Safe LLM-Controlled Robots with Formal Guarantees via Reachability Analysis
Not on the map. Why?
Abstract (arXiv)
The deployment of Large Language Models (LLMs) in robotic systems presents unique safety challenges, particularly in unpredictable environments. Although LLMs, leveraging zero-shot learning, enhance human-robot interaction and decision-making capabilities, their inherent probabilistic nature and lack of formal guarantees raise significant concerns for safety-critical applications. Traditional model-based verification approaches often rely on precise system models, which are difficult to obtain for real-world robotic systems and may not be fully trusted due to modeling inaccuracies, unmodeled dynamics, or environmental uncertainties. To address these challenges, this paper introduces a safety assurance framework for LLM-controlled robots based on data-driven reachability analysis, a formal verification technique that ensures all possible system trajectories remain within safe operational limits. Our framework specifically investigates the problem of instructing an LLM to navigate the robot to a specified goal and assesses its ability to generate low-level control actions that successfully guide the robot safely toward that goal. By leveraging historical data to construct reachable sets of states for the robot-LLM system, our approach provides rigorous safety guarantees against unsafe behaviors without relying on explicit analytical models. We validate the framework through experimental case studies in autonomous navigation and task planning, demonstrating its effectiveness in mitigating risks associated with LLM-generated commands. This work advances the integration of formal methods into LLM-based robotics, offering a principled and practical approach to ensuring safety in next-generation autonomous systems.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Builds on 21 of its 31 references that are in the map. First posted on arXiv 5 Mar 2025.
Builds on
21 of 31 references.
References · 21
- 2017OptNet: Differentiable Optimization as a Layer in Neural Networkscited by 599
- 2018Learning-based Model Predictive Control for Safe Explorationcited by 120
- 2024HiRT: Enhancing Robotic Control with Hierarchical Robot Transformerscited by 75
- 2023Plug in the Safety Chip: Enforcing Constraints for LLM-driven Robot Agentscited by 69
- 2024Humanoid Locomotion as Next Token Predictioncited by 69
- 2021Safe Reinforcement Learning Using Advantage-Based Interventioncited by 47
- 2023Prompt a Robot to Walk with Large Language Modelscited by 45
- 2024From LLMs to Actions: Latent Codes as Bridges in Hierarchical Robot Controlcited by 35
- 2024Large Language Models for UAVs: Current State and Pathways to the Futurecited by 33
- 2023Goal Representations for Instruction Following: A Semi-Supervised Language Interface to Controlcited by 32
- 2022Safe Reinforcement Learning Using Black-Box Reachability Analysiscited by 26
- 2020On Infusing Reachability-Based Safety Assurance within Planning Frameworks for Human-Robot Vehicle Interactionscited by 25
9 more
- 2024Long-horizon Locomotion and Manipulation on a Quadrupedal Robot with Large Language Modelscited by 21
- 2021Data-Driven Reachability Analysis from Noisy Datacited by 14
- 2018Bridging the Gap Between Safety and Real-Time Performance in Receding-Horizon Trajectory Design for Mobile Robotscited by 11
- 2020Data-Driven Reachability Analysis Using Matrix Zonotopescited by 11
- 2024Human-AI Safety: A Descendant of Generative AI and Control Systems Safetycited by 7
- 2021Constrained Feedforward Neural Network Training via Reachability Analysiscited by 5
- 2022Safe Reinforcement Learning using Data-Driven Predictive Controlcited by 5
- 2024DrPlanner: Diagnosis and Repair of Motion Planners for Automated Vehicles Using Large Language Modelscited by 4
- 2024Text2Interaction: Establishing Safe and Preferable Human-Robot Interactioncited by 4
Built on by
Citing papers per year: 2025: 2; 2026: 7.
9 papers.
- 2026Safety in Embodied AI: A Survey of Risks, Attacks, and Defensescited by 7
- 2026Failure Identification in Imitation Learning Via Statistical and Semantic Filteringcited by 6
- 2025A Red Teaming Roadmap Towards System-Level Safetycited by 2
- 2025Enhancing Reliability in LLM-Integrated Robotic Systems: A Unified Approach to Security and Safetycited by 1
- 2026Safe Embodied AI for Long-horizon Tasks: A Cross-layer Analysis of Robotic Manipulationcited by 1
- 2026Agentic Driving Coach: Robustness and Determinism of Agentic AI-Powered Human-in-the-Loop Cyber-Physical Systemscited by 0
- 2026Structured LLM Reasoning for Zero-Shot Human--Robot Coordination Under Hidden Goalscited by 0
- 2026Security of Foundation-Model-Powered Embodied Agents: Attack Surfaces, Attacks, Defenses, and Evaluationcited by 0
- 2026Safe Multi-Robot Coordination via VLM-LLM Reasoning and Reachability Analysiscited by 0
- 2026Safe Multi-Robot Coordination via VLM-LLM Reasoning and Reachability Analysis18 Aug 2026
- 2026Security of Foundation-Model-Powered Embodied Agents: Attack Surfaces, Attacks, Defenses, and Evaluation17 Aug 2026
- 2026Structured LLM Reasoning for Zero-Shot Human--Robot Coordination Under Hidden Goals5 Aug 2026
- 2026Safe Embodied AI for Long-horizon Tasks: A Cross-layer Analysis of Robotic Manipulation4 Jun 2026
- 2026Failure Identification in Imitation Learning Via Statistical and Semantic Filtering15 Apr 2026
- 2026Agentic Driving Coach: Robustness and Determinism of Agentic AI-Powered Human-in-the-Loop Cyber-Physical Systems13 Apr 2026
- 2026Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses28 Mar 2026
- 2025Enhancing Reliability in LLM-Integrated Robotic Systems: A Unified Approach to Security and Safety2 Sep 2025
- 2025A Red Teaming Roadmap Towards System-Level Safety30 May 2025