mlsanityData to 7 Oct 2026

Generalizing Safety Beyond Collision-Avoidance via Latent-Space Reachability Analysis

arXiv 2502.00935 ↗First posted 2 Feb 2025cs.RO cs.LGcited by 44

On the map: World models → Latent dynamics models and model-based RL

Abstract (arXiv)

Hamilton-Jacobi (HJ) reachability is a rigorous mathematical framework that enables robots to simultaneously detect unsafe states and generate actions that prevent future failures. While in theory, HJ reachability can synthesize safe controllers for nonlinear systems and nonconvex constraints, in practice, it has been limited to hand-engineered collision-avoidance constraints modeled via low-dimensional state-space representations and first-principles dynamics. In this work, our goal is to generalize safe robot controllers to prevent failures that are hard--if not impossible--to write down by hand, but can be intuitively identified from high-dimensional observations: for example, spilling the contents of a bag. We propose Latent Safety Filters, a latent-space generalization of HJ reachability that tractably operates directly on raw observation data (e.g., RGB images) to automatically compute safety-preserving actions without explicit recovery demonstrations by performing safety analysis in the latent embedding space of a generative world model. Our method leverages diverse robot observation-action data of varying quality (including successes, random exploration, and unsafe demonstrations) to learn a world model. Constraint specification is then transformed into a classification problem in the latent space of the learned world model. In simulation and hardware experiments, we compute an approximation of Latent Safety Filters to safeguard arbitrary policies (from imitation- learned policies to direct teleoperation) from complex safety hazards, like preventing a Franka Research 3 manipulator from spilling the contents of a bag or toppling cluttered objects.

Key facts. Cited by 44 papers in the map (data through 7 Oct 2026). Placed in Latent dynamics models and model-based RL, one of 11 directions in World models. Builds on 44 of its 58 references that are in the map. First posted on arXiv 2 Feb 2025.

Builds on

44 of 58 references.

Closest ancestors · 3

Same direction, newest first

  1. 2022DayDreamer: World Models for Physical Robot Learning28 Jun
  2. 2020Mastering Atari with Discrete World Models5 Oct
  3. 2018Recurrent World Models Facilitate Policy Evolution4 Sep

