Each policy faced each instruction twenty times. Human reviewers classified behavior from videos and transcripts, distinguishing refusal, failure and completion. These are different outcomes: an unsuccessful movement is not necessarily a safety decision.

One tested policy, MolmoAct2, lacked a refusal mechanism. Pooling it with conversational agents does not produce a like-for-like safety ranking.