>56.3</td><td>1.00</td><td>0.50</td></tr><tr><td>tanh</td><td>batch</td><td>orthogonal</td><td>none</td><td>100</td><td>54.6</td><td>1.00</td><td>0.50</td></tr><tr><td>SeLU</td><td>none</td><td>orthogonal</td><td>none</td><td>100</td><td>5.47</td><td>1.00</td><td>0.49</td></tr><tr><td>ReLU</td><td>none</td><td>looks-linear</td><td>none</td><td>100</td><td>1.00</td><td>1.00</td><td>0.50</td></tr><tr><td>ReLU</td><td>layer</td><td>looks-linear</td><td>none</td><td>100</td><td>1.00</td><td>1.00</td><td>0.50</td></tr><tr><td>ReLU</td><td>batch</td><td>looks-linear</td><td>none</td><td>100</td><td>1.00</td><td>1.00</td><td>0.50</td></tr><tr><td>ReLU</td><td>layer</td><td>Gaussian</td><td>identity</td><td>100</td><td>1.08</td><td>0.56</td><td>0.19</td></tr><tr><td>ReLU</td><td>batch</td><td>Gaussian</td><td>identity</td><td>100</td><td>4.00</td><td>1.00</td><td>0.48</td></tr><tr><td>tanh</td><td>layer</td><td>Gaussian</td><td>identity</td><td>100</td><td>1.63</td><td>1.00</td><td>0.50</td></tr><tr><td>tanh</td><td>batch</td><td>Gaussian</td><td>identity</td><td>100</td><td>1.57</td><td>1.00</td><td>0.50</td></tr><tr><td>SeLU</td><td>layer</td><td>Gaussian</td><td>identity</td><td>100</td><td>1.31</td><td>0.99</td><td>0.48</td></tr><tr><td>ReLU</td><td>layer</td><td>Gaussian</td><td>Gaussian</td><td>100</td><td>1.17</td><td>0.56</td><td>0.18</td></tr><tr><td>ReLU</td><td>batch</td><td>Gaussian</td><td>Gaussian</td><td>100</td><td>4.50</td><td>1.00</td><td>0.48</td></tr><tr><td>tanh</td><td>layer</td><td>Gaussian</td><td>Gaussian</td><td>100</td><td>1.97</td><td>1.00</td><td>0.50</td></tr><tr><td>tanh</td><td>batch</td><td>Gaussian</td><td>Gaussian</td><td>100</td><td>1.71</td><td>1.00</td><td>0.50</td></tr><tr><td>SeLU</td><td>layer</td><td>Gaussian</td><td>Gaussian</td><td>100</td><td>1.53</td><td>9.97</td><td>0.48</td></tr><tr><td>Table</td><td/><td/><td/><td/><td/><td/><td/></tr><tr><td colspan="4">We provide continued discussion in section B.</td><td/><td/><td/><td/></tr></table>

Training classificaion error for architectures trained on CIFAR10.

Table content: <table/>

Balduzzi et al. (2017); Schoenholz et al. (2017); Yang & Schoenholz (2017); Saxe et al. (

Table content: <table/>

Peer review (iclr2018):
 Paper Summary: This is a very long paper (55 pages), and I did not read it in its entirety. The first part (up to page 11), focuses on better understanding the exploding gradients problem, and challenges the fact that current techniques to address gradient explosion work as claimed. To do so, they first motivate a new measure of gradient size, the Gradient Scale Coefficient which averages the singular values of the Jacobian and takes a ratio of different layers. The motivation for this measure is that it is invariant to simple rescaling of layers that preserves the function. (I would have liked to have seen what was meant by preserved the function here -- did you mean preserve the same class outputs e.g.?) They focus on linear MLPs in the paper for computational simplicity. With this setup, and assuming the Jacobian decomposes, they prove that the GSC increases exponentially (Proposition 5). They empirically test this out for networks 50 layers deep and 100 layers wide, where they find that some architectures have exploding gradients after random initialization, and others do not, but those that do not have other drawbacks. They then overview the notion of effective depth for a residual network: a linear residual network can be written as a product of terms of the form (I + r_i). Expanding out, each term is a product of some of the r_i and some of the identities I. If all r_i have a norm < 1, then the terms that dominate will be those that consist of fewer r_i, resulting in a lower effective depth. This is described in Veit et al, 2016. While this analysis was originally used for residual networks, they relate this to any network by letting I turn into an arbitrary initial function. Their main theoretical result from this is that deeper networks take exponentially longer to train (under certain conditions), which they test out with (linear?) networks of depth 50 and width 100. They also propose that the reason gradients explode is because networks try to preserve their domain going forward, which requires Jacobians to have determinant 1 and leads to a higher Q-norm. Main Comments: This could potentially be a very nice paper, but I feel the current presentation is not ready for acceptance. In particular, the paper would benefit greatly from being made much shorter, and having more of the important details or proof outlines for the various propositions in the main text. Right now, it is quite confusing to follow, and I fail to see the motivation for some of the analysis. For example, the Gradient Scale Coefficient appears to be motivated because (bottom page 3), with other norm measurements, we could take any architecture and rescale the parameters, and inversely scale the gradients to make it "easy to train". But typically easy to train does not involve a specific preprocessing of gradients. Other propositions e.g. Theorem 1, proposition 6, could do with clearer intuition leading to them. I think the assumptions made in the results should also be clearer. (It*s fine to have results, but currently I can*t tell under what conditions the results apply and under what conditions they don*t. E.g. are there any extensions of this that apply to non-linear networks?) I also have issues with their experimental setup: why choose to experiment on networks of depth 50 and width 100? This doesn*t really look anything like networks that are trained in practice. Calling these "popular architectures" is misleading. In summary, I think this paper needs more work on the presentation to make clear what they are proving and under what conditions, and with experiments that are closer to those used in practice to support their claims.