Generating Robot Constitutions & Benchmarks for Semantic Safety
Not on the map. Why?
Abstract (arXiv)
Until recently, robotics safety research was predominantly about collision avoidance and hazard reduction in the immediate vicinity of a robot. Since the advent of large vision and language models (VLMs), robots are now also capable of higher-level semantic scene understanding and natural language interactions with humans. Despite their known vulnerabilities (e.g. hallucinations or jail-breaking), VLMs are being handed control of robots capable of physical contact with the real world. This can lead to dangerous behaviors, making semantic safety for robots a matter of immediate concern. Our contributions in this paper are two fold: first, to address these emerging risks, we release the ASIMOV Benchmark, a large-scale and comprehensive collection of datasets for evaluating and improving semantic safety of foundation models serving as robot brains. Our data generation recipe is highly scalable: by leveraging text and image generation techniques, we generate undesirable situations from real-world visual scenes and human injury reports from hospitals. Secondly, we develop a framework to automatically generate robot constitutions from real-world data to steer a robot's behavior using Constitutional AI mechanisms. We propose a novel auto-amending process that is able to introduce nuances in written rules of behavior; this can lead to increased alignment with human preferences on behavior desirability and safety. We explore trade-offs between generality and specificity across a diverse set of constitutions of different lengths, and demonstrate that a robot is able to effectively reject unconstitutional actions. We measure a top alignment rate of 84.3% on the ASIMOV Benchmark using generated constitutions, outperforming no-constitution baselines and human-written constitutions. Data is available at asimov-benchmark.github.io
Key facts. Cited by 33 papers in the map (data through 14 Oct 2026). Builds on 43 of its 164 references that are in the map. First posted on arXiv 11 Mar 2025.
Builds on
43 of 164 references.
References · 43
- 2023GPT-4 Technical Reportcited by 18,396
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2017Deep reinforcement learning from human preferencescited by 3,912
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,224
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 3,080
- 2024OpenVLA: An Open-Source Vision-Language-Action Modelcited by 2,887
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,348
- 2023PaLM-E: An Embodied Multimodal Language Modelcited by 2,071
31 more
- 2016Concrete Problems in AI Safetycited by 1,642
- 2022Code as Policies: Language Model Programs for Embodied Controlcited by 1,210
- 2023PaLM 2 Technical Reportcited by 1,162
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 759
- 2022Socratic Models: Composing Zero-Shot Multimodal Reasoning with Languagecited by 513
- 2022VIMA: General Robot Manipulation with Multimodal Promptscited by 407
- 2023Robots That Ask For Help: Uncertainty Alignment for Large Language Model Plannerscited by 308
- 2023Zero-Shot Robotic Manipulation with Pretrained Image-Editing Diffusion Modelscited by 269
- 2023AI Alignment: A Comprehensive Surveycited by 263
- 2023Foundation Models in Robotics: Applications, Challenges, and the Futurecited by 216
- 2024PIVOT: Iterative Visual Prompting Elicits Actionable Knowledge for VLMscited by 190
- 2023Scaling Robot Learning with Semantically Imagined Experiencecited by 177
- 2023RT-Trajectory: Robotic Task Generalization via Hindsight Trajectory Sketchescited by 133
- 2024Collective Constitutional AI: Aligning a Language Model with Public Inputcited by 123
- 2023RoboVQA: Multimodal Long-Horizon Reasoning for Roboticscited by 120
- 2022DALL-E-Bot: Introducing Web-Scale Diffusion Models to Roboticscited by 106
- 2018Batch Active Preference-Based Learning of Reward Functionscited by 87
- 2022Few-Shot Preference Learning for Human-in-the-Loop RLcited by 87
- 2024AutoRT: Embodied Foundation Models for Large Scale Orchestration of Robotic Agentscited by 87
- 2023Inverse Preference Learning: Preference-based RL without a Reward Functioncited by 68
- 2024Real-Time Anomaly Detection and Reactive Planning with Large Language Modelscited by 68
- 2023Semantic Anomaly Detection with Large Language Modelscited by 53
- 2023Specific versus General Principles for Constitutional AIcited by 47
- 2024Embodied AI with Two Arms: Zero-shot Learning, Safety and Modularitycited by 19
- 2025Predictive Red Teaming: Breaking Policies Without Breaking Robotscited by 15
- 2022Robots Enact Malignant Stereotypescited by 14
- 2024IterAlign: Iterative Constitutional Alignment of Large Language Modelscited by 11
- 2024Risk-Calibrated Human-Robot Interaction via Set-Valued Intent Predictioncited by 9
- 2024ConstitutionalExperts: Training a Mixture of Principle-based Promptscited by 8
- 2024Updating Robot Safety Representations Online from Natural Language Feedbackcited by 8
- 2024Human-AI Safety: A Descendant of Generative AI and Control Systems Safetycited by 7
Built on by
Citing papers per year: 2025: 10; 2026: 23.
