mlsanityData to 14 Oct 2026

Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failures

arXiv 2505.00779 ↗First posted 1 May 2025cs.RO cs.LG cs.SYcited by 33

On the map: World models → Latent dynamics models and model-based RL

Abstract (arXiv)

Recent advances in generative world models have enabled classical safe control methods, such as Hamilton-Jacobi (HJ) reachability, to generalize to complex robotic systems operating directly from high-dimensional sensor observations. However, obtaining comprehensive coverage of all safety-critical scenarios during world model training is extremely challenging. As a result, latent safety filters built on top of these models may miss novel hazards and even fail to prevent known ones, overconfidently misclassifying risky out-of-distribution (OOD) situations as safe. To address this, we introduce an uncertainty-aware latent safety filter that proactively steers robots away from both known and unseen failures. Our key idea is to use the world model's epistemic uncertainty as a proxy for identifying unseen potential hazards. We propose a principled method to detect OOD world model predictions by calibrating an uncertainty threshold via conformal prediction. By performing reachability analysis in an augmented state space-spanning both the latent representation and the epistemic uncertainty-we synthesize a latent safety filter that can reliably safeguard arbitrary policies from both known and unseen safety hazards. In simulation and hardware experiments on vision-based control tasks with a Franka manipulator, we show that our uncertainty-aware safety filter preemptively detects potential unsafe scenarios and reliably proposes safe, in-distribution actions. Video results can be found on the project website at https://cmu-intentlab.github.io/UNISafe

Key facts. Cited by 33 papers in the map (data through 14 Oct 2026). Placed in Latent dynamics models and model-based RL, one of 11 directions in World models. Builds on 70 of its 84 references that are in the map. First posted on arXiv 1 May 2025.

Builds on

70 of 84 references.

Closest ancestors · 6

Same direction, newest first

  1. 2025Generalizing Safety Beyond Collision-Avoidance via Latent-Space Reachability Analysis2 Feb
  2. 2022Transformers are Sample-Efficient World Models1 Sep
  3. 2020Mastering Atari with Discrete World Models5 Oct
  4. 2020Planning to Explore via Self-Supervised World Models12 May
  5. 2019Dream to Control: Learning Behaviors by Latent Imagination3 Dec
  6. 2018Deep Reinforcement Learning in a Handful of Trials using Probabilistic Dynamics Models30 May

