Experiments measure the soft F1 score and all of the adversarial evaluations are modeldependent, following the style of <cite>AddSent</cite>, where multiple adversaries are generated for each exam-ple in the evaluation set and the model's worst performance among the variants is recorded.