ISAACS: Iterative Soft Adversarial Actor-Critic for Safety
Not on the map. Why?
Abstract (arXiv)
The deployment of robots in uncontrolled environments requires them to operate robustly under previously unseen scenarios, like irregular terrain and wind conditions. Unfortunately, while rigorous safety frameworks from robust optimal control theory scale poorly to high-dimensional nonlinear dynamics, control policies computed by more tractable "deep" methods lack guarantees and tend to exhibit little robustness to uncertain operating conditions. This work introduces a novel approach enabling scalable synthesis of robust safety-preserving controllers for robotic systems with general nonlinear dynamics subject to bounded modeling error by combining game-theoretic safety analysis with adversarial reinforcement learning in simulation. Following a soft actor-critic scheme, a safety-seeking fallback policy is co-trained with an adversarial "disturbance" agent that aims to invoke the worst-case realization of model error and training-to-deployment discrepancy allowed by the designer's uncertainty. While the learned control policy does not intrinsically guarantee safety, it is used to construct a real-time safety filter (or shield) with robust safety guarantees based on forward reachability rollouts. This shield can be used in conjunction with a safety-agnostic control policy, precluding any task-driven actions that could result in loss of safety. We evaluate our learning-based safety approach in a 5D race car simulator, compare the learned safety policy to the numerically obtained optimal solution, and empirically validate the robust safety guarantee of our proposed safety shield against worst-case model discrepancy.
Key facts. Cited by 24 papers in the map (data through 7 Oct 2026). Builds on 22 of its 43 references that are in the map. First posted on arXiv 6 Dec 2022.
Builds on
22 of 43 references.
References · 22
- 2018Soft Actor-Critic: Off-Policy Maximum Entropy Deep Reinforcement Learning with a Stochastic Actorcited by 4,635
- 2017Domain Randomization for Transferring Deep Neural Networks from Simulation to the Real Worldcited by 1,401
- 2017Mastering Chess and Shogi by Self-Play with a General Reinforcement Learning Algorithmcited by 723
- 2017Robust Adversarial Reinforcement Learningcited by 439
- 2017Safe Reinforcement Learning via Shieldingcited by 427
- 2019Control Barrier Functions: Theory and Applicationscited by 332
- 2017Hamilton-Jacobi Reachability: A Brief Overview and Recent Advancescited by 186
- 2019Active Domain Randomizationcited by 161
- 2020Recovery RL: Safe Reinforcement Learning with Learned Recovery Zonescited by 156
- 2017A General Safety Framework for Learning-Based Control in Uncertain Robotic Systemscited by 150
- 2020Conservative Safety Critics for Explorationcited by 107
- 2020DeepReach: A Deep Learning Approach to High-Dimensional Reachabilitycited by 81
10 more
- 2020Robust Reinforcement Learning using Adversarial Populationscited by 64
- 2021Who Leads and Who Follows in Strategic Classification?cited by 53
- 2021Robust Control Barrier-Value Functions for Safety-Critical Controlcited by 47
- 2021Safety and Liveness Guarantees through Reach-Avoid Reinforcement Learningcited by 43
- 2014Reach-Avoid Problems with Time-Varying Dynamics, Targets and Constraintscited by 41
- 2018Linear model predictive safety certification for learning-based controlcited by 34
- 2016Robustness of Control Barrier Functions for Safety Critical Controlcited by 29
- 2022Sim-to-Lab-to-Real: Safe Reinforcement Learning with Shielding and Generalization Guaranteescited by 24
- 2021Safety-Critical Control using Optimal-decay Control Barrier Function with Guaranteed Point-wise Feasibilitycited by 6
- 2015An Iterative Abstraction Algorithm for Reactive Correct-by-Construction Controller Synthesiscited by 2
Built on by
Citing papers per year: 2023: 4; 2024: 7; 2025: 8; 2026: 5.
24 papers.
