Generalizing Safety Beyond Collision-Avoidance via Latent-Space Reachability Analysis
On the map: World models → Latent dynamics models and model-based RL
Abstract (arXiv)
Hamilton-Jacobi (HJ) reachability is a rigorous mathematical framework that enables robots to simultaneously detect unsafe states and generate actions that prevent future failures. While in theory, HJ reachability can synthesize safe controllers for nonlinear systems and nonconvex constraints, in practice, it has been limited to hand-engineered collision-avoidance constraints modeled via low-dimensional state-space representations and first-principles dynamics. In this work, our goal is to generalize safe robot controllers to prevent failures that are hard--if not impossible--to write down by hand, but can be intuitively identified from high-dimensional observations: for example, spilling the contents of a bag. We propose Latent Safety Filters, a latent-space generalization of HJ reachability that tractably operates directly on raw observation data (e.g., RGB images) to automatically compute safety-preserving actions without explicit recovery demonstrations by performing safety analysis in the latent embedding space of a generative world model. Our method leverages diverse robot observation-action data of varying quality (including successes, random exploration, and unsafe demonstrations) to learn a world model. Constraint specification is then transformed into a classification problem in the latent space of the learned world model. In simulation and hardware experiments, we compute an approximation of Latent Safety Filters to safeguard arbitrary policies (from imitation- learned policies to direct teleoperation) from complex safety hazards, like preventing a Franka Research 3 manipulator from spilling the contents of a bag or toppling cluttered objects.
Key facts. Cited by 44 papers in the map (data through 7 Oct 2026). Placed in Latent dynamics models and model-based RL, one of 11 directions in World models. Builds on 44 of its 58 references that are in the map. First posted on arXiv 2 Feb 2025.
Builds on
44 of 58 references.
Closest ancestors · 3
Same direction, newest first
- 2022DayDreamer: World Models for Physical Robot Learning28 Jun
- 2020Mastering Atari with Discrete World Models5 Oct
- 2018Recurrent World Models Facilitate Policy Evolution4 Sep
Other references · 41
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,764
- 2015Continuous control with deep reinforcement learningcited by 3,279
- 2023Diffusion Policy: Visuomotor Policy Learning via Action Diffusioncited by 2,730
- 2015Deep Reinforcement Learning with Double Q-learningcited by 1,704
- 2018Learning Latent Dynamics for Planning from Pixelscited by 1,221
- 2022Temporal Difference Learning for Model Predictive Controlcited by 375
- 2024Universal Manipulation Interface: In-The-Wild Robot Teaching Without In-The-Wild Robotscited by 373
- 2024DINO-WM: World Models on Pre-trained Visual Features enable Zero-shot Planningcited by 357
- 2019Control Barrier Functions: Theory and Applicationscited by 332
- 2017Hamilton-Jacobi Reachability: A Brief Overview and Recent Advancescited by 186
- 2020Recovery RL: Safe Reinforcement Learning with Learned Recovery Zonescited by 156
- 2023Structured World Models from Human Videoscited by 144
29 more
- 2020Learning to be Safe: Deep RL with a Safety Criticcited by 109
- 2020Learning Control Barrier Functions from Expert Demonstrationscited by 88
- 2020DeepReach: A Deep Learning Approach to High-Dimensional Reachabilitycited by 81
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 77
- 2024Agile But Safe: Learning Collision-Free High-Speed Legged Locomotioncited by 53
- 2021Safety and Liveness Guarantees through Reach-Avoid Reinforcement Learningcited by 43
- 2014Reach-Avoid Problems with Time-Varying Dynamics, Targets and Constraintscited by 41
- 2018Robot Motion Planning in Learned Latent Spacescited by 40
- 2023Model-Based Runtime Monitoring with Interactive Imitation Learningcited by 37
- 2019Maximum Likelihood Constraint Inference for Inverse Reinforcement Learningcited by 33
- 2024Multi-Task Interactive Robot Fleet Learning with Visual World Modelscited by 33
- 2022Sim-to-Lab-to-Real: Safe Reinforcement Learning with Shielding and Generalization Guaranteescited by 24
