Provably Safe Reinforcement Learning: Conceptual Analysis, Survey, and Benchmarking
Not on the map. Why?
Abstract (arXiv)
Ensuring the safety of reinforcement learning (RL) algorithms is crucial to unlock their potential for many real-world tasks. However, vanilla RL and most safe RL approaches do not guarantee safety. In recent years, several methods have been proposed to provide hard safety guarantees for RL, which is essential for applications where unsafe actions could have disastrous consequences. Nevertheless, there is no comprehensive comparison of these provably safe RL methods. Therefore, we introduce a categorization of existing provably safe RL methods, present the conceptual foundations for both continuous and discrete action spaces, and empirically benchmark existing methods. We categorize the methods based on how they adapt the action: action replacement, action projection, and action masking. Our experiments on an inverted pendulum and a quadrotor stabilization task indicate that action replacement is the best-performing approach for these applications despite its comparatively simple realization. Furthermore, adding a reward penalty, every time the safety verification is engaged, improved training performance in our experiments. Finally, we provide practical guidance on selecting provably safe RL approaches depending on the safety specification, RL algorithm, and type of action space.
Key facts. Cited by 31 papers in the map (data through 7 Oct 2026). Builds on 56 of its 119 references that are in the map. First posted on arXiv 13 May 2022.
Builds on
56 of 119 references.
References · 56
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2018Soft Actor-Critic: Off-Policy Maximum Entropy Deep Reinforcement Learning with a Stochastic Actorcited by 4,635
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2013Playing Atari with Deep Reinforcement Learningcited by 3,211
- 2018Addressing Function Approximation Error in Actor-Critic Methodscited by 2,302
- 2020Offline Reinforcement Learning: Tutorial, Review, and Perspectives on Open Problemscited by 1,873
- 2017Constrained Policy Optimizationcited by 928
- 2020Deep Reinforcement Learning for Autonomous Driving: A Surveycited by 698
- 2017Safe Reinforcement Learning via Shieldingcited by 427
- 2020Sim-to-Real Transfer in Deep Reinforcement Learning for Robotics: a Surveycited by 388
- 2017Safe Model-based Reinforcement Learning with Stability Guaranteescited by 347
- 2021Safe Learning in Robotics: From Learning-Based Control to Safe Reinforcement Learningcited by 337
38 more
- 2019Control Barrier Functions: Theory and Applicationscited by 332
- 2020Responsive Safety in Reinforcement Learning by PID Lagrangian Methodscited by 302
- 2018A Lyapunov-based Approach to Safe Reinforcement Learningcited by 278
- 2019End-to-End Safe Reinforcement Learning through Barrier Functions for Safety-Critical Continuous Control Taskscited by 256
- 2018Safe Exploration in Continuous Action Spacescited by 237
- 2020Projection-Based Constrained Policy Optimizationcited by 195
- 2018Verifiable Reinforcement Learning via Policy Extractioncited by 176
- 2020A Closer Look at Invalid Action Masking in Policy Gradient Algorithmscited by 160
- 2020Recovery RL: Safe Reinforcement Learning with Learned Recovery Zonescited by 156
- 2017A General Safety Framework for Learning-Based Control in Uncertain Robotic Systemscited by 150
- 2018Assessing Generalization in Deep Reinforcement Learningcited by 132
- 2016Reinforcement Learning With Temporal Logic Rewardscited by 114
- 2018A predictive safety filter for learning-based control of constrained nonlinear dynamical systemscited by 91