33 papers.
Sort:
By area:
- 2025Evaluating Gemini Robotics Policies in a Veo World Simulatorcited by 51
- 2025Can AI Perceive Physical Danger and Intervene?cited by 14
- 2026Vision-Language-Action Safety: Threats, Challenges, Evaluations, and Mechanismscited by 13
- 2026Safety in Embodied AI: A Survey of Risks, Attacks, and Defensescited by 7
- 2025Embodied AI: Emerging Risks and Opportunities for Policy Actioncited by 5
- 2025Constrained Decoding for Safe Robot Navigation Foundation Modelscited by 5
- 2026HomeGuard: VLM-based Embodied Safeguard for Identifying Contextual Risk in Household Taskcited by 5
- 2026Using large language models for embodied planning introduces systematic safety riskscited by 5
- 2026Contextual Safety Reasoning and Grounding for Open-World Robotscited by 4
- 2026EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agentscited by 3
- 2026ForesightSafety-VLA: A Unified Diagnostic Safety Benchmark for Vision-Language-Action Modelscited by 3
- 2025SENTINEL: A Multi-Level Formal Framework for Safety Evaluation of Foundation Model-based Embodied Agentscited by 2
21 more
- 2026RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agentscited by 2
- 2025Unfettered Forceful Skill Acquisition with Physical Reasoning and Coordinate Frame Labelingcited by 1
- 2025Human Centric General Physical Intelligence for Agile Manufacturing Automationcited by 1
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrailscited by 1
- 2026HomeSafe-Bench: Evaluating Vision-Language Models on Unsafe Action Detection for Embodied Agents in Household Scenarioscited by 1
- 2026SafetyALFRED: Evaluating Safety-Conscious Planning of Multimodal Large Language Modelscited by 1
- 2026EgoSafetyBench: A Diagnostic Egocentric Video Benchmark for Evaluating Embodied VLMs as Runtime Safety Guardscited by 1
- 2025On the Dual-Use Dilemma in Physical Reasoning and Forcecited by 0
- 2025Towards provable probabilistic safety for scalable embodied AI systemscited by 0
- 2026Specification-Aware Distribution Shaping for Robotics Foundation Modelscited by 0
- 2026REBAR: Reference Ethical Benchmark for Autonomy Readinesscited by 0
- 2026Probing Collision Grounding in Vision-Language Models for Safe Human-Robot Collaborationcited by 0
- 2026RobotValues: Evaluating Household Robots When Human Values Conflictcited by 0
- 2026VLESA: Vision-Language Embodied Safety Agent for Human Activity Monitoringcited by 0
- 2026MagicSim: A Unified Infrastructure for Executable Embodied Interactioncited by 0
- 2026When Words Are Safe But Actions Kill: Probing Physical Jailbreak Beyond Textual Jailbreak in Hidden-State Risk Spacecited by 0
- 2026RobotEQ-Video: A Video-Centric Benchmark for Social Proactive Intelligence with World-State Taxonomycited by 0
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directionscited by 0
- 2026PlanGuard: A Guardrail for Multi-Step Plan Safety in Embodied Agentscited by 0
- 2026Refusals That Bend: Measuring and Predicting Task Malleability in Embodied VLM Plannerscited by 0
- 2026Careful Judge: Safe and Efficient Human-AI Collaborative Decision Makingcited by 0
- 2026Careful Judge: Safe and Efficient Human-AI Collaborative Decision Making6 Oct 2026
- 2026Refusals That Bend: Measuring and Predicting Task Malleability in Embodied VLM Planners30 Sep 2026
- 2026PlanGuard: A Guardrail for Multi-Step Plan Safety in Embodied Agents26 Sep 2026
- 2026RobotEQ-Video: A Video-Centric Benchmark for Social Proactive Intelligence with World-State Taxonomy18 Sep 2026
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directions19 Aug 2026
- 2026When Words Are Safe But Actions Kill: Probing Physical Jailbreak Beyond Textual Jailbreak in Hidden-State Risk Space16 Jul 2026
- 2026EgoSafetyBench: A Diagnostic Egocentric Video Benchmark for Evaluating Embodied VLMs as Runtime Safety Guards30 Jun 2026
- 2026ForesightSafety-VLA: A Unified Diagnostic Safety Benchmark for Vision-Language-Action Models25 Jun 2026
