Search papers, labs, and topics across Lattice.
This study investigates the impact of reasoning mechanisms on the robustness of Vision-Language-Action (VLA) models when subjected to perturbations. By comparing models with varying reasoning capabilities鈥攏o reasoning, text chain-of-thought, and latent iterative loops鈥攖he authors reveal that the latent-iterative model exhibits significant fragility, failing under both stochastic noise and white-box perturbations, while the other models maintain robustness. The findings indicate that the structural design of reasoning impacts model resilience, and attempts to use reasoning outputs as safety signals are ineffective under rigorous testing conditions.
Latent-iterative reasoning in VLA models may actually decrease robustness, collapsing under perturbations while simpler reasoning approaches hold strong.
Does adding a reasoning step make a Vision-Language-Action (VLA) model more robust to perturbation? Intuitively, a policy that reasons before acting should absorb a perturbed input better than one that maps observations directly to actions. We test this premise head-on across three models that span the reasoning spectrum (no reasoning, a text chain-of-thought, and a latent iterative loop), perturbing each at the vision, reasoning, and action stages on LIBERO and SimplerEnv. Two questions organize the study: does the reasoning design shift robustness, and can the reasoning be read back at runtime as a safety signal? We find that the latent-iterative model is by far the least robust: under both stochastic noise and white-box perturbation its task success collapses, while the other two hold. This fragility is structural rather than cumulative: varying the reasoning depth at inference barely moves it. Reasoning outputs can in principle be monitored, but the monitors fail under fair tests. A plan--action consistency probe that looks near-perfect under naive evaluation falls to chance under adaptive attack. Under matched-FPR calibration, fusing it with an action-anomaly probe never lifts defended success above undefended. Scoped to these output-level behavioral probes under white-box vision-stage attack, this ceiling is a precondition that any viable defense must first satisfy.
