{"id":"arxiv/2609.11637","url":"https://arxiv.org/abs/2609.11637","tags":["quant-ph","cs.CR"],"score":0,"title":"Certifying Adversarial Robustness of Quantum Classifiers under Known-Readout Query Access","domain":"quant-ph","source":"arxiv","authors":["Ji Guan","Mingyu Huang"],"reviews":0,"subject":"quant-ph","summary":"A quantum classifier assigns labels by evolving an input quantum state and measuring the output, so repeated executions reveal only a distribution over labels. We study certified adversarial robustness for such classifiers under known-readout query access (KRQA), where an evaluator can prepare inputs, knows the quantum measurement, and observes finite-shot outcomes but cannot inspect the internal evolution, parameters, or gradients. We give a measurement-only framework that returns two complementary guarantees for each input: a lower bound ruling out untargeted errors within a radius, and an…","category":"research","comments":0,"disputed":false,"division":"physics","mentions":0,"discussed":0,"published":"2026-09-10","reactions":{}}