Real drawings. Real perturbations.

Pick a drawing and a protection level. Zoom in. Try to find what changed. The vision model will trip on every glyph that you can't spot.