| | ID | OOD |
| Perturbation | Strength | Vanilla | Gaussian | SAM | SPrPO | Vanilla | Gaussian | SAM | SPrPO |
| Clean | BF16 | 89.05±1.09 | 89.29±1.24 | 90.48±2.06 | 94.05±0.82 | 86.07±1.55 | 88.81±1.97 | 83.08±2.62 | 89.55±0.00 |
| Gaussian | σ=0.02 | 89.52±2.70 | 90.24±0.82 | 88.33±0.41 | 93.33±1.65 | 87.31±0.75 | 89.80±0.43 | 83.58±1.49 | 92.04±1.14 |
| | σ=0.05 | 86.90±1.80 | 90.48±1.49 | 89.29±1.43 | 92.14±1.43 | 87.56±1.55 | 88.56±1.14 | 84.08±2.83 | 90.05±0.43 |
| | σ=0.10 | 86.90±2.89 | 85.95±1.49 | 88.33±1.80 | 90.48±2.30 | 82.59±3.02 | 85.82±1.49 | 83.83±0.43 | 89.05±2.28 |
| | σ=0.15 | 77.62±1.65 | 82.86±2.14 | 85.71±3.11 | 85.71±2.14 | 82.09±0.75 | 80.10±1.88 | 77.36±2.28 | 86.57±4.48 |