- 2022ISAACS: Iterative Soft Adversarial Actor-Critic for Safetycited by 24
- 2021Learning Robust Output Control Barrier Functions from Safe Expert Demonstrationscited by 19
- 2023Learning Safety Constraints from Demonstrations with Unknown Rewardscited by 19
- 2023In-Distribution Barrier Functions: Self-Supervised Policy Filters that Avoid Out-of-Distribution Statescited by 15
- 2023Learning Shared Safety Constraints from Multi-task Demonstrationscited by 15
- 2021Predictive control barrier functions: Enhanced safety mechanisms for learning-based controlcited by 13
- 2020Learning Constraints from Locally-Optimal Demonstrations under Cost Function Uncertaintycited by 12
- 2019Safe Policy Synthesis in Multi-Agent POMDPs via Discrete-Time Barrier Functionscited by 11
- 2022Parameter-Conditioned Reachable Sets for Updating Safety Assurances Onlinecited by 11
- 2021LS3: Latent Space Safe Sets for Long-Horizon Visuomotor Control of Sparse Reward Iterative Taskscited by 9
- 2023Deception Game: Closing the Safety-Learning Loop in Interactive Robot Autonomycited by 9
- 2021Analyzing Human Models that Adapt Onlinecited by 8
- 2022OptimizedDP: An Efficient, User-friendly Library For Optimal Control and Dynamic Programmingcited by 8
- 2023Sequential Neural Barriers for Scalable Dynamic Obstacle Avoidancecited by 8
- 2024One Filter to Deploy Them All: Robust Safety for Quadrupedal Navigation in Unknown Environmentscited by 8
- 2023tt MORALS: Analysis of High-Dimensional Robot Controllers via Topological Tools in a Latent Spacecited by 4
- 2023Belief Control Barrier Functions for Risk-aware Controlcited by 2
Built on by
Citing papers per year: 2025: 17; 2026: 27.
44 papers.
Sort:
By area:
- 2025DynaGuide: Steering Diffusion Polices with Active Dynamic Guidancecited by 39
- 2025Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failurescited by 30
- 2026PlayWorld: Learning Robot World Models from Autonomous Playcited by 16
- 2026Foundational World Models Accurately Detect Bimanual Manipulator Failurescited by 11
- 2025Preemptive Detection and Steering of LLM Misalignment via Latent Reachabilitycited by 10
- 2025MoE-DP: An MoE-Enhanced Diffusion Policy for Robust Long-Horizon Robotic Manipulation with Skill Decomposition and Failure Recoverycited by 9
- 2025WoMAP: World Models For Embodied Open-Vocabulary Object Localizationcited by 8
- 2026LIBERO-Safety: A Comprehensive Benchmark for Physical and Semantic Safety in Vision-Language-Action Modelscited by 8
- 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraintscited by 7
- 2025AnySafe: Adapting Latent Safety Filters at Runtime via Safety Constraint Parameterization in the Latent Spacecited by 5
- 2026Biased Dreams: Limitations to Epistemic Uncertainty Quantification in Latent Dynamics Modelscited by 5
- 2025Learning Conservative Neural Control Barrier Functions from Offline Datacited by 4
32 more
- 2025Statistically Assuring Safety of Control Systems using Ensembles of Safety Filters and Conformal Predictioncited by 4
- 2025Pretrained Embeddings as a Behavior Specification Mechanismcited by 3
- 2025Designing Latent Safety Filters using Pre-Trained Vision Modelscited by 3
- 2025Safety Certification in the Latent space using Control Barrier Functions and World Modelscited by 2
- 2025Provably Optimal Reinforcement Learning under Safety Filteringcited by 2
- 2026GenCtrl -- A Formal Controllability Toolkit for Generative Modelscited by 2
- 2026Safe Control using Learned Safety Filters and Adaptive Conformal Inferencecited by 2
- 2026Pixels to Proofs: Probabilistically-Safe Latent World Model Control via Parallel Conformal Robust MPCcited by 2
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrailscited by 1
- 2026CMP: Robust Whole-Body Tracking for Loco-Manipulation via Competence Manifold Projectioncited by 1
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Roboticscited by 1
- 2026Towards General Language-Conditioned Latent Safety Filterscited by 1
- 2025How Well Do Latent World Models Understand Partially Observable Safety Constraints?cited by 0
- 2025Learning Neural Control Barrier Functions from Expert Demonstrations using Inverse Constraint Learningcited by 0
- 2025Verification of Unknown Dynamical Systems via Autoencoder Latent Spacecited by 0