- 2017Online algorithms for POMDPs with continuous state, action, and observation spacescited by 82
- 2019Reinforcement Learning for Temporal Logic Control Synthesis with Probabilistic Satisfaction Guaranteescited by 77
- 2018Omega-Regular Objectives in Model-Free Reinforcement Learningcited by 74
- 2016Safe Exploration in Finite Markov Decision Processes with Gaussian Processescited by 72
- 2019Safe Reinforcement Learning Using Robust MPCcited by 72
- 2018Foundations for Restraining Bolts: Reinforcement Learning with LTLf/LDLf restraining specificationscited by 69
- 2019Learning for Safety-Critical Control with Control Barrier Functionscited by 66
- 2016Q-Learning for Robust Satisfaction of Signal Temporal Logic Specificationscited by 65
- 2017OptLayer - Practical Constrained Optimization for Deep Reinforcement Learning in the Real Worldcited by 64
- 2020Neurosymbolic Reinforcement Learning with Formally Verified Explorationcited by 49
- 2020Cautious Reinforcement Learning with Logical Constraintscited by 44
- 2021Modular Deep Reinforcement Learning for Continuous Motion Planning with Temporal Logiccited by 38
- 2020Verifiably Safe Exploration for End-to-End Reinforcement Learningcited by 32
- 2020Safe Reinforcement Learning via Projection on a Safe Set: How to Achieve Optimality?cited by 29
- 2020Reachability-based Trajectory Safeguard (RTS): A Safe and Fast Reinforcement Learning Safety Layer for Continuous Controlcited by 28
- 2020On Robustness Metrics for Learning STL Taskscited by 27
- 2022Safe Reinforcement Learning Using Black-Box Reachability Analysiscited by 22
- 2021On the (In)Tractability of Reinforcement Learning for LTL Objectivescited by 18
- 2021Computationally Efficient Safe Reinforcement Learning for Power Systemscited by 17
- 2019Verifiably Safe Off-Model Reinforcement Learningcited by 16
- 2022Provably Safe Deep Reinforcement Learning for Robotic Manipulation in Human Environmentscited by 16
- 2019Autonomous Driving using Safe Reinforcement Learning by Incorporating a Regret-based Human Lane-Changing Decision Modelcited by 14
- 2020Online Shielding for Stochastic Systemscited by 11
- 2021Scalable Learning of Safety Guarantees for Autonomous Systems using Hamilton-Jacobi Reachabilitycited by 10
- 2021A Survey of Deep Reinforcement Learning Algorithms for Motion Planning and Control of Autonomous Vehiclescited by 10
50 most cited of 56 All 56 (JSON)
Built on by
Citing papers per year: 2024: 11; 2025: 15; 2026: 5.
31 papers.
Sort:
By area:
- 2024Excluding the Irrelevant: Focusing Reinforcement Learning through Continuous Action Maskingcited by 17
- 2024Dynamic Model Predictive Shielding for Provably Safe Reinforcement Learningcited by 11
- 2024Safety Filtering While Training: Improving the Performance and Sample Efficiency of Reinforcement Learning Agentscited by 11
- 2025CBF-RL: Safety Filtering Reinforcement Learning in Training with Control Barrier Functionscited by 8
- 2024Compositional Shielding and Reinforcement Learning for Multi-Agent Systemscited by 7
- 2025Safe Reinforcement Learning using Action Projection: Safeguard the Policy or the Environment?cited by 5
- 2025From Demonstrations to Safe Deployment: Path-Consistent Safety Filtering for Diffusion Policiescited by 4
- 2024CommonPower: A Framework for Safe Data-Driven Smart Grid Controlcited by 3
- 2024Safety-Driven Deep Reinforcement Learning Framework for Cobots: A Sim2Real Approachcited by 3
- 2024Provable Traffic Rule Compliance in Safe Reinforcement Learning on the Open Seacited by 2
- 2025CAMEL: Continuous Action Masking Enabled by Large Language Models for Reinforcement Learningcited by 2
