ACL Findings2026
Beyond Static Synthetic Noise: Assessing the Robustness of Large Language Models to Natural Context Variation in the Real World
Yulong Wu, Viktor Schlegel, Riza Batista-Navarro
Abstract
Robustness evaluation in Question Answering (QA) has predominantly relied on synthetic perturbations that poorly capture natural text evolution in real-world settings, a limitation that becomes more pronounced with the widespread deployment of Large Language Models (LLMs) in dynamic, user-facing environments. In this work, we address this gap by proposing a framework for automatically evaluating QA models under naturally occurring textual perturbations, replacing context passages with revised counterparts from Wikipedia edit histories. Through extensive evaluation on SQUAD across diverse encoder architectures, we construct two challenging sets where human performance remains stable, yet state-of-the-art LLMs exhibit significant degradation, with performance drops of up to 28.28%. These robustness gaps further generalise to more complex QA scenarios, such as DROP and HOTPOTQA. To mitigate these errors, we show that robustness to natural perturbations can be improved via adversarial training for encoder-only models and incontext demonstrations of perturbed instances for LLMs, though a more generalisable and effective defense strategy remains an open challenge 1 . Model SQUAD 1.1 SQUAD 2.0 Overall (Ans./Unans.) distilbert-base -0.6 -0.71 (-2.76/1.71) bert-base-cased -0.21 -0.63 (-1.84/0.6) bert-base-uncased -0.87 -0.49 (-1.88/0.94) bert-large-cased -0.63 -0.53 (-1.61/0.55) bert-large-uncased -0.35 -1.38 (-2.51/-0.24) spanbert-base-cased -0.26 -1.24 (-2.66/0.15) spanbert-large-cased -0.51 -1.20 (-1.9/-0.56) roberta-base -0.61 -0.60 (-2.09/0.81) roberta-large -0.29 -1.52 (-2.6/-0.54) albert-base-v1 -1.0 -1.07 (-2.02/-0.22) albert-base-v2 -0.34 -1.08 (-2.03/-0.22) albert-large-v1 -0.42 -0.41 (-1.42/0.52) albert-large-v2 -0.8 -0.69 (-1.66/0.22) albert-xxlarge-v1 -0.75 -1.23 (-3.06/0.49) albert-xxlarge-v2 -0.46 -1.28 (-3.02/0.36)
deberta-large -0.52 -1.05
Ask Lune
Ask anything. The answer quotes the paper.
Lune reads all of it and the papers around it, then shows you the passages behind every answer.
Builds on12
- Retrieval-Augmented Generation for Knowledge-Intensive NLP TasksPatrick Lewis, Ethan Perez, Aleksandra Piktus, Fabio Petroni et al.NeurIPS 2020 · 19,162 citations
- ALBERT: A Lite BERT for Self-supervised Learning of Language RepresentationsZhenzhong Lan, Mingda Chen, Sebastian Goodman, Kevin Gimpel et al.ICLR 2020 · 7,418 citations
- Finetuned Language Models are Zero-Shot LearnersJason Wei, Maarten Bosma, Vincent Y. Zhao, Kelvin Guu et al.ICLR 2022 · 4,966 citations
- Deberta: decoding-Enhanced Bert with Disentangled AttentionPengcheng He, Xiaodong Liu, Jianfeng Gao, Weizhu ChenICLR 2021 · 3,729 citations
- Efficient Memory Management for Large Language Model Serving with PagedAttentionWoosuk Kwon, Zhuohan Li, Siyuan Zhuang, Ying Sheng et al.SOSP 2023 · 1,016 citations
Related papers
- From Confidence to Collapse in LLM Factual RobustnessAlina Fastowski, Bardh Prenkaj, Gjergji KasneciEMNLP Findings 2025 · 1 citation
- Natural Context Drift Undermines the Natural Language Understanding of Large Language ModelsYulong Wu, Viktor Schlegel, Riza Batista-NavarroEMNLP Findings 2025
- RobuT: A Systematic Study of Table QA Robustness Against Human-Annotated Adversarial PerturbationsYilun Zhao, Chen Zhao, Linyong Nan, Zhenting Qi et al.ACL 2023 · 7 citations
- Uni-DocRobust: Universal Plug-and-Play Robustness Enhancement for Multi-modal LLMs via Feature RestorationYuxuan Zhou, Baole Wei, Xingjian Hu, Haowei Chen et al.ICML 2026
- Evaluating the Robustness of Neural Language Models to Input PerturbationsMilad Moradi, Matthias SamwaldEMNLP 2021 · 64 citations