Other references · 64

  1. 2018Soft Actor-Critic: Off-Policy Maximum Entropy Deep Reinforcement Learning with a Stochastic Actorcited by 4,885
  2. 2023Diffusion Policy: Visuomotor Policy Learning via Action Diffusioncited by 2,838
  3. 2020Offline Reinforcement Learning: Tutorial, Review, and Perspectives on Open Problemscited by 1,920
  4. 2020Conservative Q-Learning for Offline Reinforcement Learningcited by 1,809
  5. 2015Deep Reinforcement Learning with Double Q-learningcited by 1,745
  6. 2020Energy-based Out-of-distribution Detectioncited by 1,299
  7. 2018Learning Latent Dynamics for Planning from Pixelscited by 1,264
  8. 2021Isaac Gym: High Performance GPU-Based Physics Simulation For Robot Learningcited by 998
  9. 2025Cosmos World Foundation Model Platform for Physical AIcited by 864
  10. 2021Generalized Out-of-Distribution Detection: A Surveycited by 802
  11. 2019Neural Spline Flowscited by 596
  12. 2020MOReL : Model-Based Offline Reinforcement Learningcited by 590
38 more
  1. 2020A Unifying Review of Deep and Shallow Anomaly Detectioncited by 425
  2. 2024Universal Manipulation Interface: In-The-Wild Robot Teaching Without In-The-Wild Robotscited by 394
  3. 2024DINO-WM: World Models on Pre-trained Visual Features enable Zero-shot Planningcited by 386
  4. 2021COMBO: Conservative Offline Model-Based Policy Optimizationcited by 370
  5. 2020Is Pessimism Provably Efficient for Offline RL?cited by 364
  6. 2023Robots That Ask For Help: Uncertainty Alignment for Large Language Model Plannerscited by 308
  7. 2016Control Barrier Function Based Quadratic Programs for Safety Critical Systemscited by 287
  8. 2020Recovery RL: Safe Reinforcement Learning with Learned Recovery Zonescited by 175
  9. 2018Sample-Efficient Reinforcement Learning with Stochastic Ensemble Value Expansioncited by 168
  10. 2017A General Safety Framework for Learning-Based Control in Uncertain Robotic Systemscited by 163
  11. 2021A Unified Survey on Anomaly, Novelty, Open-Set, and Out-of-Distribution Detection: Solutions and Future Challengescited by 154
  12. 2021Discovering and Achieving Goals via World Modelscited by 131
  13. 2022Pessimistic Bootstrapping for Uncertainty-Driven Offline Reinforcement Learningcited by 125
  14. 2022RAMBO-RL: Robust Adversarial Model-Based Offline Reinforcement Learningcited by 115
  15. 2023Class-Conditional Conformal Prediction with Many Classescited by 109
  16. 2018Model-Based Active Explorationcited by 105
  17. 2020Offline Reinforcement Learning from Images with Latent Space Modelscited by 95
  18. 2020Learning Control Barrier Functions from Expert Demonstrationscited by 92
  19. 2020DeepReach: A Deep Learning Approach to High-Dimensional Reachabilitycited by 91
  20. 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 88
  21. 2024Agile But Safe: Learning Collision-Free High-Speed Legged Locomotioncited by 73
  22. 2024Unpacking Failure Modes of Generative Policies: Runtime Monitoring of Consistency and Progresscited by 69
  23. 2024Real-Time Anomaly Detection and Reactive Planning with Large Language Modelscited by 68
  24. 2021Risk-Averse Offline Reinforcement Learningcited by 65
  25. 2021Error-Aware Imitation Learning from Teleoperation Data for Mobile Manipulationcited by 59
  26. 2025Can We Detect Failures Without Failure Data? Uncertainty-Aware Runtime Failure Detection for Imitation Learning Policiescited by 52
  27. 2021Safety and Liveness Guarantees through Reach-Avoid Reinforcement Learningcited by 49
  28. 2023Model-Based Runtime Monitoring with Interactive Imitation Learningcited by 38
  29. 2023Iterative Reachability Estimation for Safe Reinforcement Learningcited by 37
  30. 2020Safe Robot Navigation via Multi-Modal Anomaly Detectioncited by 34
  31. 2022A System-Level View on Out-of-Distribution Data in Roboticscited by 33
  32. 2022Lyapunov Density Models: Constraining Distribution Shift in Learning-Based Controlcited by 28
  33. 2022ISAACS: Iterative Soft Adversarial Actor-Critic for Safetycited by 28
  34. 2022Sim-to-Lab-to-Real: Safe Reinforcement Learning with Shielding and Generalization Guaranteescited by 27
  35. 2024ActSafe: Active Exploration with Safety Constraints for Reinforcement Learningcited by 23
  36. 2022Self-Supervised Traversability Prediction by Learning to Reconstruct Safe Terraincited by 22
  37. 2021Learning Robust Output Control Barrier Functions from Safe Expert Demonstrationscited by 20
  38. 2022Back to the Manifold: Recovering from Out-of-Distribution Statescited by 20

50 most cited of 64 All 64 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 6; 2026: 27.

33 papers.