- 2026V-MORALS: Visual Morse Graph-Aided Estimation of Regions of Attraction in a Learned Latent Spacecited by 0
- 2026TAIL-Safe: Task-Agnostic Safety Monitoring for Imitation Learning Policiescited by 0
- 2026Latent Q-Barrier Shielding for Safe In-Context Reinforcement Learningcited by 0
- 2026StressDream: Steering Video World Models for Robust Policy Evaluation and Improvementcited by 0
- 2026VLESA: Vision-Language Embodied Safety Agent for Human Activity Monitoringcited by 0
- 2026PACT: Self-Evolving Physical Safety Alignment for Diffusion Policies in Embodied Manipulationcited by 0
- 2026Robustness of Robotic Manipulation: Foundations and Frontierscited by 0
- 2026Failing Gracefully: Mitigating Impact of Inevitable Robot Failurescited by 0
- 2026Forward Trajectory Steering for Hamilton-Jacobi Reachability Analysiscited by 0
- 2026No Free Checker: A Survey of Verifiers for Robot Policiescited by 0
- 2026ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Modelscited by 0
- 2026Legislating World-Model-Based Planning with Legal Reasoningcited by 0
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policiescited by 0
- 2026Turning Safety into Competence: Minimally Exploitable Robot Policies via Safety-Filtered Reinforcement Learningcited by 0
- 2026CrossSafe: Towards Cross-Embodiment Latent Safety Filterscited by 0
- 2026When World Models Lie: Adaptive Safety Analysis Under Wrong Imaginationscited by 0
- 2026Cue the Flow: Steering Flow-Matching Policies for Open-World Delivery Manipulationcited by 0
- 2026Cue the Flow: Steering Flow-Matching Policies for Open-World Delivery Manipulation30 Sep 2026
- 2026When World Models Lie: Adaptive Safety Analysis Under Wrong Imaginations28 Sep 2026
- 2026CrossSafe: Towards Cross-Embodiment Latent Safety Filters24 Sep 2026
- 2026Turning Safety into Competence: Minimally Exploitable Robot Policies via Safety-Filtered Reinforcement Learning23 Sep 2026
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policies18 Sep 2026
- 2026Legislating World-Model-Based Planning with Legal Reasoning14 Sep 2026
- 2026No Free Checker: A Survey of Verifiers for Robot Policies8 Sep 2026
- 2026ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Models2 Sep 2026
- 2026Forward Trajectory Steering for Hamilton-Jacobi Reachability Analysis11 Aug 2026
- 2026Failing Gracefully: Mitigating Impact of Inevitable Robot Failures5 Aug 2026
- 2026Towards General Language-Conditioned Latent Safety Filters31 Jul 2026
- 2026Robustness of Robotic Manipulation: Foundations and Frontiers30 Jun 2026
32 more
- 2026LIBERO-Safety: A Comprehensive Benchmark for Physical and Semantic Safety in Vision-Language-Action Models22 Jun 2026
- 2026Pixels to Proofs: Probabilistically-Safe Latent World Model Control via Parallel Conformal Robust MPC14 Jun 2026
- 2026PACT: Self-Evolving Physical Safety Alignment for Diffusion Policies in Embodied Manipulation7 Jun 2026
- 2026VLESA: Vision-Language Embodied Safety Agent for Human Activity Monitoring2 Jun 2026
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Robotics1 Jun 2026
- 2026StressDream: Steering Video World Models for Robust Policy Evaluation and Improvement29 May 2026
- 2026Latent Q-Barrier Shielding for Safe In-Context Reinforcement Learning24 May 2026
- 2026TAIL-Safe: Task-Agnostic Safety Monitoring for Imitation Learning Policies2 May 2026
- 2026Biased Dreams: Limitations to Epistemic Uncertainty Quantification in Latent Dynamics Models28 Apr 2026
- 2026Safe Control using Learned Safety Filters and Adaptive Conformal Inference20 Apr 2026
- 2026CMP: Robust Whole-Body Tracking for Loco-Manipulation via Competence Manifold Projection8 Apr 2026
- 2026PlayWorld: Learning Robot World Models from Autonomous Play9 Mar 2026
- 2026Foundational World Models Accurately Detect Bimanual Manipulator Failures7 Mar 2026
- 2026V-MORALS: Visual Morse Graph-Aided Estimation of Regions of Attraction in a Learned Latent Space26 Feb 2026
- 2026GenCtrl -- A Formal Controllability Toolkit for Generative Models9 Jan 2026
- 2025Verification of Unknown Dynamical Systems via Autoencoder Latent Space15 Dec 2025
- 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraints23 Nov 2025
- 2025Statistically Assuring Safety of Control Systems using Ensembles of Safety Filters and Conformal Prediction11 Nov 2025
