@inproceedings{incidelen-etal-2026-sorry,
title = "Sorry Robot, Happy Human: Vision-Language Models Read Only One of Two Legible Typographic Layers",
author = "{\.I}ncidelen, Mert and
Kashkash, Yamen and
Berker, Asya and
Aydogan, Murat",
editor = "T.Y.S.S., Santosh and
Agarwal, Amit and
Gupta, Vivek and
Kementchedjhieva, Yova and
Garimella, Aparna and
Hou, Yufang",
booktitle = "The Proceedings of Workshop on Document Intelligence and Understanding",
month = oct,
year = "2026",
address = "Budapest, Hungary",
publisher = "Association for Computational Linguistics",
url = "https://aclanthology.org/2026.docinsights-1.20/",
pages = "282--286",
ISBN = "979-8-89176-477-4",
abstract = "Vision-language models (VLMs), despite their success in optical character recognition (OCR) tasks, are vulnerable to typographic attacks and have a fragile structure for images with multiple text layers. In this study, the DecoyBench dataset was created using the Decoy Font method. The dataset consists of 300 images, each containing text with sharp contour lines superimposed on another text with soft shading. Six recent closed-source models from three different model families were evaluated using this dataset under two different prompting conditions (naive and guided) and at two different resolutions (512 {\texttimes} 512 and 64 {\texttimes} 64). A validation study showed that human participants could read both text layers with high accuracy. In contrast, the models, with most variants and both prompting methods, read the contour text with near-human accuracy at high resolution, but almost never fully extracted the shading text. At low resolution, the contour text could not be read by either the models or humans, while the shading text could be extracted with high accuracy. The findings indicate that the evaluated VLMs exhibit a consistent behavioral limitation when processing typographic structures containing multiple spatial frequency layers."
}<?xml version="1.0" encoding="UTF-8"?>
<modsCollection xmlns="http://www.loc.gov/mods/v3">
<mods ID="incidelen-etal-2026-sorry">
<titleInfo>
<title>Sorry Robot, Happy Human: Vision-Language Models Read Only One of Two Legible Typographic Layers</title>
</titleInfo>
<name type="personal">
<namePart type="given">Mert</namePart>
<namePart type="family">İncidelen</namePart>
<role>
<roleTerm authority="marcrelator" type="text">author</roleTerm>
</role>
</name>
<name type="personal">
<namePart type="given">Yamen</namePart>
<namePart type="family">Kashkash</namePart>
<role>
<roleTerm authority="marcrelator" type="text">author</roleTerm>
</role>
</name>
<name type="personal">
<namePart type="given">Asya</namePart>
<namePart type="family">Berker</namePart>
<role>
<roleTerm authority="marcrelator" type="text">author</roleTerm>
</role>
</name>
<name type="personal">
<namePart type="given">Murat</namePart>
<namePart type="family">Aydogan</namePart>
<role>
<roleTerm authority="marcrelator" type="text">author</roleTerm>
</role>
</name>
<originInfo>
<dateIssued>2026-10</dateIssued>
</originInfo>
<typeOfResource>text</typeOfResource>
<relatedItem type="host">
<titleInfo>
<title>The Proceedings of Workshop on Document Intelligence and Understanding</title>
</titleInfo>
<name type="personal">
<namePart type="given">Santosh</namePart>
<namePart type="family">T.Y.S.S.</namePart>
<role>
<roleTerm authority="marcrelator" type="text">editor</roleTerm>
</role>
</name>
<name type="personal">
<namePart type="given">Amit</namePart>
<namePart type="family">Agarwal</namePart>
<role>
<roleTerm authority="marcrelator" type="text">editor</roleTerm>
</role>
</name>
<name type="personal">
<namePart type="given">Vivek</namePart>
<namePart type="family">Gupta</namePart>
<role>
<roleTerm authority="marcrelator" type="text">editor</roleTerm>
</role>
</name>
<name type="personal">
<namePart type="given">Yova</namePart>
<namePart type="family">Kementchedjhieva</namePart>
<role>
<roleTerm authority="marcrelator" type="text">editor</roleTerm>
</role>
</name>
<name type="personal">
<namePart type="given">Aparna</namePart>
<namePart type="family">Garimella</namePart>
<role>
