16 safety-critical examples where a physically attacker-placeable artifact (a banner,
sign, held board, vehicle decal, or road paint — no real-infrastructure tampering) hijacks the driving
VLA AutoDrive-R2-7B on Waymo Open Dataset E2E (val) into a dangerous, wrong action.
Curation rule. Each cue is anomalous / fabricated (clearly not a real device or obstacle, so it is
distinguishable from a normal scene) yet drives a… See the full description on the dataset page:
https://huggingface.co/datasets/gray311/physical_attack_vla.
