aiqbench analysis
This research demonstrates that the text-based reasoning chains in vision-language-action policies function as a genuine control surface, where editing these chains can repair or corrupt robot behavior depending on the semantic content provided. The study quantifies this effect across multiple simulation tasks, revealing that human intervention is most effective when correcting goals determined purely by language rather than visual cues. This finding highlights both the potential for manual oversight and the inherent risks of exposing internal reasoning traces to external modification in deployed robotic systems.
Altered Thoughts, Altered Actions: Reasoning Chain as Control Surface for a Vision-Language-Action Policy
arXiv:2603.12717v2 Announce Type: replace Abstract: Vision-language-action policies map camera images and natural-language instructions to a robot's motor actions. Some of these policies are designed to reason in text before acting, generating a reasoning chain and decoding actions conditioned on that chain. The works introducing this design offer the reasoning chain as an oversight interface: text a person can read and edit to correct the policy. What an edited reasoning chain does to the policy's motor actions, whether it repairs them or corrupts them, remains an open question. We measure both directions, repair and corruption, with our deterministic entity swap applied to the instruction the policy receives and to the reasoning chain it generates. A forty-task observed backdrop across all four LIBERO simulation suites reveals that the cost of corrupting the reasoning chain concentrates where language alone determines the goal. There, on LIBERO-Goal, we run the decisive counterfactual intervention with DeepThinkVLA, chosen because its reasoning chain is exposed as plain text. The policy receives a corrupted instruction, paired with the reasoning chain it generates when that instruction is clean. This counterfactually correct reasoning chain recovers 47.8 pp of the lost success, our pre-registered confirmatory test. Had the chain merely restated what the camera image already determines, the injection could have changed nothing. Instead, all 10 tasks move in the predicted direction. The reasoning chain is therefore a working control surface: text written into it steers the robot, repairing behaviour when the text is right and corrupting it when the text is wrong. Whether to expose such a control surface is a real deployment tradeoff, and it can now be measured.
Abstract:Vision-language-action policies map camera images and natural-language instructions to a robot's motor actions. Some of these policies are designed to reason in text before acting, generating a reasoning chain and decoding actions conditioned on that chain. The works introducing this design offer the reasoning chain as an oversight interface: text a person can read and edit to correct the policy. What an edited reasoning chain does to the policy's motor actions, whether it repairs them or corrupts them, remains an open question. We measure both directions, repair and corruption, with our deterministic entity swap applied to the instruction the policy receives and to the reasoning chain it generates. A forty-task observed backdrop across all four LIBERO simulation suites reveals that the cost of corrupting the reasoning chain concentrates where language alone determines the goal. There, on LIBERO-Goal, we run the decisive counterfactual intervention with DeepThinkVLA, chosen because its reasoning chain is exposed as plain text. The policy receives a corrupted instruction, paired with the reasoning chain it generates when that instruction is clean. This counterfactually correct reasoning chain recovers 47.8 pp of the lost success, our pre-registered confirmatory test. Had the chain merely restated what the camera image already determines, the injection could have changed nothing. Instead, all 10 tasks move in the predicted direction. The reasoning chain is therefore a working control surface: text written into it steers the robot, repairing behaviour when the text is right and corrupting it when the text is wrong. Whether to expose such a control surface is a real deployment tradeoff, and it can now be measured.
v2: substantially revised; supersedes v1. 18 pages
Robotics (cs.RO); Artificial Intelligence (cs.AI); Machine Learning (cs.LG)
arXiv:2603.12717 [cs.RO]
(or arXiv:2603.12717v2 [cs.RO] for this version)
https://doi.org/10.48550/arXiv.2603.12717 Focus to learn more arXiv-issued DOI via DataCite
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Full text under the publisher's open licence · 368 words
Related coverage

Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident
METR · Aug 26, 2026

[AINews] not much happened today
Latent Space · Sep 18, 2026

An overview of frontier AI company monitoring practices in mid 2026
LessWrong · Oct 7, 2026

I Did This Without Your Knowledge
LessWrong · Oct 17, 2026