Verification-Guided Shielding for Deep Reinforcement Learning
On the map: Deep reinforcement learning methods → Safe and constrained RL
Abstract (arXiv)
In recent years, Deep Reinforcement Learning (DRL) has emerged as an effective approach to solving real-world tasks. However, despite their successes, DRL-based policies suffer from poor reliability, which limits their deployment in safety-critical domains. Various methods have been put forth to address this issue by providing formal safety guarantees. Two main approaches include shielding and verification. While shielding ensures the safe behavior of the policy by employing an external online component (i.e., a ``shield'') that overrides potentially dangerous actions, this approach has a significant computational cost as the shield must be invoked at runtime to validate every decision. On the other hand, verification is an offline process that can identify policies that are unsafe, prior to their deployment, yet, without providing alternative actions when such a policy is deemed unsafe. In this work, we present verification-guided shielding -- a novel approach that bridges the DRL reliability gap by integrating these two methods. Our approach combines both formal and probabilistic verification tools to partition the input domain into safe and unsafe regions. In addition, we employ clustering and symbolic representation procedures that compress the unsafe regions into a compact representation. This, in turn, allows to temporarily activate the shield solely in (potentially) unsafe regions, in an efficient manner. Our novel approach allows to significantly reduce runtime overhead while still preserving formal safety guarantees. We extensively evaluate our approach on two benchmarks from the robotic navigation domain, as well as provide an in-depth analysis of its scalability and completeness.
Key facts. Cited by 13 papers in the map (data through 14 Oct 2026). Placed in Safe and constrained RL, one of 15 directions in Deep reinforcement learning methods. Builds on 50 of its 98 references that are in the map. First posted on arXiv 10 Jun 2024.
Builds on
50 of 98 references.
Closest ancestors · 1
Same direction, newest first
- 2024Formally Verifying Deep Reinforcement Learning Controllers with Lyapunov Barrier Certificates22 May
Other references · 49
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2013Intriguing properties of neural networkscited by 5,155
- 2013Playing Atari with Deep Reinforcement Learningcited by 3,274
- 2017Constrained Policy Optimizationcited by 983
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 744
- 2017Safe Reinforcement Learning via Shieldingcited by 449
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 445
- 2018Reward Constrained Policy Optimizationcited by 417
- 2021Safe Learning in Robotics: From Learning-Based Control to Safe Reinforcement Learningcited by 371
- 2017Adversarial Attacks on Neural Network Policiescited by 320
- 2020Responsive Safety in Reinforcement Learning by PID Lagrangian Methodscited by 316
- 2016Safety Verification of Deep Neural Networkscited by 263
37 more
- 2019Algorithms for Verifying Deep Neural Networkscited by 221
- 2018Formal Security Analysis of Neural Networks using Symbolic Intervalscited by 185
- 2019IPO: Interior-point Policy Optimization under Constraintscited by 132
- 2017An approach to reachability analysis for feed-forward ReLU neural networkscited by 127
- 2020Learning to be Safe: Deep RL with a Safety Criticcited by 116
- 2017Virtual-to-real Deep Reinforcement Learning: Continuous Control of Mobile Robots for Mapless Navigationcited by 98
- 2024Marabou 2.0: A Versatile Formal Analyzer of Neural Networkscited by 81
- 2020Towards More Practical Adversarial Attacks on Graph Neural Networkscited by 76
- 2019An Abstraction-Based Framework for Neural Network Verificationcited by 68
- 2022Constrained Update Projection Approach to Safe Policy Optimizationcited by 58
- 2020An SMT-Based Approach for Verifying Binarized Neural Networkscited by 47
- 2015Shield Synthesis: Runtime Enforcement for Reactive Systemscited by 42
- 2018Formal Verification of Neural Network Controlled Autonomous Systemscited by 41
- 2019Fastened CROWN: Tightened Neural Network Robustness Certificatescited by 39
- 2021Neural Network Robustness as a Verification Property: A Principled Case Studycited by 35
- 2021Towards Scalable Verification of Deep Reinforcement Learningcited by 33
- 2022Verifying Learning-Based Robotic Navigation Systemscited by 33
- 2021Direct Behavior Specification via Constrained Reinforcement Learningcited by 31
- 2021Safe Reinforcement Learning using Formal Verification for Tissue Retraction in Autonomous Robotic-Assisted Surgerycited by 24
- 2023Formally Explaining Neural Networks within Reactive Systemscited by 24
- 2023Enumerating Safe Regions in Deep Neural Networks with Provable Probabilistic Guaranteescited by 19
- 2020Adaptive Shielding under Uncertaintycited by 18
- 2022Verification-Aided Deep Ensemble Selectioncited by 18
- 2022Neural Network Verification using Residual Reasoningcited by 18
- 2023Controlling the Solo12 Quadruped Robot with Deep Reinforcement Learningcited by 16
- 2021Minimal Multi-Layer Modifications of Deep Neural Networkscited by 14
- 2021TEMPEST -- Synthesis Tool for Reactive Systems and Shields in Probabilistic Environmentscited by 13
- 2024Reinforcement Learning from Delayed Observations via World Modelscited by 13
- 2018Toward Scalable Verification for Safety-Critical Deep Networkscited by 12
- 2019Mo"ET: Mixture of Expert Trees and its Application to Verifiable Reinforcement Learningcited by 12
- 2022veriFIRE: Verifying an Industrial, Learning-Based Wildfire Detection Systemcited by 12
- 2024Shield Synthesis for LTL Modulo Theoriescited by 12
- 2022Constrained Reinforcement Learning for Robotics via Scenario-Based Programmingcited by 11
- 2023Verifying Generalization in Deep Learningcited by 11
- 2019Shield Synthesis for Real: Enforcing Safety in Cyber-Physical Systemscited by 8
- 2022Scenario-Assisted Deep Reinforcement Learningcited by 8
- 2024Analyzing Adversarial Inputs in Deep Reinforcement Learningcited by 7
Built on by
Citing papers per year: 2024: 4; 2025: 3; 2026: 6.
