Assertion: perturbation | /r/HasProperty | developed for one model
Facets:
Source sentences:
text: So we’ve seen that universal perturbations can be created for a given model, but does a perturbation developed for one model also fool different models?