Geometric Red-Teaming for Robotic Manipulation
Not on the map. Why?
Abstract (arXiv)
Standard evaluation protocols in robotic manipulation typically assess policy performance over curated, in-distribution test sets, offering limited insight into how systems fail under plausible variation. We introduce Geometric Red-Teaming (GRT), a red-teaming framework that probes robustness through object-centric geometric perturbations, automatically generating CrashShapes -- structurally valid, user-constrained mesh deformations that trigger catastrophic failures in pre-trained manipulation policies. The method integrates a Jacobian field-based deformation model with a gradient-free, simulator-in-the-loop optimization strategy. Across insertion, articulation, and grasping tasks, GRT consistently discovers deformations that collapse policy performance, revealing brittle failure modes missed by static benchmarks. By combining task-level policy rollouts with constraint-aware shape exploration, we aim to build a general purpose framework for structured, object-centric robustness evaluation in robotic manipulation. We additionally show that fine-tuning on individual CrashShapes, a process we refer to as blue-teaming, improves task success by up to 60 percentage points on those shapes, while preserving performance on the original object, demonstrating the utility of red-teamed geometries for targeted policy refinement. Finally, we validate both red-teaming and blue-teaming results with a real robotic arm, observing that simulated CrashShapes reduce task success from 90% to as low as 22.5%, and that blue-teaming recovers performance to up to 90% on the corresponding real-world geometry -- closely matching simulation outcomes. Videos and code can be found on our project website: https://georedteam.github.io/ .
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Builds on 24 of its 37 references that are in the map. First posted on arXiv 15 Sep 2025.
Builds on
24 of 37 references.
References · 24
- 2017PointNet++: Deep Hierarchical Feature Learning on Point Sets in a Metric Spacecited by 4,401
- 2019Meta-World: A Benchmark and Evaluation for Multi-Task and Meta Reinforcement Learningcited by 1,204
- 2021Isaac Gym: High Performance GPU-Based Physics Simulation For Robot Learningcited by 998
- 2019RLBench: The Robot Learning Benchmark & Learning Environmentcited by 689
- 2020SAPIEN: A SimulAted Part-based Interactive ENvironmentcited by 595
- 2020robosuite: A Modular Simulation Framework and Benchmark for Robot Learningcited by 511
- 2023Certifying LLM Safety against Adversarial Promptingcited by 266
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?cited by 250
- 2021Contact-GraspNet: Efficient 6-DoF Grasp Generation in Cluttered Scenescited by 218
- 2021ManiSkill: Generalizable Manipulation Skill Benchmark with Large-Scale Demonstrationscited by 197
- 2024AHA: A Vision-Language-Model for Detecting and Reasoning Over Failures in Robotic Manipulationcited by 125
- 2024Curiosity-driven Red-teaming for Large Language Modelscited by 88
12 more
- 2022Approximate Convex Decomposition for 3D Meshes with Collision-Aware Concavity and Tree Searchcited by 67
- 2020EGAD! an Evolved Grasping Analysis Dataset for diversity and reproducibility in robotic manipulationcited by 61
- 2023IndustReal: Transferring Contact-Rich Assembly Tasks from Simulation to Realitycited by 53
- 2019DoorGym: A Scalable Door Opening Environment And Baseline Agentcited by 26
- 2023As-Plausible-As-Possible: Plausibility-Aware Mesh Deformation Using 2D Diffusion Priorscited by 25
- 2024Embodied Red Teaming for Auditing Robotic Foundation Modelscited by 21
- 2023Evolving Diverse Red-team Language Models in Multi-round Multi-agent Gamescited by 17
- 2025Predictive Red Teaming: Breaking Policies Without Breaking Robotscited by 15
- 2024Groot: Adversarial Testing for Generative Text-to-Image Models with Tree-based Semantic Transformationcited by 14
- 2020Solving Challenging Dexterous Manipulation Tasks With Trajectory Optimisation and Reinforcement Learningcited by 13
- 2024RoboMD: Uncovering Robot Vulnerabilities through Semantic Potential Fieldscited by 7
- 2024Red-Teaming Segment Anything Modelcited by 4
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026What Breaks Embodied AI Security:LLM Vulnerabilities, CPS Flaws,or Something Else?cited by 6
- 2026Red-Teaming Vision-Language-Action Models via Quality Diversity Prompt Generation for Robust Robot Policiescited by 2
- 2026Uncovering Linguistic Fragility in Vision-Language-Action Models via Diversity-Aware Red Teamingcited by 2
- 2026ProbeAct: Probe-Guided Training-Free Failure Recovery in Vision-Language-Action Modelscited by 0
- 2026ProbeAct: Probe-Guided Training-Free Failure Recovery in Vision-Language-Action Models8 Jun 2026
- 2026Uncovering Linguistic Fragility in Vision-Language-Action Models via Diversity-Aware Red Teaming7 Apr 2026
- 2026Red-Teaming Vision-Language-Action Models via Quality Diversity Prompt Generation for Robust Robot Policies12 Mar 2026
- 2026What Breaks Embodied AI Security:LLM Vulnerabilities, CPS Flaws,or Something Else?19 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2026ManiDreams: An Open-Source Library for Robust Object Manipulation via Uncertainty-aware Task-specific Intuitive Physics
- 2026Real-IKEA: Physical Fidelity is the Prerequisite for Robust Manipulation ↗
- 2026PACT: Self-Evolving Physical Safety Alignment for Diffusion Policies in Embodied Manipulation
- 2025Geometry-aware RL for Manipulation of Varying Shapes and Deformable Objects
- 2026ManipulationNet: An Infrastructure for Benchmarking Real-World Robot Manipulation with Physical Skill Challenges and Embodied Multimodal Reasoning
- 2024CageCoOpt: Enhancing Manipulation Robustness through Caging-Guided Morphology and Policy Co-Optimization
- 2026RoboSynChallenge: Mastering Real-World Dexterity via Generalizing Synthesized Manipulation Skills ↗
- 2026RoboTwin-Phys: Do WAMs and VLAs Understand the Physical World? ↗