Sort:
By area:
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 77
- 2025Generalizing Safety Beyond Collision-Avoidance via Latent-Space Reachability Analysiscited by 44
- 2025Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failurescited by 30
- 2024SAFE-GIL: SAFEty Guided Imitation Learning for Robotic Systemscited by 13
- 2024Gameplay Filters: Robust Zero-Shot Safety through Adversarial Imaginationcited by 12
- 2024Hamilton-Jacobi Reachability in Reinforcement Learning: A Surveycited by 11
- 2025Preemptive Detection and Steering of LLM Misalignment via Latent Reachabilitycited by 10
- 2023Learning Vision-based Pursuit-Evasion Robot Policiescited by 9
- 2023Deception Game: Closing the Safety-Learning Loop in Interactive Robot Autonomycited by 9
- 2024Safety Filters for Black-Box Dynamical Systems by Learning Discriminating Hyperplanescited by 8
- 2023Gradient Shaping for Multi-Constraint Safe Reinforcement Learningcited by 7
- 2024Human-AI Safety: A Descendant of Generative AI and Control Systems Safetycited by 7
12 more
- 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraintscited by 7
- 2024MAGICS: Adversarial RL with Minimax Actors Guided by Implicit Critic Stackelberg for Convergent Neural Synthesis of Robot Safetycited by 5
- 2025Provably-Safe Neural Network Training Using Hybrid Zonotope Reachability Analysiscited by 3
- 2025Your Learned Constraint is Secretly a Backward Reachable Tubecited by 2
- 2025Provably Optimal Reinforcement Learning under Safety Filteringcited by 2
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrailscited by 1
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Roboticscited by 1
- 2024Deep Reinforcement Learning for Reach-Avoid-Stay Problemscited by 0
- 2026Solving Parameter-Robust Avoid Problems with Unknown Feasibility using Reinforcement Learningcited by 0
- 2026TAIL-Safe: Task-Agnostic Safety Monitoring for Imitation Learning Policiescited by 0
- 2026Turning Safety into Competence: Minimally Exploitable Robot Policies via Safety-Filtered Reinforcement Learningcited by 0
- 2026LEAP-CBF: A Safety Filter for Uncertain Systems with Least-Effort Adversarial Potentialscited by 0
- 2026LEAP-CBF: A Safety Filter for Uncertain Systems with Least-Effort Adversarial Potentials23 Sep 2026
- 2026Turning Safety into Competence: Minimally Exploitable Robot Policies via Safety-Filtered Reinforcement Learning23 Sep 2026
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Robotics1 Jun 2026
- 2026TAIL-Safe: Task-Agnostic Safety Monitoring for Imitation Learning Policies2 May 2026
- 2026Solving Parameter-Robust Avoid Problems with Unknown Feasibility using Reinforcement Learning17 Feb 2026
- 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraints23 Nov 2025
- 2025Provably Optimal Reinforcement Learning under Safety Filtering20 Oct 2025
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails15 Oct 2025
- 2025Preemptive Detection and Steering of LLM Misalignment via Latent Reachability25 Sep 2025
- 2025Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failures1 May 2025
- 2025Generalizing Safety Beyond Collision-Avoidance via Latent-Space Reachability Analysis2 Feb 2025
- 2025Your Learned Constraint is Secretly a Backward Reachable Tube26 Jan 2025
12 more
- 2025Provably-Safe Neural Network Training Using Hybrid Zonotope Reachability Analysis22 Jan 2025
- 2024Deep Reinforcement Learning for Reach-Avoid-Stay Problems3 Oct 2024
- 2024MAGICS: Adversarial RL with Minimax Actors Guided by Implicit Critic Stackelberg for Convergent Neural Synthesis of Robot Safety20 Sep 2024
- 2024Hamilton-Jacobi Reachability in Reinforcement Learning: A Survey12 Jul 2024
- 2024Human-AI Safety: A Descendant of Generative AI and Control Systems Safety16 May 2024
- 2024Gameplay Filters: Robust Zero-Shot Safety through Adversarial Imagination1 May 2024
- 2024SAFE-GIL: SAFEty Guided Imitation Learning for Robotic Systems8 Apr 2024
- 2024Safety Filters for Black-Box Dynamical Systems by Learning Discriminating Hyperplanes7 Feb 2024
- 2023Gradient Shaping for Multi-Constraint Safe Reinforcement Learning23 Dec 2023
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systems11 Sep 2023
- 2023Deception Game: Closing the Safety-Learning Loop in Interactive Robot Autonomy3 Sep 2023
- 2023Learning Vision-based Pursuit-Evasion Robot Policies30 Aug 2023
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 77
- 2024Gameplay Filters: Robust Zero-Shot Safety through Adversarial Imaginationcited by 12
- 2024Hamilton-Jacobi Reachability in Reinforcement Learning: A Surveycited by 11
- 2023Learning Vision-based Pursuit-Evasion Robot Policiescited by 9
- 2023Deception Game: Closing the Safety-Learning Loop in Interactive Robot Autonomycited by 9
- 2024Safety Filters for Black-Box Dynamical Systems by Learning Discriminating Hyperplanescited by 8
- 2023Gradient Shaping for Multi-Constraint Safe Reinforcement Learningcited by 7
- 2024Human-AI Safety: A Descendant of Generative AI and Control Systems Safetycited by 7
- 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraintscited by 7
- 2024MAGICS: Adversarial RL with Minimax Actors Guided by Implicit Critic Stackelberg for Convergent Neural Synthesis of Robot Safetycited by 5
- 2025Provably-Safe Neural Network Training Using Hybrid Zonotope Reachability Analysiscited by 3
- 2025Your Learned Constraint is Secretly a Backward Reachable Tubecited by 2
12 most cited of 18 All 18 (JSON)
- 2026LEAP-CBF: A Safety Filter for Uncertain Systems with Least-Effort Adversarial Potentials23 Sep 2026
- 2026Turning Safety into Competence: Minimally Exploitable Robot Policies via Safety-Filtered Reinforcement Learning23 Sep 2026
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Robotics1 Jun 2026
- 2026Solving Parameter-Robust Avoid Problems with Unknown Feasibility using Reinforcement Learning17 Feb 2026
- 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraints23 Nov 2025
- 2025Provably Optimal Reinforcement Learning under Safety Filtering20 Oct 2025
- 2025Your Learned Constraint is Secretly a Backward Reachable Tube26 Jan 2025
- 2025Provably-Safe Neural Network Training Using Hybrid Zonotope Reachability Analysis22 Jan 2025
- 2024Deep Reinforcement Learning for Reach-Avoid-Stay Problems3 Oct 2024
- 2024MAGICS: Adversarial RL with Minimax Actors Guided by Implicit Critic Stackelberg for Convergent Neural Synthesis of Robot Safety20 Sep 2024
- 2024Hamilton-Jacobi Reachability in Reinforcement Learning: A Survey12 Jul 2024
- 2024Human-AI Safety: A Descendant of Generative AI and Control Systems Safety16 May 2024
12 newest of 18 All 18 (JSON)