One character changed, the decision changed: 30 text models and 17 vision models take the same attack candidates
DecisionRobust evaluates JEV-style decision models under text and image perturbations and prompt injection, and finds that 30 text models and 17 vision models take the same candidate set, with held-out models excluded from candidate selection also incurring errors while label-consistency checks sharply reduce apparent attack success.