<roleTerm authority="marcrelator" type="text">editor</roleTerm>
</role>
</name>
<name type="personal">
<namePart type="given">Yufang</namePart>
<namePart type="family">Hou</namePart>
<role>
<roleTerm authority="marcrelator" type="text">editor</roleTerm>
</role>
</name>
<originInfo>
<publisher>Association for Computational Linguistics</publisher>
<place>
<placeTerm type="text">Budapest, Hungary</placeTerm>
</place>
</originInfo>
<genre authority="marcgt">conference publication</genre>
<identifier type="isbn">979-8-89176-477-4</identifier>
</relatedItem>
<abstract>Vision-language models (VLMs), despite their success in optical character recognition (OCR) tasks, are vulnerable to typographic attacks and have a fragile structure for images with multiple text layers. In this study, the DecoyBench dataset was created using the Decoy Font method. The dataset consists of 300 images, each containing text with sharp contour lines superimposed on another text with soft shading. Six recent closed-source models from three different model families were evaluated using this dataset under two different prompting conditions (naive and guided) and at two different resolutions (512 × 512 and 64 × 64). A validation study showed that human participants could read both text layers with high accuracy. In contrast, the models, with most variants and both prompting methods, read the contour text with near-human accuracy at high resolution, but almost never fully extracted the shading text. At low resolution, the contour text could not be read by either the models or humans, while the shading text could be extracted with high accuracy. The findings indicate that the evaluated VLMs exhibit a consistent behavioral limitation when processing typographic structures containing multiple spatial frequency layers.</abstract>
<identifier type="citekey">incidelen-etal-2026-sorry</identifier>
<location>
<url>https://aclanthology.org/2026.docinsights-1.20/</url>
</location>
<part>
<date>2026-10</date>
<extent unit="page">
<start>282</start>
<end>286</end>
</extent>
</part>
</mods>
</modsCollection>
%0 Conference Proceedings
%T Sorry Robot, Happy Human: Vision-Language Models Read Only One of Two Legible Typographic Layers
%A İncidelen, Mert
%A Kashkash, Yamen
%A Berker, Asya
%A Aydogan, Murat
%Y T.Y.S.S., Santosh
%Y Agarwal, Amit
%Y Gupta, Vivek
%Y Kementchedjhieva, Yova
%Y Garimella, Aparna
%Y Hou, Yufang
%S The Proceedings of Workshop on Document Intelligence and Understanding
%D 2026
%8 October
%I Association for Computational Linguistics
%C Budapest, Hungary
%@ 979-8-89176-477-4
%F incidelen-etal-2026-sorry
%X Vision-language models (VLMs), despite their success in optical character recognition (OCR) tasks, are vulnerable to typographic attacks and have a fragile structure for images with multiple text layers. In this study, the DecoyBench dataset was created using the Decoy Font method. The dataset consists of 300 images, each containing text with sharp contour lines superimposed on another text with soft shading. Six recent closed-source models from three different model families were evaluated using this dataset under two different prompting conditions (naive and guided) and at two different resolutions (512 × 512 and 64 × 64). A validation study showed that human participants could read both text layers with high accuracy. In contrast, the models, with most variants and both prompting methods, read the contour text with near-human accuracy at high resolution, but almost never fully extracted the shading text. At low resolution, the contour text could not be read by either the models or humans, while the shading text could be extracted with high accuracy. The findings indicate that the evaluated VLMs exhibit a consistent behavioral limitation when processing typographic structures containing multiple spatial frequency layers.
%U https://aclanthology.org/2026.docinsights-1.20/
%P 282-286
Markdown (Informal)
[Sorry Robot, Happy Human: Vision-Language Models Read Only One of Two Legible Typographic Layers](https://aclanthology.org/2026.docinsights-1.20/) (İncidelen et al., DocInsights 2026)
ACL