TL;DR of the paper, generated automatically.

Image tweaks can change a driving model's actions while its written rationale stays identical.

• Result: new collision in 52.6% of 154 driving scenes, vs 4.55% unguided.
• Patch: a localized forward-camera patch still reaches 35.1%.
• Takeaway: an unchanged rationale doesn't prove safety; check the action directly.