- 2025MoE-DP: An MoE-Enhanced Diffusion Policy for Robust Long-Horizon Robotic Manipulation with Skill Decomposition and Failure Recovery7 Nov 2025
- 2025Learning Neural Control Barrier Functions from Expert Demonstrations using Inverse Constraint Learning24 Oct 2025
- 2025Provably Optimal Reinforcement Learning under Safety Filtering20 Oct 2025
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails15 Oct 2025
- 2025How Well Do Latent World Models Understand Partially Observable Safety Constraints?7 Oct 2025
- 2025Preemptive Detection and Steering of LLM Misalignment via Latent Reachability25 Sep 2025
- 2025AnySafe: Adapting Latent Safety Filters at Runtime via Safety Constraint Parameterization in the Latent Space23 Sep 2025
- 2025Designing Latent Safety Filters using Pre-Trained Vision Models18 Sep 2025
- 2025Safety Certification in the Latent space using Control Barrier Functions and World Models18 Jul 2025
- 2025DynaGuide: Steering Diffusion Polices with Active Dynamic Guidance16 Jun 2025
- 2025WoMAP: World Models For Embodied Open-Vocabulary Object Localization2 Jun 2025
- 2025Learning Conservative Neural Control Barrier Functions from Offline Data1 May 2025
- 2025Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failures1 May 2025
- 2025Pretrained Embeddings as a Behavior Specification Mechanism3 Mar 2025
- 2025Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failurescited by 30
- 2026PlayWorld: Learning Robot World Models from Autonomous Playcited by 16
- 2026Foundational World Models Accurately Detect Bimanual Manipulator Failurescited by 11
- 2025WoMAP: World Models For Embodied Open-Vocabulary Object Localizationcited by 8
- 2025AnySafe: Adapting Latent Safety Filters at Runtime via Safety Constraint Parameterization in the Latent Spacecited by 5
- 2025Designing Latent Safety Filters using Pre-Trained Vision Modelscited by 3
- 2025Safety Certification in the Latent space using Control Barrier Functions and World Modelscited by 2
- 2026Pixels to Proofs: Probabilistically-Safe Latent World Model Control via Parallel Conformal Robust MPCcited by 2
- 2025How Well Do Latent World Models Understand Partially Observable Safety Constraints?cited by 0
- 2026StressDream: Steering Video World Models for Robust Policy Evaluation and Improvementcited by 0
- 2026Legislating World-Model-Based Planning with Legal Reasoningcited by 0
- 2026When World Models Lie: Adaptive Safety Analysis Under Wrong Imaginationscited by 0
- 2026When World Models Lie: Adaptive Safety Analysis Under Wrong Imaginations28 Sep 2026
- 2026Legislating World-Model-Based Planning with Legal Reasoning14 Sep 2026
- 2026Pixels to Proofs: Probabilistically-Safe Latent World Model Control via Parallel Conformal Robust MPC14 Jun 2026
- 2026StressDream: Steering Video World Models for Robust Policy Evaluation and Improvement29 May 2026
- 2026PlayWorld: Learning Robot World Models from Autonomous Play9 Mar 2026
- 2026Foundational World Models Accurately Detect Bimanual Manipulator Failures7 Mar 2026
- 2025How Well Do Latent World Models Understand Partially Observable Safety Constraints?7 Oct 2025
- 2025AnySafe: Adapting Latent Safety Filters at Runtime via Safety Constraint Parameterization in the Latent Space23 Sep 2025
- 2025Designing Latent Safety Filters using Pre-Trained Vision Models18 Sep 2025
- 2025Safety Certification in the Latent space using Control Barrier Functions and World Models18 Jul 2025
- 2025WoMAP: World Models For Embodied Open-Vocabulary Object Localization2 Jun 2025
- 2025Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failures1 May 2025
- 2025DynaGuide: Steering Diffusion Polices with Active Dynamic Guidancecited by 39
- 2025MoE-DP: An MoE-Enhanced Diffusion Policy for Robust Long-Horizon Robotic Manipulation with Skill Decomposition and Failure Recoverycited by 9
- 2026TAIL-Safe: Task-Agnostic Safety Monitoring for Imitation Learning Policiescited by 0
- 2026PACT: Self-Evolving Physical Safety Alignment for Diffusion Policies in Embodied Manipulationcited by 0
- 2026Cue the Flow: Steering Flow-Matching Policies for Open-World Delivery Manipulationcited by 0
- 2026Cue the Flow: Steering Flow-Matching Policies for Open-World Delivery Manipulation30 Sep 2026
- 2026PACT: Self-Evolving Physical Safety Alignment for Diffusion Policies in Embodied Manipulation7 Jun 2026
