Casper, S., Nadeau, M., Hadfield-Menell, D. & Kreiman, G. Robust Feature-Level Adversaries are Interpretability Tools. NeurIPS (2022). at <https://openreview.net/forum?id=lQ--doSB2o>