A model can surpass human-level ImageNet scores yet fail on inputs that humans recognize immediately. Robustness asks whether reliable behavior survives perturbations, distribution shifts, and atypical examples. section 3.6
CNNs exposed this gap through adversarial examples: imperceptible changes could trigger confident misclassifications. Similar failures appeared in deployment, where underrepresented cases and subtle real-world shifts defeated systems that performed well on benchmarks. section 3.6 section 3.6
Robustness failures include:
- Treating benchmark accuracy as evidence of general visual understanding. section 3.6
- Misclassifying imperceptibly perturbed inputs with high confidence. section 3.6
- Producing harmful errors on underrepresented examples, such as Google Photos labeling Black individuals as “gorillas.” section 3.6






