Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failures
On the map: World models → Latent dynamics models and model-based RL
Abstract (arXiv)
Recent advances in generative world models have enabled classical safe control methods, such as Hamilton-Jacobi (HJ) reachability, to generalize to complex robotic systems operating directly from high-dimensional sensor observations. However, obtaining comprehensive coverage of all safety-critical scenarios during world model training is extremely challenging. As a result, latent safety filters built on top of these models may miss novel hazards and even fail to prevent known ones, overconfidently misclassifying risky out-of-distribution (OOD) situations as safe. To address this, we introduce an uncertainty-aware latent safety filter that proactively steers robots away from both known and unseen failures. Our key idea is to use the world model's epistemic uncertainty as a proxy for identifying unseen potential hazards. We propose a principled method to detect OOD world model predictions by calibrating an uncertainty threshold via conformal prediction. By performing reachability analysis in an augmented state space-spanning both the latent representation and the epistemic uncertainty-we synthesize a latent safety filter that can reliably safeguard arbitrary policies from both known and unseen safety hazards. In simulation and hardware experiments on vision-based control tasks with a Franka manipulator, we show that our uncertainty-aware safety filter preemptively detects potential unsafe scenarios and reliably proposes safe, in-distribution actions. Video results can be found on the project website at https://cmu-intentlab.github.io/UNISafe
Key facts. Cited by 33 papers in the map (data through 14 Oct 2026). Placed in Latent dynamics models and model-based RL, one of 11 directions in World models. Builds on 70 of its 84 references that are in the map. First posted on arXiv 1 May 2025.
Builds on
70 of 84 references.
Closest ancestors · 6
Same direction, newest first
- 2025Generalizing Safety Beyond Collision-Avoidance via Latent-Space Reachability Analysis2 Feb
- 2022Transformers are Sample-Efficient World Models1 Sep
- 2020Mastering Atari with Discrete World Models5 Oct
- 2020Planning to Explore via Self-Supervised World Models12 May
- 2019Dream to Control: Learning Behaviors by Latent Imagination3 Dec
- 2018Deep Reinforcement Learning in a Handful of Trials using Probabilistic Dynamics Models30 May
Other references · 64
- 2018Soft Actor-Critic: Off-Policy Maximum Entropy Deep Reinforcement Learning with a Stochastic Actorcited by 4,885
- 2023Diffusion Policy: Visuomotor Policy Learning via Action Diffusioncited by 2,838
- 2020Offline Reinforcement Learning: Tutorial, Review, and Perspectives on Open Problemscited by 1,920
- 2020Conservative Q-Learning for Offline Reinforcement Learningcited by 1,809
- 2015Deep Reinforcement Learning with Double Q-learningcited by 1,745
- 2020Energy-based Out-of-distribution Detectioncited by 1,299
- 2018Learning Latent Dynamics for Planning from Pixelscited by 1,264
- 2021Isaac Gym: High Performance GPU-Based Physics Simulation For Robot Learningcited by 998
- 2025Cosmos World Foundation Model Platform for Physical AIcited by 864
- 2021Generalized Out-of-Distribution Detection: A Surveycited by 802
- 2019Neural Spline Flowscited by 596
- 2020MOReL : Model-Based Offline Reinforcement Learningcited by 590
38 more
- 2020A Unifying Review of Deep and Shallow Anomaly Detectioncited by 425
- 2024Universal Manipulation Interface: In-The-Wild Robot Teaching Without In-The-Wild Robotscited by 394
- 2024DINO-WM: World Models on Pre-trained Visual Features enable Zero-shot Planningcited by 386
- 2021COMBO: Conservative Offline Model-Based Policy Optimizationcited by 370
- 2020Is Pessimism Provably Efficient for Offline RL?cited by 364
- 2023Robots That Ask For Help: Uncertainty Alignment for Large Language Model Plannerscited by 308
