Real-Time Out-of-Distribution Failure Prevention via Multi-Modal Reasoning
Not on the map. Why?
Abstract (arXiv)
While foundation models offer promise toward improving robot safety in out-of-distribution (OOD) scenarios, how to effectively harness their generalist knowledge for real-time, dynamically feasible response remains a crucial problem. We present FORTRESS, a joint reasoning and planning framework that generates semantically safe fallback strategies to prevent safety-critical, OOD failures. At a low frequency under nominal operation, FORTRESS uses multi-modal foundation models to anticipate possible failure modes and identify safe fallback sets. When a runtime monitor triggers a fallback response, FORTRESS rapidly synthesizes plans to fallback goals while inferring and avoiding semantically unsafe regions in real time. By bridging open-world, multi-modal reasoning with dynamics-aware planning, we eliminate the need for hard-coded fallbacks and human safety interventions. FORTRESS outperforms on-the-fly prompting of slow reasoning models in safety classification accuracy on synthetic benchmarks and real-world ANYmal robot data, and further improves system safety and planning success in simulation and on quadrotor hardware for urban navigation. Website can be found at https://milanganai.github.io/fortress.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Builds on 53 of its 76 references that are in the map. First posted on arXiv 15 May 2025.
Builds on
53 of 76 references.
References · 53
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,926
- 2023Mistral 7Bcited by 3,164
- 2024OpenVLA: An Open-Source Vision-Language-Action Modelcited by 2,887
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,348
- 2020MiniLM: Deep Self-Attention Distillation for Task-Agnostic Compression of Pre-Trained Transformerscited by 1,463
- 2020Energy-based Out-of-distribution Detectioncited by 1,299
- 2020MPNet: Masked and Permuted Pre-training for Language Understandingcited by 981
- 2021Robust fine-tuning of zero-shot modelscited by 797
- 2023VoxPoser: Composable 3D Value Maps for Robotic Manipulation with Language Modelscited by 750
38 more
- 2023Towards General Text Embeddings with Multi-stage Contrastive Learningcited by 723
- 2022ProgPrompt: Generating Situated Robot Task Plans using Large Language Modelscited by 611
- 2020A Unifying Review of Deep and Shallow Anomaly Detectioncited by 425
- 2019Control Barrier Functions: Theory and Applicationscited by 372
- 2024Multilingual E5 Text Embeddings: A Technical Reportcited by 372
- 2023Scaling Open-Vocabulary Object Detectioncited by 343
- 2023Improving Text Embeddings with Large Language Modelscited by 303
- 2023Foundation Models in Robotics: Applications, Challenges, and the Futurecited by 216
- 2017Hamilton-Jacobi Reachability: A Brief Overview and Recent Advancescited by 201
- 2021Combined Scaling for Zero-shot Transfer Learningcited by 182
- 2021A Unified Survey on Anomaly, Novelty, Open-Set, and Out-of-Distribution Detection: Solutions and Future Challengescited by 154
- 2022Safe Control with Learned Certificates: A Survey of Neural Lyapunov, Barrier, and Contraction methodscited by 151
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 88
- 2024Unpacking Failure Modes of Generative Policies: Runtime Monitoring of Consistency and Progresscited by 69
- 2024Real-Time Anomaly Detection and Reactive Planning with Large Language Modelscited by 68
- 2023Semantic Anomaly Detection with Large Language Modelscited by 53
- 2024A Survey for Foundation Models in Autonomous Drivingcited by 52
- 2024Re-Mix: Optimizing Data Mixtures for Large Scale Imitation Learningcited by 47
- 2014Reach-Avoid Problems with Time-Varying Dynamics, Targets and Constraintscited by 44
- 2023How to Train Your Neural Control Barrier Function: Learning Safety Filters for Complex Input-Constrained Systemscited by 44
- 2023Iterative Reachability Estimation for Safe Reinforcement Learningcited by 37
- 2022A System-Level View on Out-of-Distribution Data in Roboticscited by 33
- 2024Formal Verification and Control with Conformal Predictioncited by 26
- 2024Out-of-Distribution Detection: A Task-Oriented Survey of Recent Advancescited by 26