Other references · 41

  1. 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,764
  2. 2015Continuous control with deep reinforcement learningcited by 3,279
  3. 2023Diffusion Policy: Visuomotor Policy Learning via Action Diffusioncited by 2,730
  4. 2015Deep Reinforcement Learning with Double Q-learningcited by 1,704
  5. 2018Learning Latent Dynamics for Planning from Pixelscited by 1,221
  6. 2022Temporal Difference Learning for Model Predictive Controlcited by 375
  7. 2024Universal Manipulation Interface: In-The-Wild Robot Teaching Without In-The-Wild Robotscited by 373
  8. 2024DINO-WM: World Models on Pre-trained Visual Features enable Zero-shot Planningcited by 357
  9. 2019Control Barrier Functions: Theory and Applicationscited by 332
  10. 2017Hamilton-Jacobi Reachability: A Brief Overview and Recent Advancescited by 186
  11. 2020Recovery RL: Safe Reinforcement Learning with Learned Recovery Zonescited by 156
  12. 2023Structured World Models from Human Videoscited by 144
29 more
  1. 2020Learning to be Safe: Deep RL with a Safety Criticcited by 109
  2. 2020Learning Control Barrier Functions from Expert Demonstrationscited by 88
  3. 2020DeepReach: A Deep Learning Approach to High-Dimensional Reachabilitycited by 81
  4. 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 77
  5. 2024Agile But Safe: Learning Collision-Free High-Speed Legged Locomotioncited by 53
  6. 2021Safety and Liveness Guarantees through Reach-Avoid Reinforcement Learningcited by 43
  7. 2014Reach-Avoid Problems with Time-Varying Dynamics, Targets and Constraintscited by 41
  8. 2018Robot Motion Planning in Learned Latent Spacescited by 40
  9. 2023Model-Based Runtime Monitoring with Interactive Imitation Learningcited by 37
  10. 2019Maximum Likelihood Constraint Inference for Inverse Reinforcement Learningcited by 33
  11. 2024Multi-Task Interactive Robot Fleet Learning with Visual World Modelscited by 33
  12. 2022Sim-to-Lab-to-Real: Safe Reinforcement Learning with Shielding and Generalization Guaranteescited by 24
  13. 2022ISAACS: Iterative Soft Adversarial Actor-Critic for Safetycited by 24
  14. 2021Learning Robust Output Control Barrier Functions from Safe Expert Demonstrationscited by 19
  15. 2023Learning Safety Constraints from Demonstrations with Unknown Rewardscited by 19
  16. 2023In-Distribution Barrier Functions: Self-Supervised Policy Filters that Avoid Out-of-Distribution Statescited by 15
  17. 2023Learning Shared Safety Constraints from Multi-task Demonstrationscited by 15
  18. 2021Predictive control barrier functions: Enhanced safety mechanisms for learning-based controlcited by 13
  19. 2020Learning Constraints from Locally-Optimal Demonstrations under Cost Function Uncertaintycited by 12
  20. 2019Safe Policy Synthesis in Multi-Agent POMDPs via Discrete-Time Barrier Functionscited by 11
  21. 2022Parameter-Conditioned Reachable Sets for Updating Safety Assurances Onlinecited by 11
  22. 2021LS3: Latent Space Safe Sets for Long-Horizon Visuomotor Control of Sparse Reward Iterative Taskscited by 9
  23. 2023Deception Game: Closing the Safety-Learning Loop in Interactive Robot Autonomycited by 9
  24. 2021Analyzing Human Models that Adapt Onlinecited by 8
  25. 2022OptimizedDP: An Efficient, User-friendly Library For Optimal Control and Dynamic Programmingcited by 8
  26. 2023Sequential Neural Barriers for Scalable Dynamic Obstacle Avoidancecited by 8
  27. 2024One Filter to Deploy Them All: Robust Safety for Quadrupedal Navigation in Unknown Environmentscited by 8
  28. 2023tt MORALS: Analysis of High-Dimensional Robot Controllers via Topological Tools in a Latent Spacecited by 4
  29. 2023Belief Control Barrier Functions for Risk-aware Controlcited by 2

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 17; 2026: 27.

44 papers.

Sort:

By area:

