Dataset object with built-in data augmentation. When performing adversarial attacks, we cannot include data augmentation as part of the model. If we do the adversary will try to backprop through it.
Source from the content-addressed store, hash-verified