- 2026MagicSim: A Unified Infrastructure for Executable Embodied Interaction16 Jun 2026
- 2026VLESA: Vision-Language Embodied Safety Agent for Human Activity Monitoring2 Jun 2026
- 2026RobotValues: Evaluating Household Robots When Human Values Conflict2 Jun 2026
- 2026Probing Collision Grounding in Vision-Language Models for Safe Human-Robot Collaboration29 May 2026
21 more
- 2026EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agents29 May 2026
- 2026RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agents19 May 2026
- 2026REBAR: Reference Ethical Benchmark for Autonomy Readiness18 May 2026
- 2026Vision-Language-Action Safety: Threats, Challenges, Evaluations, and Mechanisms26 Apr 2026
- 2026SafetyALFRED: Evaluating Safety-Conscious Planning of Multimodal Large Language Models21 Apr 2026
- 2026Using large language models for embodied planning introduces systematic safety risks20 Apr 2026
- 2026Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses28 Mar 2026
- 2026Specification-Aware Distribution Shaping for Robotics Foundation Models18 Mar 2026
- 2026HomeGuard: VLM-based Embodied Safeguard for Identifying Contextual Risk in Household Task15 Mar 2026
- 2026HomeSafe-Bench: Evaluating Vision-Language Models on Unsafe Action Detection for Embodied Agents in Household Scenarios12 Mar 2026
- 2026Contextual Safety Reasoning and Grounding for Open-World Robots23 Feb 2026
- 2025Evaluating Gemini Robotics Policies in a Veo World Simulator11 Dec 2025
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails15 Oct 2025
- 2025SENTINEL: A Multi-Level Formal Framework for Safety Evaluation of Foundation Model-based Embodied Agents14 Oct 2025
- 2025Can AI Perceive Physical Danger and Intervene?25 Sep 2025
- 2025Constrained Decoding for Safe Robot Navigation Foundation Models1 Sep 2025
- 2025Embodied AI: Emerging Risks and Opportunities for Policy Action28 Aug 2025
- 2025Human Centric General Physical Intelligence for Agile Manufacturing Automation16 Aug 2025
- 2025Towards provable probabilistic safety for scalable embodied AI systems5 Jun 2025
- 2025On the Dual-Use Dilemma in Physical Reasoning and Force24 May 2025
- 2025Unfettered Forceful Skill Acquisition with Physical Reasoning and Coordinate Frame Labeling14 May 2025
- 2026HomeGuard: VLM-based Embodied Safeguard for Identifying Contextual Risk in Household Taskcited by 5
- 2026RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agentscited by 2
- 2026HomeSafe-Bench: Evaluating Vision-Language Models on Unsafe Action Detection for Embodied Agents in Household Scenarioscited by 1
- 2026SafetyALFRED: Evaluating Safety-Conscious Planning of Multimodal Large Language Modelscited by 1
- 2026EgoSafetyBench: A Diagnostic Egocentric Video Benchmark for Evaluating Embodied VLMs as Runtime Safety Guardscited by 1
- 2026Probing Collision Grounding in Vision-Language Models for Safe Human-Robot Collaborationcited by 0
- 2026Refusals That Bend: Measuring and Predicting Task Malleability in Embodied VLM Plannerscited by 0
- 2026Refusals That Bend: Measuring and Predicting Task Malleability in Embodied VLM Planners30 Sep 2026
- 2026EgoSafetyBench: A Diagnostic Egocentric Video Benchmark for Evaluating Embodied VLMs as Runtime Safety Guards30 Jun 2026
- 2026Probing Collision Grounding in Vision-Language Models for Safe Human-Robot Collaboration29 May 2026
- 2026RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agents19 May 2026
- 2026SafetyALFRED: Evaluating Safety-Conscious Planning of Multimodal Large Language Models21 Apr 2026
- 2026HomeGuard: VLM-based Embodied Safeguard for Identifying Contextual Risk in Household Task15 Mar 2026
- 2026HomeSafe-Bench: Evaluating Vision-Language Models on Unsafe Action Detection for Embodied Agents in Household Scenarios12 Mar 2026
- 2026Safety in Embodied AI: A Survey of Risks, Attacks, and Defensescited by 7
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrailscited by 1
- 2026REBAR: Reference Ethical Benchmark for Autonomy Readinesscited by 0