13 papers.
Sort:
By area:
- 2024Hard to Explain: On the Computational Hardness of In-Distribution Model Interpretationcited by 11
- 2024Safe and Reliable Training of Learning-Based Aerospace Controllerscited by 4
- 2024Realizable Continuous-Space Shields for Safe Reinforcement Learningcited by 3
- 2024Predictable and Performant Reactive Synthesis Modulo Theories via Functional Synthesiscited by 2
- 2026Easy-to-Use Shielding for Reinforcement Learningcited by 1
- 2025Research Vision: Multi-Agent Path Planning for Cops And Robbers Via Reactive Synthesiscited by 0
- 2025Efficient Dynamic Shielding for Parametric Safety Specificationscited by 0
- 2025On Improving Deep Active Learning with Formal Verificationcited by 0
- 2026COOL-MC: Verifying and Explaining RL Policies for Platelet Inventory Managementcited by 0
- 2026Is Your Agent Playing Dead? Deployed LLM Agents Exhibit Constraint-Evasive Fabrication and Thanatosiscited by 0
- 2026Verifiable Foundation Models for Robot Safetycited by 0
- 2026Cycle-Consistent Neural Explanation of Formal Verification Certificatescited by 0
- 2026OpenBlock: Constructive and Verified Content Generation for Adaptive Tile-Matching Games27 Aug 2026
- 2026Cycle-Consistent Neural Explanation of Formal Verification Certificates23 Jun 2026
- 2026Verifiable Foundation Models for Robot Safety22 Jun 2026
- 2026Is Your Agent Playing Dead? Deployed LLM Agents Exhibit Constraint-Evasive Fabrication and Thanatosis12 Jun 2026
- 2026Easy-to-Use Shielding for Reinforcement Learning2 Jun 2026
- 2026COOL-MC: Verifying and Explaining RL Policies for Platelet Inventory Management2 Mar 2026
- 2025On Improving Deep Active Learning with Formal Verification16 Dec 2025
- 2025Efficient Dynamic Shielding for Parametric Safety Specifications28 May 2025
- 2025Research Vision: Multi-Agent Path Planning for Cops And Robbers Via Reactive Synthesis14 Mar 2025
- 2024Realizable Continuous-Space Shields for Safe Reinforcement Learning2 Oct 2024
- 2024Hard to Explain: On the Computational Hardness of In-Distribution Model Interpretation7 Aug 2024
- 2024Predictable and Performant Reactive Synthesis Modulo Theories via Functional Synthesis12 Jul 2024
1 more
- 2024Hard to Explain: On the Computational Hardness of In-Distribution Model Interpretationcited by 11
- 2024Predictable and Performant Reactive Synthesis Modulo Theories via Functional Synthesiscited by 2
- 2025Research Vision: Multi-Agent Path Planning for Cops And Robbers Via Reactive Synthesiscited by 0
- 2025Efficient Dynamic Shielding for Parametric Safety Specificationscited by 0
- 2025On Improving Deep Active Learning with Formal Verificationcited by 0
- 2026COOL-MC: Verifying and Explaining RL Policies for Platelet Inventory Managementcited by 0
- 2026Verifiable Foundation Models for Robot Safetycited by 0
- 2026Cycle-Consistent Neural Explanation of Formal Verification Certificatescited by 0
- 2026OpenBlock: Constructive and Verified Content Generation for Adaptive Tile-Matching Gamescited by 0
- 2026OpenBlock: Constructive and Verified Content Generation for Adaptive Tile-Matching Games27 Aug 2026
- 2026Cycle-Consistent Neural Explanation of Formal Verification Certificates23 Jun 2026
- 2026Verifiable Foundation Models for Robot Safety22 Jun 2026
- 2026COOL-MC: Verifying and Explaining RL Policies for Platelet Inventory Management2 Mar 2026
- 2025On Improving Deep Active Learning with Formal Verification16 Dec 2025
- 2025Efficient Dynamic Shielding for Parametric Safety Specifications28 May 2025
- 2025Research Vision: Multi-Agent Path Planning for Cops And Robbers Via Reactive Synthesis14 Mar 2025
- 2024Hard to Explain: On the Computational Hardness of In-Distribution Model Interpretation7 Aug 2024
- 2024Predictable and Performant Reactive Synthesis Modulo Theories via Functional Synthesis12 Jul 2024
Similar, not cited
Close in wording, no citation either way
- 2026Robust Probabilistic Shielding for Safe Offline Reinforcement Learning
- 2024Learning-Based Shielding for Safe Autonomy under Unknown Dynamics
- 2024Compositional Shielding and Reinforcement Learning for Multi-Agent Systems
- 2024Leveraging Approximate Model-based Shielding for Probabilistic Safety Guarantees in Continuous Environments
- 2024Reinfier and Reintrainer: Verification and Interpretation-Driven Safe Deep Reinforcement Learning Frameworks
- 2024Implicit Safe Set Algorithm for Provably Safe Reinforcement Learning
- 2025Probabilistic Shielding for Safe Reinforcement Learning
- 2026Explainably Safe Reinforcement Learning