- 2017FaSTrack: a Modular Framework for Fast and Guaranteed Safe Motion Planningcited by 23
- 2023TypeFly: Flying Drones with Large Language Modelcited by 23
- 2019An Efficient Reachability-Based Framework for Provably Safe Autonomous Navigation in Unknown Environmentscited by 18
- 2024Hamilton-Jacobi Reachability in Reinforcement Learning: A Surveycited by 16
- 2023Closing the Loop on Runtime Monitors with Fallback-Safe MPCcited by 14
- 2023Learning Safe Control for Multi-Robot Systems: Methods, Verification, and Open Challengescited by 13
- 2021Backup Control Barrier Functions: Formulation and Comparative Studycited by 12
- 2019Reachability-Based Safety Guarantees using Efficient Initializationscited by 9
- 2023Unifying Foundation Models with Quadrotor Control for Visual Tracking Beyond Object Categoriescited by 9
- 2023Adapt On-the-Go: Behavior Modulation for Single-Life Robot Deploymentcited by 8
- 2024Updating Robot Safety Representations Online from Natural Language Feedbackcited by 8
- 2024Human-AI Safety: A Descendant of Generative AI and Control Systems Safetycited by 7
- 2024Generative AI Agents in Autonomous Machines: A Safety Perspectivecited by 7
- 2024System-Level Safety Monitoring and Recovery for Perception Failures in Autonomous Vehiclescited by 5
50 most cited of 53 All 53 (JSON)
Built on by
Citing papers per year: 2025: 2; 2026: 8.
10 papers.
- 2026ReconVLA: An Uncertainty-Guided and Failure-Aware Vision-Language-Action Framework for Robotic Controlcited by 5
- 2026Your Model Already Knows: Attention-Guided Safety Filter for Vision-Language-Action Modelscited by 4
- 2026Self-Supervised Bootstrapping of Action-Predictive Embodied Reasoningcited by 3
- 2025Out-of-Distribution Detection for Safety Assurance of AI and Autonomous Systemscited by 2
- 2026CMP: Robust Whole-Body Tracking for Loco-Manipulation via Competence Manifold Projectioncited by 1
- 2025Foundation models on the bridge: Semantic hazard detection and safety maneuvers for maritime autonomy with vision-language modelscited by 0
- 2026Vision-Based Safe Human-Robot Collaboration with Uncertainty Guaranteescited by 0
- 2026How to Utilize Failure Demo Data?: Effective Data Selection for Imitation Learning Using Distribution Differences in Attention Mechanismcited by 0
- 2026Don't Fool Me Twice: Adapting to Adversity in the Wild with Experience-Driven Reasoningcited by 0
- 2026Predictive Semantic Safety: From Visual Physical Reasoning to Safety-Critical Controlcited by 0
- 2026Predictive Semantic Safety: From Visual Physical Reasoning to Safety-Critical Control28 Sep 2026
- 2026Your Model Already Knows: Attention-Guided Safety Filter for Vision-Language-Action Models8 Jun 2026
- 2026Don't Fool Me Twice: Adapting to Adversity in the Wild with Experience-Driven Reasoning29 May 2026
- 2026How to Utilize Failure Demo Data?: Effective Data Selection for Imitation Learning Using Distribution Differences in Attention Mechanism8 May 2026
- 2026ReconVLA: An Uncertainty-Guided and Failure-Aware Vision-Language-Action Framework for Robotic Control17 Apr 2026
- 2026Vision-Based Safe Human-Robot Collaboration with Uncertainty Guarantees16 Apr 2026
- 2026CMP: Robust Whole-Body Tracking for Loco-Manipulation via Competence Manifold Projection8 Apr 2026
- 2026Self-Supervised Bootstrapping of Action-Predictive Embodied Reasoning9 Feb 2026
- 2025Foundation models on the bridge: Semantic hazard detection and safety maneuvers for maritime autonomy with vision-language models30 Dec 2025
- 2025Out-of-Distribution Detection for Safety Assurance of AI and Autonomous Systems24 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2026Contextual Safety Reasoning and Grounding for Open-World Robots
- 2026FARM: Reading Failure Signals from the Internal Predictive States of a Frozen Robotic World Model
- 2025Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failures
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents
- 2026Revealing Interpretable Failure Modes of VLMs
- 2026When World Models Lie: Adaptive Safety Analysis Under Wrong Imaginations
- 2025SENTINEL: A Multi-Level Formal Framework for Safety Evaluation of Foundation Model-based Embodied Agents
- 2025Position: AI Safety Must Embrace an Antifragile Perspective