- 2016Control Barrier Function Based Quadratic Programs for Safety Critical Systemscited by 287
- 2020Recovery RL: Safe Reinforcement Learning with Learned Recovery Zonescited by 175
- 2018Sample-Efficient Reinforcement Learning with Stochastic Ensemble Value Expansioncited by 168
- 2017A General Safety Framework for Learning-Based Control in Uncertain Robotic Systemscited by 163
- 2021A Unified Survey on Anomaly, Novelty, Open-Set, and Out-of-Distribution Detection: Solutions and Future Challengescited by 154
- 2021Discovering and Achieving Goals via World Modelscited by 131
- 2022Pessimistic Bootstrapping for Uncertainty-Driven Offline Reinforcement Learningcited by 125
- 2022RAMBO-RL: Robust Adversarial Model-Based Offline Reinforcement Learningcited by 115
- 2023Class-Conditional Conformal Prediction with Many Classescited by 109
- 2018Model-Based Active Explorationcited by 105
- 2020Offline Reinforcement Learning from Images with Latent Space Modelscited by 95
- 2020Learning Control Barrier Functions from Expert Demonstrationscited by 92
- 2020DeepReach: A Deep Learning Approach to High-Dimensional Reachabilitycited by 91
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 88
- 2024Agile But Safe: Learning Collision-Free High-Speed Legged Locomotioncited by 73
- 2024Unpacking Failure Modes of Generative Policies: Runtime Monitoring of Consistency and Progresscited by 69
- 2024Real-Time Anomaly Detection and Reactive Planning with Large Language Modelscited by 68
- 2021Risk-Averse Offline Reinforcement Learningcited by 65
- 2021Error-Aware Imitation Learning from Teleoperation Data for Mobile Manipulationcited by 59
- 2025Can We Detect Failures Without Failure Data? Uncertainty-Aware Runtime Failure Detection for Imitation Learning Policiescited by 52
- 2021Safety and Liveness Guarantees through Reach-Avoid Reinforcement Learningcited by 49
- 2023Model-Based Runtime Monitoring with Interactive Imitation Learningcited by 38
- 2023Iterative Reachability Estimation for Safe Reinforcement Learningcited by 37
- 2020Safe Robot Navigation via Multi-Modal Anomaly Detectioncited by 34
- 2022A System-Level View on Out-of-Distribution Data in Roboticscited by 33
- 2022Lyapunov Density Models: Constraining Distribution Shift in Learning-Based Controlcited by 28
- 2022ISAACS: Iterative Soft Adversarial Actor-Critic for Safetycited by 28
- 2022Sim-to-Lab-to-Real: Safe Reinforcement Learning with Shielding and Generalization Guaranteescited by 27
- 2024ActSafe: Active Exploration with Safety Constraints for Reinforcement Learningcited by 23
- 2022Self-Supervised Traversability Prediction by Learning to Reconstruct Safe Terraincited by 22
- 2021Learning Robust Output Control Barrier Functions from Safe Expert Demonstrationscited by 20
- 2022Back to the Manifold: Recovering from Out-of-Distribution Statescited by 20
50 most cited of 64 All 64 (JSON)
Built on by
Citing papers per year: 2025: 6; 2026: 27.
33 papers.
Sort:
By area:
- 2026Foundational World Models Accurately Detect Bimanual Manipulator Failurescited by 11
- 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraintscited by 9
- 2026Hide-and-Seek in Trajectories: Discovering Failure Signals for VLA Runtime Monitoringcited by 9
- 2026RC-NF: Robot-Conditioned Normalizing Flow for Real-Time Anomaly Detection in Robotic Manipulationcited by 8
- 2025AnySafe: Adapting Latent Safety Filters at Runtime via Safety Constraint Parameterization in the Latent Spacecited by 7
- 2026WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agentscited by 7
- 2025Designing Latent Safety Filters using Pre-Trained Vision Modelscited by 5
- 2026Biased Dreams: Limitations to Epistemic Uncertainty Quantification in Latent Dynamics Modelscited by 5
- 2025Statistically Assuring Safety of Control Systems using Ensembles of Safety Filters and Conformal Predictioncited by 4
- 2026Pixels to Proofs: Probabilistically-Safe Latent World Model Control via Parallel Conformal Robust MPCcited by 4
