SPY-Bench - Distractors - Conflict AtA: leaderboard

SPY-Bench - Distractors - Conflict AtA: Privacy instruction score (0-100). SPY-Bench arXiv 2611.13997v1: personalized visual-privacy compliance, scores 0-100. Native distractor/scenario/conflict and ICS/RtA/AtA/HMS columns remain separate. Full official source model labels bind the evaluated checkpoints. Official repository release links bind four fine-tuned Qwen2-VL-7B-Instruct SFT/DPO/NCA/NCA-P checkpoints; they are distinct released models, not run wrappers around the original model. Self-moderation is an inference configuration of the original. Table 7 first row is an external official result and is not recounted. API effort is unreported.

Metric: Privacy instruction score (0-100). Source: arxiv.org. Saturation forecast: Estimated already saturated. 21 models tracked.

Top models

#ModelScoreOverall rank
1Qwen 2 VL 7B Instruct88.51#2569
2Phi-4 Multimodal Instruct84.81#3914
3Qwen 2.5 VL 7B Instruct82.88#1842
4Gemini 2.0 Flash82.86#702
5Llama 3.2 Vision 11B Instruct81.07#3876
6Pixtral-12B75.22#2493
7InternVL2.5-78B72.14#1018
8Qwen 2.5 VL 72B Instruct71.71#845
9Qwen 2.5 VL 32B Instruct70.92#1055
10Mistral Small 3.168.51#1699
11O4 Mini (2025-04-16)66.01#362
12GPT-4o (2024-11-20)59.24#864

No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.

Interactive version: theaggregate.ai/benchmark?slug=spy-bench-distractors-conflict-ata · How It Works · Data refreshed daily, snapshot 2026-11-12.