- 2025A Provable Approach for End-to-End Safe Reinforcement Learningcited by 2
19 more
- 2025Safe and Compliant Cross-Market Trade Execution via Constrained RL and Zero-Knowledge Auditscited by 2
- 2025Improving Stochastic Action-Constrained Reinforcement Learning via Truncated Distributionscited by 2
- 2026Shields to Guarantee Probabilistic Safety in MDPscited by 2
- 2026Any-Body Guard: Universal Safeguarding for Manipulation Policies via Action Maskingcited by 2
- 2024Numeric Reward Machinescited by 1
- 2024Can an AI Agent Safely Run a Government? Existence of Probably Approximately Aligned Policiescited by 1
- 2025Safe Learning Under Irreversible Dynamics via Asking for Helpcited by 1
- 2025Leveraging Analytic Gradients in Provably Safe Reinforcement Learningcited by 1
- 2025Predictive Safety Shield for Dyna-Q Reinforcement Learningcited by 1
- 2026Safe Reinforcement Learning via Recovery-based Shielding with Gaussian Process Dynamics Modelscited by 1
- 2024Heuristic Algorithm-based Action Masking Reinforcement Learning (HAAM-RL) with Ensemble Inference Methodcited by 0
- 2024Training Verifiably Robust Agents Using Set-Based Reinforcement Learningcited by 0
- 2025Falsification-driven reinforcement learning for maritime motion planningcited by 0
- 2025Learning When Not to Learn: Risk-Sensitive Abstention in Bandits with Unbounded Rewardscited by 0
- 2025Reinforcement Learning for Long-Horizon Unordered Tasks: From Boolean to Coupled Reward Machinescited by 0
- 2025LEARN: Learning End-to-End Aerial Resource-Constrained Multi-Robot Navigationcited by 0
- 2025Shielded Controller Units for RL with Operational Constraints Applied to Remote Microgridscited by 0
- 2026Safe Online Learning via Smooth Safety-Structured Policy Compositioncited by 0
- 2026Decentralized Safe Multi-Agent Reinforcement Learning via Predictive Shieldingcited by 0
- 2026Decentralized Safe Multi-Agent Reinforcement Learning via Predictive Shielding7 Sep 2026
- 2026Safe Online Learning via Smooth Safety-Structured Policy Composition30 Jun 2026
- 2026Any-Body Guard: Universal Safeguarding for Manipulation Policies via Action Masking21 Jun 2026
- 2026Shields to Guarantee Probabilistic Safety in MDPs11 May 2026
- 2026Safe Reinforcement Learning via Recovery-based Shielding with Gaussian Process Dynamics Models12 Feb 2026
- 2025Shielded Controller Units for RL with Operational Constraints Applied to Remote Microgrids30 Nov 2025
- 2025Improving Stochastic Action-Constrained Reinforcement Learning via Truncated Distributions27 Nov 2025
- 2025Predictive Safety Shield for Dyna-Q Reinforcement Learning26 Nov 2025
- 2025LEARN: Learning End-to-End Aerial Resource-Constrained Multi-Robot Navigation21 Nov 2025
- 2025From Demonstrations to Safe Deployment: Path-Consistent Safety Filtering for Diffusion Policies9 Nov 2025
- 2025Reinforcement Learning for Long-Horizon Unordered Tasks: From Boolean to Coupled Reward Machines31 Oct 2025
- 2025CBF-RL: Safety Filtering Reinforcement Learning in Training with Control Barrier Functions16 Oct 2025
19 more
- 2025Learning When Not to Learn: Risk-Sensitive Abstention in Bandits with Unbounded Rewards16 Oct 2025
- 2025Falsification-driven reinforcement learning for maritime motion planning8 Oct 2025
- 2025Safe and Compliant Cross-Market Trade Execution via Constrained RL and Zero-Knowledge Audits6 Oct 2025
- 2025Safe Reinforcement Learning using Action Projection: Safeguard the Policy or the Environment?16 Sep 2025
- 2025Leveraging Analytic Gradients in Provably Safe Reinforcement Learning2 Jun 2025
- 2025A Provable Approach for End-to-End Safe Reinforcement Learning28 May 2025
- 2025Safe Learning Under Irreversible Dynamics via Asking for Help19 Feb 2025
