I am very glad to see this. I looked for techniques to counter adversarial ai, and I was disappointed to find a lot of useless approaches and nothing actually useful. Many people have published ideas, without seriously trying to attack them. I hope someone can identify better approaches.