- 2026When Words Are Safe But Actions Kill: Probing Physical Jailbreak Beyond Textual Jailbreak in Hidden-State Risk Spacecited by 0
- 2026PlanGuard: A Guardrail for Multi-Step Plan Safety in Embodied Agentscited by 0
- 2026PlanGuard: A Guardrail for Multi-Step Plan Safety in Embodied Agents26 Sep 2026
- 2026When Words Are Safe But Actions Kill: Probing Physical Jailbreak Beyond Textual Jailbreak in Hidden-State Risk Space16 Jul 2026
- 2026REBAR: Reference Ethical Benchmark for Autonomy Readiness18 May 2026
- 2026Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses28 Mar 2026
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails15 Oct 2025
- 2026EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agentscited by 3
- 2025SENTINEL: A Multi-Level Formal Framework for Safety Evaluation of Foundation Model-based Embodied Agentscited by 2
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directionscited by 0
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directions19 Aug 2026
- 2026EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agents29 May 2026
- 2025SENTINEL: A Multi-Level Formal Framework for Safety Evaluation of Foundation Model-based Embodied Agents14 Oct 2025
- 2025Evaluating Gemini Robotics Policies in a Veo World Simulatorcited by 51
- 2025Evaluating Gemini Robotics Policies in a Veo World Simulator11 Dec 2025
- 2025Can AI Perceive Physical Danger and Intervene?cited by 14
- 2025Embodied AI: Emerging Risks and Opportunities for Policy Actioncited by 5
- 2025Constrained Decoding for Safe Robot Navigation Foundation Modelscited by 5
- 2026Using large language models for embodied planning introduces systematic safety riskscited by 5
- 2025Towards provable probabilistic safety for scalable embodied AI systemscited by 0
- 2026Specification-Aware Distribution Shaping for Robotics Foundation Modelscited by 0
- 2026RobotValues: Evaluating Household Robots When Human Values Conflictcited by 0
- 2026VLESA: Vision-Language Embodied Safety Agent for Human Activity Monitoringcited by 0
- 2026MagicSim: A Unified Infrastructure for Executable Embodied Interactioncited by 0
- 2026RobotEQ-Video: A Video-Centric Benchmark for Social Proactive Intelligence with World-State Taxonomycited by 0
- 2026Careful Judge: Safe and Efficient Human-AI Collaborative Decision Makingcited by 0
- 2026Careful Judge: Safe and Efficient Human-AI Collaborative Decision Making6 Oct 2026
- 2026RobotEQ-Video: A Video-Centric Benchmark for Social Proactive Intelligence with World-State Taxonomy18 Sep 2026
- 2026MagicSim: A Unified Infrastructure for Executable Embodied Interaction16 Jun 2026
- 2026VLESA: Vision-Language Embodied Safety Agent for Human Activity Monitoring2 Jun 2026
- 2026RobotValues: Evaluating Household Robots When Human Values Conflict2 Jun 2026
- 2026Using large language models for embodied planning introduces systematic safety risks20 Apr 2026
- 2026Specification-Aware Distribution Shaping for Robotics Foundation Models18 Mar 2026
- 2025Can AI Perceive Physical Danger and Intervene?25 Sep 2025
- 2025Constrained Decoding for Safe Robot Navigation Foundation Models1 Sep 2025
- 2025Embodied AI: Emerging Risks and Opportunities for Policy Action28 Aug 2025
- 2025Towards provable probabilistic safety for scalable embodied AI systems5 Jun 2025
Similar, not cited
Close in wording, no citation either way
- 2024Semantically Safe Robot Manipulation: From Semantic Scene Understanding to Motion Safeguards
- 2026HazardArena: Evaluating Semantic Safety in Vision-Language-Action Models
- 2026SafeRelBench: A Spatial-Relation-Aware Benchmark for Process-Level Safety in VLM-Driven Embodied Agents
- 2025ANNIE: Be Careful of Your Robots
- 2026Safe Task Planning with Long-Term Graph Memory for Embodied Agents
- 2025AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions
- 2026When Helpers Become Hazards: A Benchmark for Analyzing Multimodal LLM-Powered Safety in Daily Life
- 2025Safety Guardrails for LLM-Enabled Robots