- 2026Failing Forward: Adaptive Failure-Informed Learning for Vision-Language-Action Modelscited by 3
- 2026Safe Control using Learned Safety Filters and Adaptive Conformal Inferencecited by 2
21 more
- 2026Early Warning Signals for OpenVLA Failure under Visual Distribution Shiftcited by 2
- 2026Uncertainty-Aware World Model for Aerial Image-Goal Navigationcited by 2
- 2025How Well Do Latent World Models Understand Partially Observable Safety Constraints?cited by 1
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrailscited by 1
- 2026ELVIS: Ensemble-Calibrated Latent Imagination for Long-Horizon Visual MPCcited by 1
- 2026Latent Q-Barrier Shielding for Safe In-Context Reinforcement Learningcited by 1
- 2026StressDream: Steering Video World Models for Robust Policy Evaluation and Improvementcited by 1
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Roboticscited by 1
- 2026Breaking the Epistemic Trap: Active Perception Under Compound Uncertaintycited by 0
- 2026Sensitivity Shaping for Latent Modelingcited by 0
- 2026UBP2: Uncertainty-Balanced Preference Planning for Efficient Preference-based Reinforcement Learningcited by 0
- 2026A Unified Perspective on Conformal Prediction and Wasserstein Distributionally Robust Optimization for Uncertainty Quantificationcited by 0
- 2026Toward Unified Robot Learning: Bridging Representation, Vision-Language-Action, and World Modelscited by 0
- 2026No Free Checker: A Survey of Verifiers for Robot Policiescited by 0
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policiescited by 0
- 2026Turning Safety into Competence: Minimally Exploitable Robot Policies via Safety-Filtered Reinforcement Learningcited by 0
- 2026CrossSafe: Towards Cross-Embodiment Latent Safety Filterscited by 0
- 2026Behavioral Monitoring of JEPA World Models with Jacobian Centroidscited by 0
- 2026When World Models Lie: Adaptive Safety Analysis Under Wrong Imaginationscited by 0
- 2026DODGER: Safety-Guided Reinforcement Learning for Robot Navigation Among Dynamic Obstaclescited by 0
- 2026Latent Safety Filters: When a Lossy Encoder Admits a Transferable Certificatecited by 0
- 2026Latent Safety Filters: When a Lossy Encoder Admits a Transferable Certificate3 Oct 2026
- 2026DODGER: Safety-Guided Reinforcement Learning for Robot Navigation Among Dynamic Obstacles30 Sep 2026
- 2026When World Models Lie: Adaptive Safety Analysis Under Wrong Imaginations28 Sep 2026
- 2026Behavioral Monitoring of JEPA World Models with Jacobian Centroids27 Sep 2026
- 2026CrossSafe: Towards Cross-Embodiment Latent Safety Filters24 Sep 2026
- 2026Turning Safety into Competence: Minimally Exploitable Robot Policies via Safety-Filtered Reinforcement Learning23 Sep 2026
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policies18 Sep 2026
- 2026No Free Checker: A Survey of Verifiers for Robot Policies8 Sep 2026
- 2026Toward Unified Robot Learning: Bridging Representation, Vision-Language-Action, and World Models3 Sep 2026
- 2026A Unified Perspective on Conformal Prediction and Wasserstein Distributionally Robust Optimization for Uncertainty Quantification30 Aug 2026
- 2026Uncertainty-Aware World Model for Aerial Image-Goal Navigation6 Aug 2026
- 2026Early Warning Signals for OpenVLA Failure under Visual Distribution Shift29 Jun 2026
21 more
- 2026UBP2: Uncertainty-Balanced Preference Planning for Efficient Preference-based Reinforcement Learning17 Jun 2026
- 2026Pixels to Proofs: Probabilistically-Safe Latent World Model Control via Parallel Conformal Robust MPC14 Jun 2026
- 2026Sensitivity Shaping for Latent Modeling12 Jun 2026
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Robotics1 Jun 2026
- 2026StressDream: Steering Video World Models for Robust Policy Evaluation and Improvement29 May 2026
- 2026Hide-and-Seek in Trajectories: Discovering Failure Signals for VLA Runtime Monitoring29 May 2026
- 2026Breaking the Epistemic Trap: Active Perception Under Compound Uncertainty26 May 2026
- 2026Latent Q-Barrier Shielding for Safe In-Context Reinforcement Learning24 May 2026
