In computer vision, it is common to adversarially train on artificially noisy examples to create a more robust model (Goodfellow et al., 2015;Szegedy et al., 2014).
let Dom be a map on N T that assigns a set to each node, called the domain of the node.