which you saw in the prior work on realistic evaluation of same exploiting algorithms so a lot of these baselines are from that paper where there is a virus net with 28 letters and you can see how the parameters are controlled for all the different algorithms and the numbers are reported for C flower with 4000 labels innovation with thousand labels and UDA is actually the best algorithm in this setting with an error rate as low as 5% on c4 and 2.5% on s vhn and with architectural changes like shake shake and shake drop and permanet