- 2026WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agents22 May 2026
- 2026Failing Forward: Adaptive Failure-Informed Learning for Vision-Language-Action Models8 May 2026
- 2026ELVIS: Ensemble-Calibrated Latent Imagination for Long-Horizon Visual MPC6 May 2026
- 2026Biased Dreams: Limitations to Epistemic Uncertainty Quantification in Latent Dynamics Models28 Apr 2026
- 2026Safe Control using Learned Safety Filters and Adaptive Conformal Inference20 Apr 2026
- 2026RC-NF: Robot-Conditioned Normalizing Flow for Real-Time Anomaly Detection in Robotic Manipulation11 Mar 2026
- 2026Foundational World Models Accurately Detect Bimanual Manipulator Failures7 Mar 2026
- 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraints23 Nov 2025
- 2025Statistically Assuring Safety of Control Systems using Ensembles of Safety Filters and Conformal Prediction11 Nov 2025
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails15 Oct 2025
- 2025How Well Do Latent World Models Understand Partially Observable Safety Constraints?7 Oct 2025
- 2025AnySafe: Adapting Latent Safety Filters at Runtime via Safety Constraint Parameterization in the Latent Space23 Sep 2025
- 2025Designing Latent Safety Filters using Pre-Trained Vision Models18 Sep 2025
- 2026Foundational World Models Accurately Detect Bimanual Manipulator Failurescited by 11
- 2025AnySafe: Adapting Latent Safety Filters at Runtime via Safety Constraint Parameterization in the Latent Spacecited by 7
- 2026WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agentscited by 7
- 2025Designing Latent Safety Filters using Pre-Trained Vision Modelscited by 5
- 2026Pixels to Proofs: Probabilistically-Safe Latent World Model Control via Parallel Conformal Robust MPCcited by 4
- 2026Uncertainty-Aware World Model for Aerial Image-Goal Navigationcited by 2
- 2025How Well Do Latent World Models Understand Partially Observable Safety Constraints?cited by 1
- 2026StressDream: Steering Video World Models for Robust Policy Evaluation and Improvementcited by 1
- 2026Toward Unified Robot Learning: Bridging Representation, Vision-Language-Action, and World Modelscited by 0
- 2026Behavioral Monitoring of JEPA World Models with Jacobian Centroidscited by 0
- 2026When World Models Lie: Adaptive Safety Analysis Under Wrong Imaginationscited by 0
- 2026When World Models Lie: Adaptive Safety Analysis Under Wrong Imaginations28 Sep 2026
- 2026Behavioral Monitoring of JEPA World Models with Jacobian Centroids27 Sep 2026
- 2026Toward Unified Robot Learning: Bridging Representation, Vision-Language-Action, and World Models3 Sep 2026
- 2026Uncertainty-Aware World Model for Aerial Image-Goal Navigation6 Aug 2026
- 2026Pixels to Proofs: Probabilistically-Safe Latent World Model Control via Parallel Conformal Robust MPC14 Jun 2026
- 2026StressDream: Steering Video World Models for Robust Policy Evaluation and Improvement29 May 2026
- 2026WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agents22 May 2026
- 2026Foundational World Models Accurately Detect Bimanual Manipulator Failures7 Mar 2026
- 2025How Well Do Latent World Models Understand Partially Observable Safety Constraints?7 Oct 2025
- 2025AnySafe: Adapting Latent Safety Filters at Runtime via Safety Constraint Parameterization in the Latent Space23 Sep 2025
- 2025Designing Latent Safety Filters using Pre-Trained Vision Models18 Sep 2025
- 2026Biased Dreams: Limitations to Epistemic Uncertainty Quantification in Latent Dynamics Modelscited by 5
- 2026ELVIS: Ensemble-Calibrated Latent Imagination for Long-Horizon Visual MPCcited by 1
- 2026Latent Q-Barrier Shielding for Safe In-Context Reinforcement Learningcited by 1
- 2026Breaking the Epistemic Trap: Active Perception Under Compound Uncertaintycited by 0
- 2026Turning Safety into Competence: Minimally Exploitable Robot Policies via Safety-Filtered Reinforcement Learningcited by 0
- 2026DODGER: Safety-Guided Reinforcement Learning for Robot Navigation Among Dynamic Obstaclescited by 0
