SPY-Bench - Distractors - Nonconflict AtA: leaderboard

SPY-Bench - Distractors - Nonconflict AtA: Privacy instruction score (0-100). SPY-Bench arXiv 2611.13997v1: personalized visual-privacy compliance, scores 0-100. Native distractor/scenario/conflict and ICS/RtA/AtA/HMS columns remain separate. Full official source model labels bind the evaluated checkpoints. Official repository release links bind four fine-tuned Qwen2-VL-7B-Instruct SFT/DPO/NCA/NCA-P checkpoints; they are distinct released models, not run wrappers around the original model. Self-moderation is an inference configuration of the original. Table 7 first row is an external official result and is not recounted. API effort is unreported.

Metric: Privacy instruction score (0-100). Source: arxiv.org. Saturation forecast: Estimated already saturated. 21 models tracked.

Top models

#ModelScoreOverall rank
1Gemini 2.0 Flash90.54#702
2Qwen 2.5 VL 32B Instruct89.4#1055
3Qwen 2 VL 7B Instruct89.31#2569
4O4 Mini (2025-04-16)89.1#362
5Qwen 2.5 VL 72B Instruct88.58#845
6Llama 3.2 Vision 11B Instruct88.22#3876
7Pixtral-12B87.34#2493
8GPT-4o (2024-11-20)86.42#864
9Mistral Small 3.185.54#1699
10Qwen 2.5 VL 7B Instruct84.55#1842
11Phi-4 Multimodal Instruct83.61#3914
12InternVL2.5-78B83.13#1018

No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.

Interactive version: theaggregate.ai/benchmark?slug=spy-bench-distractors-nonconflict-ata · How It Works · Data refreshed daily, snapshot 2026-11-12.