SAFE-GIL: SAFEty Guided Imitation Learning for Robotic Systems
On the map: Offline RL and imitation learning from data → Safe offline RL
Abstract (arXiv)
Behavior cloning (BC) is a widely-used approach in imitation learning, where a robot learns a control policy by observing an expert supervisor. However, the learned policy can make errors and might lead to safety violations, which limits their utility in safety-critical robotics applications. While prior works have tried improving a BC policy via additional real or synthetic action labels, adversarial training, or runtime filtering, none of them explicitly focus on reducing the BC policy's safety violations during training time. We propose SAFE-GIL, a design-time method to learn safety-aware behavior cloning policies. SAFE-GIL deliberately injects adversarial disturbance in the system during data collection to guide the expert towards safety-critical states. This disturbance injection simulates potential policy errors that the system might encounter during the test time. By ensuring that training more closely replicates expert behavior in safety-critical states, our approach results in safer policies despite policy errors during the test time. We further develop a reachability-based method to compute this adversarial disturbance. We compare SAFE-GIL with various behavior cloning techniques and online safety-filtering methods in three domains: autonomous ground navigation, aircraft taxiing, and aerial navigation on a quadrotor testbed. Our method demonstrates a significant reduction in safety failures, particularly in low data regimes where the likelihood of learning errors, and therefore safety violations, is higher. See our website here: https://y-u-c.github.io/safegil/
Key facts. Cited by 13 papers in the map (data through 7 Oct 2026). Placed in Safe offline RL, one of 13 directions in Offline RL and imitation learning from data. Builds on 35 of its 46 references that are in the map. First posted on arXiv 8 Apr 2024.
Builds on
35 of 46 references.
Closest ancestors · 1
Same direction, newest first
Other references · 34
- 2016Generative Adversarial Imitation Learningcited by 1,576
- 2017Learning Robust Rewards with Adversarial Inverse Reinforcement Learningcited by 485
- 2017End-to-end Driving via Conditional Imitation Learningcited by 479
- 2018ChauffeurNet: Learning to Drive by Imitating the Best and Synthesizing the Worstcited by 391
- 2016Control Barrier Function Based Quadratic Programs for Safety Critical Systemscited by 261
- 2018HG-DAgger: Interactive Imitation Learning with Human Expertscited by 245
- 2017One-Shot Visual Imitation Learning via Meta-Learningcited by 225
- 2017DART: Noise Injection for Robust Imitation Learningcited by 187
- 2017Hamilton-Jacobi Reachability: A Brief Overview and Recent Advancescited by 186
- 2023A Survey of Imitation Learning: Algorithms, Recent Developments, and Challengescited by 145
- 2019A Review of Robot Learning for Manipulation: Challenges, Representations, and Algorithmscited by 136
- 2021ThriftyDAgger: Budget-Aware Novelty and Risk Gating for Interactive Imitation Learningcited by 98
22 more
- 2018EnsembleDAgger: A Bayesian Approach to Safe Imitation Learningcited by 96
- 2016Query-Efficient Imitation Learning for End-to-End Autonomous Drivingcited by 83
- 2020DeepReach: A Deep Learning Approach to High-Dimensional Reachabilitycited by 81
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 77
- 2023NeRF in the Palm of Your Hand: Corrective Augmentation for Robotics via Novel-View Synthesiscited by 56
- 2019Combining Optimal Control and Learning for Visual Navigation in Novel Environmentscited by 50
- 2020Grasping with Chopsticks: Combating Covariate Shift in Model-free Imitation Learning for Fine Manipulationcited by 37
- 2022Lyapunov Density Models: Constraining Distribution Shift in Learning-Based Controlcited by 28
- 2021Mitigating Covariate Shift in Imitation Learning via Offline Data Without Great Coveragecited by 26
- 2023CCIL: Continuity-based Data Augmentation for Corrective Imitation Learningcited by 26
- 2022ISAACS: Iterative Soft Adversarial Actor-Critic for Safetycited by 24
- 2022TaSIL: Taylor Series Imitation Learningcited by 21
- 2020Validation of Image-Based Neural Network Controllers through Adaptive Stress Testingcited by 19
- 2022Back to the Manifold: Recovering from Out-of-Distribution Statescited by 19
- 2019An Efficient Reachability-Based Framework for Provably Safe Autonomous Navigation in Unknown Environmentscited by 18
- 2022Unified Learning from Demonstrations, Corrections, and Preferences during Physical Human-Robot Interactioncited by 18
- 2023Learning Shared Safety Constraints from Multi-task Demonstrationscited by 15
- 2022Parameter-Conditioned Reachable Sets for Updating Safety Assurances Onlinecited by 11
- 2023On Safety and Liveness Filtering Using Hamilton-Jacobi Reachability Analysiscited by 11
- 2020Manifold for Machine Learning Assurancecited by 5
- 2023StROL: Stabilized and Robust Online Learning from Humanscited by 3
- 2023End-to-End Stable Imitation Learning via Autonomous Neural Dynamic Policiescited by 2
Built on by
Citing papers per year: 2024: 1; 2025: 8; 2026: 4.
13 papers.