- 2026DODGER: Safety-Guided Reinforcement Learning for Robot Navigation Among Dynamic Obstacles30 Sep 2026
- 2026Turning Safety into Competence: Minimally Exploitable Robot Policies via Safety-Filtered Reinforcement Learning23 Sep 2026
- 2026Breaking the Epistemic Trap: Active Perception Under Compound Uncertainty26 May 2026
- 2026Latent Q-Barrier Shielding for Safe In-Context Reinforcement Learning24 May 2026
- 2026ELVIS: Ensemble-Calibrated Latent Imagination for Long-Horizon Visual MPC6 May 2026
- 2026Biased Dreams: Limitations to Epistemic Uncertainty Quantification in Latent Dynamics Models28 Apr 2026
- 2026Hide-and-Seek in Trajectories: Discovering Failure Signals for VLA Runtime Monitoringcited by 9
- 2026Failing Forward: Adaptive Failure-Informed Learning for Vision-Language-Action Modelscited by 3
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policiescited by 0
- 2026CrossSafe: Towards Cross-Embodiment Latent Safety Filterscited by 0
- 2026CrossSafe: Towards Cross-Embodiment Latent Safety Filters24 Sep 2026
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policies18 Sep 2026
- 2026Hide-and-Seek in Trajectories: Discovering Failure Signals for VLA Runtime Monitoring29 May 2026
- 2026Failing Forward: Adaptive Failure-Informed Learning for Vision-Language-Action Models8 May 2026
- 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraintscited by 9
- 2026RC-NF: Robot-Conditioned Normalizing Flow for Real-Time Anomaly Detection in Robotic Manipulationcited by 8
- 2025Statistically Assuring Safety of Control Systems using Ensembles of Safety Filters and Conformal Predictioncited by 4
- 2026Safe Control using Learned Safety Filters and Adaptive Conformal Inferencecited by 2
- 2026Early Warning Signals for OpenVLA Failure under Visual Distribution Shiftcited by 2
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Roboticscited by 1
- 2026Sensitivity Shaping for Latent Modelingcited by 0
- 2026A Unified Perspective on Conformal Prediction and Wasserstein Distributionally Robust Optimization for Uncertainty Quantificationcited by 0
- 2026No Free Checker: A Survey of Verifiers for Robot Policiescited by 0
- 2026Latent Safety Filters: When a Lossy Encoder Admits a Transferable Certificatecited by 0
- 2026Latent Safety Filters: When a Lossy Encoder Admits a Transferable Certificate3 Oct 2026
- 2026No Free Checker: A Survey of Verifiers for Robot Policies8 Sep 2026
- 2026A Unified Perspective on Conformal Prediction and Wasserstein Distributionally Robust Optimization for Uncertainty Quantification30 Aug 2026
- 2026Early Warning Signals for OpenVLA Failure under Visual Distribution Shift29 Jun 2026
- 2026Sensitivity Shaping for Latent Modeling12 Jun 2026
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Robotics1 Jun 2026
- 2026Safe Control using Learned Safety Filters and Adaptive Conformal Inference20 Apr 2026
- 2026RC-NF: Robot-Conditioned Normalizing Flow for Real-Time Anomaly Detection in Robotic Manipulation11 Mar 2026
- 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraints23 Nov 2025
- 2025Statistically Assuring Safety of Control Systems using Ensembles of Safety Filters and Conformal Prediction11 Nov 2025
Similar, not cited
Close in wording, no citation either way
- 2026Modeling Latent Disturbances for Robust Decision-Making in World Models
- 2024Zero-shot Safety Prediction for Autonomous Robots with Foundation World Models
- 2026Uncertainty-Aware Predictive Safety Filters for Probabilistic Neural Network Dynamics
- 2025How Safe Will I Be Given What I Saw? Calibrated Prediction of Safety Chances for Image-Controlled Autonomy
- 2023How Safe Am I Given What I See? Calibrated Prediction of Safety Chances for Image-Controlled Autonomy
- 2025Feasibility-Aware Pessimistic Estimation: Toward Long-Horizon Safety in Offline RL
- 2026Calibrated Predictive Safety for Heterogeneous Robots: An Action-Conditioned JEPA Framework with Model-Based Safety Shields ↗
- 2026λ-Reachability: Geometric-Horizon Safety Bellman Equations for Humanoid Safety