Sort:

By area:

  1. 2026Foundational World Models Accurately Detect Bimanual Manipulator Failurescited by 11
  2. 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraintscited by 9
  3. 2026Hide-and-Seek in Trajectories: Discovering Failure Signals for VLA Runtime Monitoringcited by 9
  4. 2026RC-NF: Robot-Conditioned Normalizing Flow for Real-Time Anomaly Detection in Robotic Manipulationcited by 8
  5. 2025AnySafe: Adapting Latent Safety Filters at Runtime via Safety Constraint Parameterization in the Latent Spacecited by 7
  6. 2026WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agentscited by 7
  7. 2025Designing Latent Safety Filters using Pre-Trained Vision Modelscited by 5
  8. 2026Biased Dreams: Limitations to Epistemic Uncertainty Quantification in Latent Dynamics Modelscited by 5
  9. 2025Statistically Assuring Safety of Control Systems using Ensembles of Safety Filters and Conformal Predictioncited by 4
  10. 2026Pixels to Proofs: Probabilistically-Safe Latent World Model Control via Parallel Conformal Robust MPCcited by 4
  11. 2026Failing Forward: Adaptive Failure-Informed Learning for Vision-Language-Action Modelscited by 3
  12. 2026Safe Control using Learned Safety Filters and Adaptive Conformal Inferencecited by 2
21 more
  1. 2026Early Warning Signals for OpenVLA Failure under Visual Distribution Shiftcited by 2
  2. 2026Uncertainty-Aware World Model for Aerial Image-Goal Navigationcited by 2
  3. 2025How Well Do Latent World Models Understand Partially Observable Safety Constraints?cited by 1
  4. 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrailscited by 1
  5. 2026ELVIS: Ensemble-Calibrated Latent Imagination for Long-Horizon Visual MPCcited by 1
  6. 2026Latent Q-Barrier Shielding for Safe In-Context Reinforcement Learningcited by 1
  7. 2026StressDream: Steering Video World Models for Robust Policy Evaluation and Improvementcited by 1
  8. 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Roboticscited by 1
  9. 2026Breaking the Epistemic Trap: Active Perception Under Compound Uncertaintycited by 0
  10. 2026Sensitivity Shaping for Latent Modelingcited by 0
  11. 2026UBP2: Uncertainty-Balanced Preference Planning for Efficient Preference-based Reinforcement Learningcited by 0
  12. 2026A Unified Perspective on Conformal Prediction and Wasserstein Distributionally Robust Optimization for Uncertainty Quantificationcited by 0
  13. 2026Toward Unified Robot Learning: Bridging Representation, Vision-Language-Action, and World Modelscited by 0
  14. 2026No Free Checker: A Survey of Verifiers for Robot Policiescited by 0
  15. 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policiescited by 0
  16. 2026Turning Safety into Competence: Minimally Exploitable Robot Policies via Safety-Filtered Reinforcement Learningcited by 0
  17. 2026CrossSafe: Towards Cross-Embodiment Latent Safety Filterscited by 0
  18. 2026Behavioral Monitoring of JEPA World Models with Jacobian Centroidscited by 0
  19. 2026When World Models Lie: Adaptive Safety Analysis Under Wrong Imaginationscited by 0
  20. 2026DODGER: Safety-Guided Reinforcement Learning for Robot Navigation Among Dynamic Obstaclescited by 0
  21. 2026Latent Safety Filters: When a Lossy Encoder Admits a Transferable Certificatecited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2026Modeling Latent Disturbances for Robust Decision-Making in World Models
  2. 2024Zero-shot Safety Prediction for Autonomous Robots with Foundation World Models
  3. 2026Uncertainty-Aware Predictive Safety Filters for Probabilistic Neural Network Dynamics
  4. 2025How Safe Will I Be Given What I Saw? Calibrated Prediction of Safety Chances for Image-Controlled Autonomy
  5. 2023How Safe Am I Given What I See? Calibrated Prediction of Safety Chances for Image-Controlled Autonomy
  6. 2025Feasibility-Aware Pessimistic Estimation: Toward Long-Horizon Safety in Offline RL
  7. 2026Calibrated Predictive Safety for Heterogeneous Robots: An Action-Conditioned JEPA Framework with Model-Based Safety Shields ↗
  8. 2026λ-Reachability: Geometric-Horizon Safety Bellman Equations for Humanoid Safety