Sort:
By area:
- 2025Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failurescited by 30
- 2024RAIL: Reachability-Aided Imitation Learning for Safe Policy Executioncited by 5
- 2025SafeMimic: Towards Safe and Autonomous Human-to-Robot Imitation for Mobile Manipulationcited by 5
- 2025V-OCBF: Learning Safety Filters from Offline Data via Value-Guided Offline Control Barrier Functionscited by 5
- 2026Safe Flow Q-Learning: Offline Safe Reinforcement Learning with Reachability-Based Flow Policiescited by 3
- 2025A Simple Approach to Constraint-Aware Imitation Learning with Application to Autonomous Racingcited by 2
- 2025Distributionally Robust Imitation Learning: Layered Control Architecture for Certifiable Autonomycited by 1
- 2025RISE: Robust Imitation through Stochastic Encodingcited by 0
- 2025Safety-Aware Imitation Learning via MPC-Guided Disturbance Injectioncited by 0
- 2025Towards Safe Imitation Learning via Potential Field-Guided Flow Matchingcited by 0
- 2026Mechanisms of Misgeneralization in Physical Sequence Modelingcited by 0
- 2026How to Mitigate the Distribution Shift Problem in Robotics Control: A Robust and Adaptive Approach Based on Offline to Online Imitation Learningcited by 0
- 2026PACT: Self-Evolving Physical Safety Alignment for Diffusion Policies in Embodied Manipulation7 Jun 2026
- 2026How to Mitigate the Distribution Shift Problem in Robotics Control: A Robust and Adaptive Approach Based on Offline to Online Imitation Learning25 May 2026
- 2026Mechanisms of Misgeneralization in Physical Sequence Modeling19 May 2026
- 2026Safe Flow Q-Learning: Offline Safe Reinforcement Learning with Reachability-Based Flow Policies16 Mar 2026
- 2025Distributionally Robust Imitation Learning: Layered Control Architecture for Certifiable Autonomy19 Dec 2025
- 2025V-OCBF: Learning Safety Filters from Offline Data via Value-Guided Offline Control Barrier Functions11 Dec 2025
- 2025Towards Safe Imitation Learning via Potential Field-Guided Flow Matching12 Aug 2025
- 2025Safety-Aware Imitation Learning via MPC-Guided Disturbance Injection5 Aug 2025
- 2025SafeMimic: Towards Safe and Autonomous Human-to-Robot Imitation for Mobile Manipulation18 Jun 2025
- 2025Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failures1 May 2025
- 2025RISE: Robust Imitation through Stochastic Encoding15 Mar 2025
- 2025A Simple Approach to Constraint-Aware Imitation Learning with Application to Autonomous Racing10 Mar 2025
1 more
- 2024RAIL: Reachability-Aided Imitation Learning for Safe Policy Executioncited by 5
- 2025V-OCBF: Learning Safety Filters from Offline Data via Value-Guided Offline Control Barrier Functionscited by 5
- 2026Safe Flow Q-Learning: Offline Safe Reinforcement Learning with Reachability-Based Flow Policiescited by 3
- 2025A Simple Approach to Constraint-Aware Imitation Learning with Application to Autonomous Racingcited by 2
- 2025Distributionally Robust Imitation Learning: Layered Control Architecture for Certifiable Autonomycited by 1
- 2025RISE: Robust Imitation through Stochastic Encodingcited by 0
- 2025Safety-Aware Imitation Learning via MPC-Guided Disturbance Injectioncited by 0
- 2026How to Mitigate the Distribution Shift Problem in Robotics Control: A Robust and Adaptive Approach Based on Offline to Online Imitation Learningcited by 0
- 2026How to Mitigate the Distribution Shift Problem in Robotics Control: A Robust and Adaptive Approach Based on Offline to Online Imitation Learning25 May 2026
- 2026Safe Flow Q-Learning: Offline Safe Reinforcement Learning with Reachability-Based Flow Policies16 Mar 2026
- 2025Distributionally Robust Imitation Learning: Layered Control Architecture for Certifiable Autonomy19 Dec 2025
- 2025V-OCBF: Learning Safety Filters from Offline Data via Value-Guided Offline Control Barrier Functions11 Dec 2025
- 2025Safety-Aware Imitation Learning via MPC-Guided Disturbance Injection5 Aug 2025
- 2025RISE: Robust Imitation through Stochastic Encoding15 Mar 2025
- 2025A Simple Approach to Constraint-Aware Imitation Learning with Application to Autonomous Racing10 Mar 2025
- 2024RAIL: Reachability-Aided Imitation Learning for Safe Policy Execution28 Sep 2024
Similar, not cited
Close in wording, no citation either way
- 2026To Do or Not to Do: Ensuring the Safety of Visuomotor Policies Learned from Demonstrations
- 2026TAIL-Safe: Task-Agnostic Safety Monitoring for Imitation Learning Policies
- 2024Stable-BC: Controlling Covariate Shift with Stable Behavior Cloning
- 2024Robots that Suggest Safe Alternatives
- 2025Towards Safe Robot Foundation Models Using Inductive Biases
- 2023ConBaT: Control Barrier Transformer for Safe Policy Learning
- 2026OSIL: Learning Offline Safe Imitation Policies with Safety Inferred from Non-preferred Trajectories
- 2023Asking for Help: Failure Prediction in Behavioral Cloning through Value Approximation