Thank you for your submission to NeurIPS. After discussion, the reviewers are all in agreement that the proposed method does present an interesting and significant addition to the literature on adversarial training. The one criticism that the reviewers raised, that the method did not compare to the current state of the art in standard adversarial training, was well-addressed by the author response, and I'd strongly encourage them to include these results in the final version.