Research questionHow can one vision model remain robust across changing and unseen adversarial perturbation budgets?Adversarially trained classifiers often specialize in a single perturbation budget. Deployments facing changing attack strengths may therefore require multiple models, making broad threat coverage costly.