  1. 2025DynaGuide: Steering Diffusion Polices with Active Dynamic Guidancecited by 39
  2. 2025Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failurescited by 30
  3. 2026PlayWorld: Learning Robot World Models from Autonomous Playcited by 16
  4. 2026Foundational World Models Accurately Detect Bimanual Manipulator Failurescited by 11
  5. 2025Preemptive Detection and Steering of LLM Misalignment via Latent Reachabilitycited by 10
  6. 2025MoE-DP: An MoE-Enhanced Diffusion Policy for Robust Long-Horizon Robotic Manipulation with Skill Decomposition and Failure Recoverycited by 9
  7. 2025WoMAP: World Models For Embodied Open-Vocabulary Object Localizationcited by 8
  8. 2026LIBERO-Safety: A Comprehensive Benchmark for Physical and Semantic Safety in Vision-Language-Action Modelscited by 8
  9. 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraintscited by 7
  10. 2025AnySafe: Adapting Latent Safety Filters at Runtime via Safety Constraint Parameterization in the Latent Spacecited by 5
  11. 2026Biased Dreams: Limitations to Epistemic Uncertainty Quantification in Latent Dynamics Modelscited by 5
  12. 2025Learning Conservative Neural Control Barrier Functions from Offline Datacited by 4
32 more
  1. 2025Statistically Assuring Safety of Control Systems using Ensembles of Safety Filters and Conformal Predictioncited by 4
  2. 2025Pretrained Embeddings as a Behavior Specification Mechanismcited by 3
  3. 2025Designing Latent Safety Filters using Pre-Trained Vision Modelscited by 3
  4. 2025Safety Certification in the Latent space using Control Barrier Functions and World Modelscited by 2
  5. 2025Provably Optimal Reinforcement Learning under Safety Filteringcited by 2
  6. 2026GenCtrl -- A Formal Controllability Toolkit for Generative Modelscited by 2
  7. 2026Safe Control using Learned Safety Filters and Adaptive Conformal Inferencecited by 2
  8. 2026Pixels to Proofs: Probabilistically-Safe Latent World Model Control via Parallel Conformal Robust MPCcited by 2
  9. 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrailscited by 1
  10. 2026CMP: Robust Whole-Body Tracking for Loco-Manipulation via Competence Manifold Projectioncited by 1
  11. 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Roboticscited by 1
  12. 2026Towards General Language-Conditioned Latent Safety Filterscited by 1
  13. 2025How Well Do Latent World Models Understand Partially Observable Safety Constraints?cited by 0
  14. 2025Learning Neural Control Barrier Functions from Expert Demonstrations using Inverse Constraint Learningcited by 0
  15. 2025Verification of Unknown Dynamical Systems via Autoencoder Latent Spacecited by 0
  16. 2026V-MORALS: Visual Morse Graph-Aided Estimation of Regions of Attraction in a Learned Latent Spacecited by 0
  17. 2026TAIL-Safe: Task-Agnostic Safety Monitoring for Imitation Learning Policiescited by 0
  18. 2026Latent Q-Barrier Shielding for Safe In-Context Reinforcement Learningcited by 0
  19. 2026StressDream: Steering Video World Models for Robust Policy Evaluation and Improvementcited by 0
  20. 2026VLESA: Vision-Language Embodied Safety Agent for Human Activity Monitoringcited by 0
  21. 2026PACT: Self-Evolving Physical Safety Alignment for Diffusion Policies in Embodied Manipulationcited by 0
  22. 2026Robustness of Robotic Manipulation: Foundations and Frontierscited by 0
  23. 2026Failing Gracefully: Mitigating Impact of Inevitable Robot Failurescited by 0
  24. 2026Forward Trajectory Steering for Hamilton-Jacobi Reachability Analysiscited by 0
  25. 2026No Free Checker: A Survey of Verifiers for Robot Policiescited by 0
  26. 2026ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Modelscited by 0
  27. 2026Legislating World-Model-Based Planning with Legal Reasoningcited by 0
  28. 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policiescited by 0
  29. 2026Turning Safety into Competence: Minimally Exploitable Robot Policies via Safety-Filtered Reinforcement Learningcited by 0
  30. 2026CrossSafe: Towards Cross-Embodiment Latent Safety Filterscited by 0
  31. 2026When World Models Lie: Adaptive Safety Analysis Under Wrong Imaginationscited by 0
  32. 2026Cue the Flow: Steering Flow-Matching Policies for Open-World Delivery Manipulationcited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2026λ-Reachability: Geometric-Horizon Safety Bellman Equations for Humanoid Safety
  2. 2024Updating Robot Safety Representations Online from Natural Language Feedback
  3. 2024Zero-shot Safety Prediction for Autonomous Robots with Foundation World Models
  4. 2026Calibrated Predictive Safety for Heterogeneous Robots: An Action-Conditioned JEPA Framework with Model-Based Safety Shields ↗
  5. 2025Towards Safe Robot Foundation Models Using Inductive Biases
  6. 2025From Demonstrations to Safe Deployment: Path-Consistent Safety Filtering for Diffusion Policies
  7. 2026From Latent Space to Jacobian Space: Measuring, Evading, and Training Against Safety-Content Accessibility
  8. 2026Neuro-Symbolic Safety Guidance for Vision-Language-Action Models via Constrained Flow Matching