- 2026TAIL-Safe: Task-Agnostic Safety Monitoring for Imitation Learning Policies2 May 2026
- 2025MoE-DP: An MoE-Enhanced Diffusion Policy for Robust Long-Horizon Robotic Manipulation with Skill Decomposition and Failure Recovery7 Nov 2025
- 2025DynaGuide: Steering Diffusion Polices with Active Dynamic Guidance16 Jun 2025
- 2026LIBERO-Safety: A Comprehensive Benchmark for Physical and Semantic Safety in Vision-Language-Action Modelscited by 8
- 2026Towards General Language-Conditioned Latent Safety Filterscited by 1
- 2026ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Modelscited by 0
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policiescited by 0
- 2026CrossSafe: Towards Cross-Embodiment Latent Safety Filterscited by 0
- 2026CrossSafe: Towards Cross-Embodiment Latent Safety Filters24 Sep 2026
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policies18 Sep 2026
- 2026ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Models2 Sep 2026
- 2026Towards General Language-Conditioned Latent Safety Filters31 Jul 2026
- 2026LIBERO-Safety: A Comprehensive Benchmark for Physical and Semantic Safety in Vision-Language-Action Models22 Jun 2026
- 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraintscited by 7
- 2026Biased Dreams: Limitations to Epistemic Uncertainty Quantification in Latent Dynamics Modelscited by 5
- 2025Statistically Assuring Safety of Control Systems using Ensembles of Safety Filters and Conformal Predictioncited by 4
- 2025Pretrained Embeddings as a Behavior Specification Mechanismcited by 3
- 2025Provably Optimal Reinforcement Learning under Safety Filteringcited by 2
- 2026GenCtrl -- A Formal Controllability Toolkit for Generative Modelscited by 2
- 2026Safe Control using Learned Safety Filters and Adaptive Conformal Inferencecited by 2
- 2026CMP: Robust Whole-Body Tracking for Loco-Manipulation via Competence Manifold Projectioncited by 1
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Roboticscited by 1
- 2025Learning Neural Control Barrier Functions from Expert Demonstrations using Inverse Constraint Learningcited by 0
- 2025Verification of Unknown Dynamical Systems via Autoencoder Latent Spacecited by 0
- 2026V-MORALS: Visual Morse Graph-Aided Estimation of Regions of Attraction in a Learned Latent Spacecited by 0
12 most cited of 19 All 19 (JSON)
- 2026Turning Safety into Competence: Minimally Exploitable Robot Policies via Safety-Filtered Reinforcement Learning23 Sep 2026
- 2026No Free Checker: A Survey of Verifiers for Robot Policies8 Sep 2026
- 2026Forward Trajectory Steering for Hamilton-Jacobi Reachability Analysis11 Aug 2026
- 2026Failing Gracefully: Mitigating Impact of Inevitable Robot Failures5 Aug 2026
- 2026Robustness of Robotic Manipulation: Foundations and Frontiers30 Jun 2026
- 2026VLESA: Vision-Language Embodied Safety Agent for Human Activity Monitoring2 Jun 2026
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Robotics1 Jun 2026
- 2026Latent Q-Barrier Shielding for Safe In-Context Reinforcement Learning24 May 2026
- 2026Biased Dreams: Limitations to Epistemic Uncertainty Quantification in Latent Dynamics Models28 Apr 2026
- 2026Safe Control using Learned Safety Filters and Adaptive Conformal Inference20 Apr 2026
- 2026CMP: Robust Whole-Body Tracking for Loco-Manipulation via Competence Manifold Projection8 Apr 2026
- 2026V-MORALS: Visual Morse Graph-Aided Estimation of Regions of Attraction in a Learned Latent Space26 Feb 2026
12 newest of 19 All 19 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2026λ-Reachability: Geometric-Horizon Safety Bellman Equations for Humanoid Safety
- 2024Updating Robot Safety Representations Online from Natural Language Feedback
- 2024Zero-shot Safety Prediction for Autonomous Robots with Foundation World Models
- 2026Calibrated Predictive Safety for Heterogeneous Robots: An Action-Conditioned JEPA Framework with Model-Based Safety Shields ↗
- 2025Towards Safe Robot Foundation Models Using Inductive Biases
- 2025From Demonstrations to Safe Deployment: Path-Consistent Safety Filtering for Diffusion Policies
- 2026From Latent Space to Jacobian Space: Measuring, Evading, and Training Against Safety-Content Accessibility
- 2026Neuro-Symbolic Safety Guidance for Vision-Language-Action Models via Constrained Flow Matching