Don't Let Your Robot be Harmful: Responsible Robotic Manipulation via Safety-as-Policy
Not on the map. Why?
Abstract (arXiv)
Unthinking execution of human instructions in robotic manipulation can lead to severe safety risks, such as poisonings, fires, and even explosions. In this paper, we present responsible robotic manipulation, which requires robots to consider potential hazards in the real-world environment while completing instructions and performing complex operations safely and efficiently. However, such scenarios in real world are variable and risky for training. To address this challenge, we propose Safety-as-policy, which includes (i) a world model to automatically generate scenarios containing safety risks and conduct virtual interactions, and (ii) a mental model to infer consequences with reflections and gradually develop the cognition of safety, allowing robots to accomplish tasks while avoiding dangers. Additionally, we create the SafeBox synthetic dataset, which includes one hundred responsible robotic manipulation tasks with different safety risk scenarios and instructions, effectively reducing the risks associated with real-world experiments. Experiments demonstrate that Safety-as-policy can avoid risks and efficiently complete tasks in both synthetic dataset and real-world experiments, significantly outperforming baseline methods. Our SafeBox dataset shows consistent evaluation results with real-world scenarios, serving as a safe and effective benchmark for future research.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Builds on 47 of its 69 references that are in the map. First posted on arXiv 27 Nov 2024.
Builds on
47 of 69 references.
References · 47
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2024GPT-4o System Cardcited by 4,588
- 2021Zero-Shot Text-to-Image Generationcited by 4,288
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 3,080
- 2024OpenVLA: An Open-Source Vision-Language-Action Modelcited by 2,887
- 2024π0: A Vision-Language-Action Flow Model for General Robot Controlcited by 2,407
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,348
35 more
- 2022RT-1: Robotics Transformer for Real-World Control at Scalecited by 2,061
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2019Explainable Artificial Intelligence (XAI): Concepts, Taxonomies, Opportunities and Challenges toward Responsible AIcited by 1,552
- 2022Code as Policies: Language Model Programs for Embodied Controlcited by 1,210
- 2019Machine Unlearningcited by 1,061
- 2023VoxPoser: Composable 3D Value Maps for Robotic Manipulation with Language Modelscited by 750
- 2022R3M: A Universal Visual Representation for Robot Manipulationcited by 694
- 2023Eureka: Human-Level Reward Design via Coding Large Language Modelscited by 571
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
- 2024YOLO-World: Real-Time Open-Vocabulary Object Detectioncited by 503
- 2023Vision-Language Foundation Models as Effective Robot Imitatorscited by 349
- 2023Language to Rewards for Robotic Skill Synthesiscited by 312
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 257
- 2023Text2Motion: From Natural Language Instructions to Feasible Planscited by 224
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 224
- 2023TidyBot: Personalized Robot Assistance with Large Language Modelscited by 221
- 2024Embodied Agent Interface: Benchmarking LLMs for Embodied Decision Makingcited by 144
- 2024Towards Safer Large Language Models through Machine Unlearningcited by 139
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Eraserscited by 120
- 2020Learning to be Safe: Deep RL with a Safety Criticcited by 116
- 2023STEVE-1: A Generative Model for Text-to-Behavior in Minecraftcited by 97
- 2023GPT-4V(ision) for Robotics: Multimodal Task Planning from Human Demonstrationcited by 77
- 2023Self-Discovering Interpretable Diffusion Latent Directions for Responsible Text-to-Image Generationcited by 69
- 2023ChatGPT Empowered Long-Step Robot Control in Various Environments: A Case Applicationcited by 48
- 2023Creative Robot Tool Use with Large Language Modelscited by 43
- 2021Safe Driving via Expert Guided Policy Optimizationcited by 31
- 2024What Foundation Models can Bring for Robot Learning in Manipulation : A Surveycited by 19
- 2024Visual-O1: Understanding Ambiguous Instructions via Multi-modal Multi-turn Chain-of-thoughts Reasoningcited by 17
- 2023Generalizable Long-Horizon Manipulations with Large Language Modelscited by 16
- 2024SRL-VIC: A Variable Stiffness-Based Safe Reinforcement Learning for Contact-Rich Robotic Taskscited by 15
- 2023ORES: Open-vocabulary Responsible Visual Synthesiscited by 14
- 2024ContactDexNet: Multi-fingered Robotic Hand Grasping in Cluttered Environments through Hand-object Contact Semantic Mappingcited by 11
- 2024STEVE Series: Step-by-Step Construction of Agent Systems in Minecraftcited by 6
- 2020Translating Natural Language Instructions to Computer Programs for Robot Manipulationcited by 5
- 2024Responsible Visual Editingcited by 2
Built on by
Citing papers per year: 2025: 4; 2026: 5.
