Actually this modification shouldn’t matter. After looking into the definition of pass-alive, the dead stones in the adversarial attacks are clearly not pass-alive.
Under both unmodified and pass-alive modified tromp-taylor rules, KataGo would lose here and its surprising that self-play left such a weakness.
The authors are definitely onto something, and my original claim that the attack only works due to kataGo being trained under a different rule-set is incorrect.
It doesn’t matter whether the dead stones are pass-alive. It matters whether the white stones surrounding the territory they’re in are pass-alive.
Having said that, in e.g. the first example position shown on the attackers’ webpage those white stones are not pass-alive, so the situation isn’t quite “this is a position in which KG would have won under its training conditions”. But it is a position that superficially looks like such a position, which I think is relevant since what’s going on with this attack is that they’ve found positions where KataGo’s “snap judgement”, when it gets little or no searching, gets it wrong.
Actually this modification shouldn’t matter. After looking into the definition of pass-alive, the dead stones in the adversarial attacks are clearly not pass-alive.
Under both unmodified and pass-alive modified tromp-taylor rules, KataGo would lose here and its surprising that self-play left such a weakness.
The authors are definitely onto something, and my original claim that the attack only works due to kataGo being trained under a different rule-set is incorrect.
It doesn’t matter whether the dead stones are pass-alive. It matters whether the white stones surrounding the territory they’re in are pass-alive.
Having said that, in e.g. the first example position shown on the attackers’ webpage those white stones are not pass-alive, so the situation isn’t quite “this is a position in which KG would have won under its training conditions”. But it is a position that superficially looks like such a position, which I think is relevant since what’s going on with this attack is that they’ve found positions where KataGo’s “snap judgement”, when it gets little or no searching, gets it wrong.