safetyfactbullishInstance-level contrastive adversarial training can prevent detectors from using adversarial texture as an independent decision cueComputer Vision28 Jul 2026http://arxiv.org/abs/2607.21243v1