mlsanityData to 7 Oct 2026

From Demonstrations to Safe Deployment: Path-Consistent Safety Filtering for Diffusion Policies

arXiv 2511.06385 ↗First posted 9 Nov 2025cs.RO cs.SY eess.SYcited by 4

On the map: Diffusion models → Diffusion and flow policies for robotics

Abstract (arXiv)

Diffusion policies (DPs) achieve state-of-the-art performance on complex manipulation tasks by learning from large-scale demonstration datasets, often spanning multiple embodiments and environments. However, they cannot guarantee safe behavior, requiring external safety mechanisms. These, however, alter actions in ways unseen during training, causing unpredictable behavior and performance degradation. To address these problems, we propose path-consistent safety filtering (PACS) for DPs. Our approach performs path-consistent braking on a trajectory computed from the sequence of generated actions. In this way, we keep the execution consistent with the training distribution of the policy, maintaining the learned, task-completing behavior. To enable real-time deployment and handle uncertainties, we verify safety using set-based reachability analysis. Our experimental evaluation in simulation and on three challenging real-world human-robot interaction tasks shows that PACS (a) provides formal safety guarantees in dynamic environments, (b) preserves task success rates, and (c) outperforms reactive safety approaches, such as control barrier functions, by up to 68 % in terms of task success. Videos are available at our project website: https://tum-lsy.github.io/pacs.

Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Diffusion and flow policies for robotics, one of 14 directions in Diffusion models. Builds on 41 of its 59 references that are in the map. First posted on arXiv 9 Nov 2025.

Builds on

41 of 59 references.

Closest ancestors · 11

Same direction, newest first

  1. 2025Failure Prediction at Runtime for Generative Robot Policies10 Oct
  2. 2025RA-DP: Rapid Adaptive Diffusion Policy for Training-Free High-frequency Robotics Replanning6 Mar
  3. 2025Simultaneous Multi-Robot Motion Planning with Projected Diffusion Models5 Feb
  4. 2024Motion Planning Diffusion: Learning and Adapting Robot Motion Planning with Diffusion Models27 Dec
  5. 2024Diffusion Predictive Control with Constraints12 Dec
  6. 2024Denoising Diffusion Planner: Learning Complex Paths from Low-Quality Demonstrations28 Oct
  7. 2024One-Step Diffusion Policy: Fast Visuomotor Policies via Diffusion Distillation28 Oct
  8. 2024Multimodal Diffusion Transformer: Learning Versatile Behavior from Multimodal Goals8 Jul
  9. 2023EDMP: Ensemble-of-costs-guided Diffusion for Motion Planning20 Sep
  10. 2023SafeDiffuser: Safe Planning with Diffusion Probabilistic Models31 May
  11. 2023Diffusion Policy: Visuomotor Policy Learning via Action Diffusion7 Mar

Other references · 30

  1. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  2. 2022Flow Matching for Generative Modelingcited by 5,426
  3. 2024π0: A Vision-Language-Action Flow Model for General Robot Controlcited by 2,297
  4. 2023Learning Fine-Grained Bimanual Manipulation with Low-Cost Hardwarecited by 1,490
  5. 2021What Matters in Learning from Offline Human Demonstrations for Robot Manipulationcited by 699
  6. 2025SmolVLA: A Vision-Language-Action Model for Affordable and Efficient Roboticscited by 507
  7. 2021Safe Learning in Robotics: From Learning-Based Control to Safe Reinforcement Learningcited by 337
  8. 2019Control Barrier Functions: Theory and Applicationscited by 332
  9. 2017A General Safety Framework for Learning-Based Control in Uncertain Robotic Systemscited by 150
  10. 2018A predictive safety filter for learning-based control of constrained nonlinear dynamical systemscited by 91
  11. 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 77
  12. 2024Unpacking Failure Modes of Generative Policies: Runtime Monitoring of Consistency and Progresscited by 63
18 more
  1. 2025Can We Detect Failures Without Failure Data? Uncertainty-Aware Runtime Failure Detection for Imitation Learning Policiescited by 49
  2. 2022Provably Safe Reinforcement Learning: Conceptual Analysis, Survey, and Benchmarkingcited by 31
  3. 2020Safe Reinforcement Learning via Projection on a Safe Set: How to Achieve Optimality?cited by 29
  4. 2020Reachability-based Trajectory Safeguard (RTS): A Safe and Fast Reinforcement Learning Safety Layer for Continuous Controlcited by 28
  5. 2021A predictive safety filter for learning-based racing controlcited by 17
  6. 2022Provably Safe Deep Reinforcement Learning for Robotic Manipulation in Human Environmentscited by 16
  7. 2024Semantically Safe Robot Manipulation: From Semantic Scene Understanding to Motion Safeguardscited by 16
  8. 2021Jerk-limited Real-time Trajectory Generation with Arbitrary Target Statescited by 12
  9. 2025Safe, Task-Consistent Manipulation with Operational Space Control Barrier Functionscited by 10
  10. 2022Safety-Critical Manipulation for Collision-Free Food Preparationcited by 8
  11. 2023Human-Robot Gym: Benchmarking Reinforcement Learning in Human-Robot Collaborationcited by 8
  12. 2021Guarantees for Real Robotic Systems: Unifying Formal Controller Synthesis and Reachset-Conformant Identificationcited by 5
  13. 2024RAIL: Reachability-Aided Imitation Learning for Safe Policy Executioncited by 5
  14. 2024A General Safety Framework for Autonomous Manipulation in Human Environmentscited by 3
  15. 2025CRISP -- Compliant ROS2 Controllers for Learning-Based Manipulation Policies and Teleoperationcited by 3
  16. 2025SAD-Flower: Flow Matching for Safe, Admissible, and Dynamically Consistent Planningcited by 2
  17. 2024Towards Safe Robot Use with Edged or Pointed Objects: A Surrogate Study Assembling a Human Hand Injury Protection Databasecited by 1
  18. 2024Towards Unconstrained Collision Injury Protection Data Sets: Initial Surrogate Experiments for the Human Handcited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 4.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026PACT: Self-Evolving Physical Safety Alignment for Diffusion Policies in Embodied Manipulation
  2. 2026TAIL-Safe: Task-Agnostic Safety Monitoring for Imitation Learning Policies
  3. 2025Safe Learning for Contact-Rich Robot Tasks: A Survey from Classical Learning-Based Methods to Safe Foundation Models
  4. 2025Diffusion-SAFE: Diffusion-Native Human-to-Robot Driving Handover for Shared Autonomy
  5. 2024Don't Let Your Robot be Harmful: Responsible Robotic Manipulation via Safety-as-Policy
  6. 2025Towards Safe Robot Foundation Models Using Inductive Biases
  7. 2026PAC-DP: PAC-Bayesian Diffusion Policy Learning
  8. 2025SafeBimanual: Diffusion-based Trajectory Optimization for Safe Bimanual Manipulation