RESEARCH DEMO — NOT A PRODUCTION KYC SYSTEM
NNirikshaID Bench
Open · Local-first · Reproducible

Inspect models.
Expose failures.

NirikshaID Bench is a controlled synthetic testbed for identity-document extraction, tamper detection, localization, and robustness under visual degradation.

One original layout. Five structured fields. Held-out digit-edit evaluation.

LOCAL EVALUATION / STRUCTURED OUTPUT
{ "identity_number": "QBO820010I", "tampered": true, "tamper_type": "font_swap", "tamper_bbox": [300, 429, 472, 461], "evaluation": "held-out aware" }
Why this benchmark

Privacy constraints should not make evaluation opaque.

Real identity documents are sensitive and difficult to release. Controlled synthetic data makes labels, perturbations, and split logic auditable—but does not erase the synthetic-to-real domain gap.

Extraction

Measures whether visible names, dates, and identifiers survive structured parsing.

Tamper detection

Separately measures whether a model identifies visual inconsistency and its type.

Generalization

Excludes digit edits from tuning splits, then reports their recall independently.

Pipeline

Every transformation is traceable.

Synthetic Generator01 / deterministic stage
Clean Card02 / deterministic stage
Tamper Injection03 / deterministic stage
Image Degradation04 / deterministic stage
Model Inference05 / deterministic stage
Structured Parsing06 / deterministic stage
Evaluation07 / deterministic stage
Failure Analysis08 / deterministic stage
Dataset + results

Numbers loaded from real local artifacts.

600generated documents
300tampered samples
digit_editheld-out tamper
Data source: versioned benchmark artifacts

Measured offline baseline

Field exact match · seen
98%
Tamper F1 · seen
0%
Held-out digit-edit recall
0%

Measured Qwen and OCR runs are loaded from the versioned result artifacts.

Methodology

Designed to make leakage difficult.

Seeded generation

Every label records the document seed and generator version for replay.

Schema enforcement

Pydantic validates tamper state, identity format, boxes, images, and split membership.

Common contract

Adapters emit the same strict JSON structure with parser and latency metadata.

NirikshaID Bench evaluates extraction and forgery classification alongside paired intervention sensitivity, hard-negative false positives, held-out tamper generalization, and uncertainty calibration.

Limitations

Useful evidence, bounded claims.

This benchmark does not establish production fraud-detection performance. It covers one synthetic layout, English fields, and a limited tamper taxonomy. VLM explanations may not be faithful.

Domain gap

Synthetic cards cannot represent the full distribution of real capture conditions.

Roadmap

Multiple layouts, multilingual text, screen recapture, subtler forgeries, and private validation.

Optional tuning

QLoRA configuration is isolated from the critical evaluation path and never sees digit edits.

Portrait of Ninad Naik
Author

Ninad Naik

CS Student | AI/ML Research and Engineering

Interested in large language models, multimodal learning, document intelligence, computer vision, and reproducible AI evaluation.