From Demonstrations to Safe Deployment: Path-Consistent Safety Filtering for Diffusion Policies
On the map: Diffusion models → Diffusion and flow policies for robotics
Abstract (arXiv)
Diffusion policies (DPs) achieve state-of-the-art performance on complex manipulation tasks by learning from large-scale demonstration datasets, often spanning multiple embodiments and environments. However, they cannot guarantee safe behavior, requiring external safety mechanisms. These, however, alter actions in ways unseen during training, causing unpredictable behavior and performance degradation. To address these problems, we propose path-consistent safety filtering (PACS) for DPs. Our approach performs path-consistent braking on a trajectory computed from the sequence of generated actions. In this way, we keep the execution consistent with the training distribution of the policy, maintaining the learned, task-completing behavior. To enable real-time deployment and handle uncertainties, we verify safety using set-based reachability analysis. Our experimental evaluation in simulation and on three challenging real-world human-robot interaction tasks shows that PACS (a) provides formal safety guarantees in dynamic environments, (b) preserves task success rates, and (c) outperforms reactive safety approaches, such as control barrier functions, by up to 68 % in terms of task success. Videos are available at our project website: https://tum-lsy.github.io/pacs.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Diffusion and flow policies for robotics, one of 14 directions in Diffusion models. Builds on 41 of its 59 references that are in the map. First posted on arXiv 9 Nov 2025.
Builds on
41 of 59 references.
Closest ancestors · 11
Same direction, newest first
- 2025Failure Prediction at Runtime for Generative Robot Policies10 Oct
- 2025RA-DP: Rapid Adaptive Diffusion Policy for Training-Free High-frequency Robotics Replanning6 Mar
- 2025Simultaneous Multi-Robot Motion Planning with Projected Diffusion Models5 Feb
- 2024Motion Planning Diffusion: Learning and Adapting Robot Motion Planning with Diffusion Models27 Dec
- 2024Diffusion Predictive Control with Constraints12 Dec
- 2024Denoising Diffusion Planner: Learning Complex Paths from Low-Quality Demonstrations28 Oct
- 2024One-Step Diffusion Policy: Fast Visuomotor Policies via Diffusion Distillation28 Oct
- 2024Multimodal Diffusion Transformer: Learning Versatile Behavior from Multimodal Goals8 Jul
- 2023EDMP: Ensemble-of-costs-guided Diffusion for Motion Planning20 Sep
- 2023SafeDiffuser: Safe Planning with Diffusion Probabilistic Models31 May
- 2023Diffusion Policy: Visuomotor Policy Learning via Action Diffusion7 Mar
Other references · 30
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2022Flow Matching for Generative Modelingcited by 5,426
- 2024π0: A Vision-Language-Action Flow Model for General Robot Controlcited by 2,297
- 2023Learning Fine-Grained Bimanual Manipulation with Low-Cost Hardwarecited by 1,490
- 2021What Matters in Learning from Offline Human Demonstrations for Robot Manipulationcited by 699
- 2025SmolVLA: A Vision-Language-Action Model for Affordable and Efficient Roboticscited by 507
- 2021Safe Learning in Robotics: From Learning-Based Control to Safe Reinforcement Learningcited by 337
- 2019Control Barrier Functions: Theory and Applicationscited by 332
- 2017A General Safety Framework for Learning-Based Control in Uncertain Robotic Systemscited by 150
- 2018A predictive safety filter for learning-based control of constrained nonlinear dynamical systemscited by 91
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 77
- 2024Unpacking Failure Modes of Generative Policies: Runtime Monitoring of Consistency and Progresscited by 63
18 more
- 2025Can We Detect Failures Without Failure Data? Uncertainty-Aware Runtime Failure Detection for Imitation Learning Policiescited by 49
- 2022Provably Safe Reinforcement Learning: Conceptual Analysis, Survey, and Benchmarkingcited by 31
- 2020Safe Reinforcement Learning via Projection on a Safe Set: How to Achieve Optimality?cited by 29
- 2020Reachability-based Trajectory Safeguard (RTS): A Safe and Fast Reinforcement Learning Safety Layer for Continuous Controlcited by 28
- 2021A predictive safety filter for learning-based racing controlcited by 17
- 2022Provably Safe Deep Reinforcement Learning for Robotic Manipulation in Human Environmentscited by 16
- 2024Semantically Safe Robot Manipulation: From Semantic Scene Understanding to Motion Safeguardscited by 16
- 2021Jerk-limited Real-time Trajectory Generation with Arbitrary Target Statescited by 12
- 2025Safe, Task-Consistent Manipulation with Operational Space Control Barrier Functionscited by 10
- 2022Safety-Critical Manipulation for Collision-Free Food Preparationcited by 8
- 2023Human-Robot Gym: Benchmarking Reinforcement Learning in Human-Robot Collaborationcited by 8
- 2021Guarantees for Real Robotic Systems: Unifying Formal Controller Synthesis and Reachset-Conformant Identificationcited by 5
- 2024RAIL: Reachability-Aided Imitation Learning for Safe Policy Executioncited by 5
- 2024A General Safety Framework for Autonomous Manipulation in Human Environmentscited by 3
- 2025CRISP -- Compliant ROS2 Controllers for Learning-Based Manipulation Policies and Teleoperationcited by 3
- 2025SAD-Flower: Flow Matching for Safe, Admissible, and Dynamically Consistent Planningcited by 2
- 2024Towards Safe Robot Use with Edged or Pointed Objects: A Surrogate Study Assembling a Human Hand Injury Protection Databasecited by 1
- 2024Towards Unconstrained Collision Injury Protection Data Sets: Initial Surrogate Experiments for the Human Handcited by 1
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026Safe Vision Language Action Models via Barrier Enhanced Flow Matchingcited by 2
- 2026VLAConf: Calibrated Task-Success Confidence for Vision-Language-Action Modelscited by 1
- 2026PC-Diffuser: Path-Consistent Capsule CBF Safety Filtering for Diffusion-Based Trajectory Plannercited by 0
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policiescited by 0
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policies18 Sep 2026
- 2026Safe Vision Language Action Models via Barrier Enhanced Flow Matching31 Jul 2026
- 2026VLAConf: Calibrated Task-Success Confidence for Vision-Language-Action Models28 May 2026
- 2026PC-Diffuser: Path-Consistent Capsule CBF Safety Filtering for Diffusion-Based Trajectory Planner11 Mar 2026
Similar, not cited
Close in wording, no citation either way
- 2026PACT: Self-Evolving Physical Safety Alignment for Diffusion Policies in Embodied Manipulation
- 2026TAIL-Safe: Task-Agnostic Safety Monitoring for Imitation Learning Policies
- 2025Safe Learning for Contact-Rich Robot Tasks: A Survey from Classical Learning-Based Methods to Safe Foundation Models
- 2025Diffusion-SAFE: Diffusion-Native Human-to-Robot Driving Handover for Shared Autonomy
- 2024Don't Let Your Robot be Harmful: Responsible Robotic Manipulation via Safety-as-Policy
- 2025Towards Safe Robot Foundation Models Using Inductive Biases
- 2026PAC-DP: PAC-Bayesian Diffusion Policy Learning
- 2025SafeBimanual: Diffusion-based Trajectory Optimization for Safe Bimanual Manipulation