In MT, methods have been proposed to attack word-based (Zhao et al., 2018;Cheng et al., 2018) and character-based (Belinkov and Bisk, 2018;Ebrahimi et al., 2018a) models.
these works side-step the question of meaning preservation in the source: they mostly focus on target side evaluation.