- 2025CAMEL: Continuous Action Masking Enabled by Large Language Models for Reinforcement Learning17 Feb 2025
- 2024Can an AI Agent Safely Run a Government? Existence of Probably Approximately Aligned Policies21 Nov 2024
- 2024Safety Filtering While Training: Improving the Performance and Sample Efficiency of Reinforcement Learning Agents15 Oct 2024
- 2024Compositional Shielding and Reinforcement Learning for Multi-Agent Systems14 Oct 2024
- 2024Training Verifiably Robust Agents Using Set-Based Reinforcement Learning17 Aug 2024
- 2024Safety-Driven Deep Reinforcement Learning Framework for Cobots: A Sim2Real Approach2 Jul 2024
- 2024Excluding the Irrelevant: Focusing Reinforcement Learning through Continuous Action Masking6 Jun 2024
- 2024CommonPower: A Framework for Safe Data-Driven Smart Grid Control5 Jun 2024
- 2024Dynamic Model Predictive Shielding for Provably Safe Reinforcement Learning22 May 2024
- 2024Numeric Reward Machines30 Apr 2024
- 2024Heuristic Algorithm-based Action Masking Reinforcement Learning (HAAM-RL) with Ensemble Inference Method21 Mar 2024
- 2024Provable Traffic Rule Compliance in Safe Reinforcement Learning on the Open Sea13 Feb 2024
- 2024Excluding the Irrelevant: Focusing Reinforcement Learning through Continuous Action Maskingcited by 17
- 2024Dynamic Model Predictive Shielding for Provably Safe Reinforcement Learningcited by 11
- 2024Safety Filtering While Training: Improving the Performance and Sample Efficiency of Reinforcement Learning Agentscited by 11
- 2025CBF-RL: Safety Filtering Reinforcement Learning in Training with Control Barrier Functionscited by 8
- 2024Compositional Shielding and Reinforcement Learning for Multi-Agent Systemscited by 7
- 2025Safe Reinforcement Learning using Action Projection: Safeguard the Policy or the Environment?cited by 5
- 2024CommonPower: A Framework for Safe Data-Driven Smart Grid Controlcited by 3
- 2024Safety-Driven Deep Reinforcement Learning Framework for Cobots: A Sim2Real Approachcited by 3
- 2024Provable Traffic Rule Compliance in Safe Reinforcement Learning on the Open Seacited by 2
- 2025CAMEL: Continuous Action Masking Enabled by Large Language Models for Reinforcement Learningcited by 2
- 2025A Provable Approach for End-to-End Safe Reinforcement Learningcited by 2
- 2025Safe and Compliant Cross-Market Trade Execution via Constrained RL and Zero-Knowledge Auditscited by 2
12 most cited of 30 All 30 (JSON)
- 2026Decentralized Safe Multi-Agent Reinforcement Learning via Predictive Shielding7 Sep 2026
- 2026Safe Online Learning via Smooth Safety-Structured Policy Composition30 Jun 2026
- 2026Any-Body Guard: Universal Safeguarding for Manipulation Policies via Action Masking21 Jun 2026
- 2026Shields to Guarantee Probabilistic Safety in MDPs11 May 2026
- 2026Safe Reinforcement Learning via Recovery-based Shielding with Gaussian Process Dynamics Models12 Feb 2026
- 2025Shielded Controller Units for RL with Operational Constraints Applied to Remote Microgrids30 Nov 2025
- 2025Improving Stochastic Action-Constrained Reinforcement Learning via Truncated Distributions27 Nov 2025
- 2025Predictive Safety Shield for Dyna-Q Reinforcement Learning26 Nov 2025
- 2025LEARN: Learning End-to-End Aerial Resource-Constrained Multi-Robot Navigation21 Nov 2025
- 2025Reinforcement Learning for Long-Horizon Unordered Tasks: From Boolean to Coupled Reward Machines31 Oct 2025
- 2025CBF-RL: Safety Filtering Reinforcement Learning in Training with Control Barrier Functions16 Oct 2025
- 2025Learning When Not to Learn: Risk-Sensitive Abstention in Bandits with Unbounded Rewards16 Oct 2025
12 newest of 30 All 30 (JSON)