Knowing What Not to Answer: Selective Non-Compliance in Vision-Language Models
Abstract
KoNA evaluates vision-language models on selective refusal across mixed queries and improves compliance via targeted fine-tuning.
Vision-language models (VLMs) are expected to respond helpfully to appropriate requests while withholding compliance with requests that are incorrect, unsafe, infeasible, or unanswerable. However, existing benchmarks predominantly evaluate non-compliance at the level of the query as a whole, assuming that each request either warrants compliance or requires withholding compliance. In practice, real-world queries can contain a mixture of answerable content and components for which compliance should be withheld. In this paper, we introduce KoNA, a benchmark for evaluating selective non-compliance in VLMs across five categories: False Premise, Visual Inaccessibility, Universal Unknown, Task Feasibility, and Safety. Each task evaluates two capabilities: query-level non-compliance and component-level non-compliance under paired single and compound queries. Our evaluation across diverse VLMs shows that models often fail to refuse, correct, or abstain appropriately, and these failures become more pronounced when queries require selective non-compliance. To address this challenge, we fine-tune VLMs using KoNA examples that require selective non-compliance, together with a fully answerable set that should receive direct answers. Our fine-tuned models achieve substantial improvements in non-compliance accuracy while largely maintaining performance on fully answerable tasks. These results suggest that the fine-tuned models can distinguish between answerable components and those requiring non-compliance and respond in a task-appropriate manner.
Community
KoNA is a benchmark for evaluating selective non-compliance in vision-language models: whether a model can withhold only the part of a query that contains a false premise, asks about something visually inaccessible or universally unknowable, requests an infeasible action, or is unsafe, while still answering the rest. Each of its 3,100 instances pairs a single query with a compound query that embeds the same non-compliance trigger alongside answerable content, plus a fully answerable contrast query that separates targeted non-compliance from blanket refusal. Our evaluation across open- and closed-source VLMs shows that models often fail to refuse, correct, or abstain appropriately, and these failures become more pronounced on compound queries. Fine-tuning small open models on KoNA with SFT followed by GRPO substantially improves non-compliance accuracy while largely maintaining performance on fully answerable queries and general benchmarks.
Get this paper in your agent:
hf papers read 2609.04720 Don't have the latest CLI?
curl -LsSf https://hf.co/cli/install.sh | bash Models citing this paper 0
No model linking this paper
Datasets citing this paper 1
Spaces citing this paper 0
No Space linking this paper
Collections including this paper 0
No Collection including this paper