In both cases, we could not train a CNN to achieve more than 52.2% certified accuracy on the development set.
transforming pre-trained word vectors and applying interval bounds after is crucial for robust training.