9 papers.
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agentscited by 17
- 2025DETACH: Cross-domain Learning for Long-Horizon Tasks via Mixture of Disentangled Expertscited by 5
- 2026Using large language models for embodied planning introduces systematic safety riskscited by 5
- 2026SAVeS: Steering Safety Judgments in Vision-Language Models via Semantic Cuescited by 4
- 2026ForesightSafety Bench: A Frontier Risk Evaluation and Governance Framework towards Safe AIcited by 3
- 2025M4Diffuser: Multi-View Diffusion Policy with Manipulability-Aware Control for Robust Mobile Manipulationcited by 2
- 2025OmniDexVLG: Learning Dexterous Grasp Generation from Vision Language Model-Guided Grasp Semantics, Taxonomy and Functional Affordancecited by 2
- 2026When Words Are Safe But Actions Kill: Probing Physical Jailbreak Beyond Textual Jailbreak in Hidden-State Risk Spacecited by 0
- 2026Safe Task Planning with Long-Term Graph Memory for Embodied Agentscited by 0
- 2026Safe Task Planning with Long-Term Graph Memory for Embodied Agents8 Sep 2026
- 2026When Words Are Safe But Actions Kill: Probing Physical Jailbreak Beyond Textual Jailbreak in Hidden-State Risk Space16 Jul 2026
- 2026Using large language models for embodied planning introduces systematic safety risks20 Apr 2026
- 2026SAVeS: Steering Safety Judgments in Vision-Language Models via Semantic Cues19 Mar 2026
- 2026ForesightSafety Bench: A Frontier Risk Evaluation and Governance Framework towards Safe AI15 Feb 2026
- 2025OmniDexVLG: Learning Dexterous Grasp Generation from Vision Language Model-Guided Grasp Semantics, Taxonomy and Functional Affordance3 Dec 2025
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents30 Sep 2025
- 2025M4Diffuser: Multi-View Diffusion Policy with Manipulability-Aware Control for Robust Mobile Manipulation18 Sep 2025
- 2025DETACH: Cross-domain Learning for Long-Horizon Tasks via Mixture of Disentangled Experts11 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2026SafeStage: Evaluating Safety Before, During, and After Vision-Language-Conditioned Robot Manipulation ↗
- 2026MANIGUARD: A Benchmark and Data Suite for Specification-Grounded Safety Evaluation and Improvement of Robotic Manipulation
- 2025Safe Learning for Contact-Rich Robot Tasks: A Survey from Classical Learning-Based Methods to Safe Foundation Models
- 2025ResponsibleRobotBench: Benchmarking Responsible Robot Manipulation using Multi-modal Large Language Models
- 2026SafeManip: A Property-Driven Benchmark for Temporal Safety Evaluation in Robotic Manipulation
- 2025Towards Safe Robot Foundation Models Using Inductive Biases
- 2025From Demonstrations to Safe Deployment: Path-Consistent Safety Filtering for Diffusion Policies
- 2026SafeVLA-Bench: A Benchmark for the Success-Safety Gap in Vision-Language-Action Models