Can Go AIs be adversarially robust?
arxiv.org