mlsanityData to 14 Oct 2026

How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraints

arXiv 2511.18606 ↗First posted 23 Nov 2025cs.RO cs.LGcited by 9

Not on the map. Why?

Abstract (arXiv)

Latent safety filters extend Hamilton-Jacobi (HJ) reachability to operate on latent state representations and dynamics learned directly from high-dimensional observations, enabling safe visuomotor control under hard-to-model constraints. However, existing methods implement "least-restrictive" filtering that discretely switch between nominal and safety policies, potentially undermining the task performance that makes modern visuomotor policies valuable. While reachability value functions can, in principle, be adapted to be control barrier functions (CBFs) for smooth optimization-based filtering, we theoretically and empirically show that current latent-space learning methods produce fundamentally incompatible value functions. We identify two sources of incompatibility: First, in HJ reachability, failures are encoded via a "margin function" in latent space, whose sign indicates whether or not a latent is in the constraint set. However, representing the margin function as a classifier yields saturated value functions that exhibit discontinuous jumps. We prove that the value function's Lipschitz constant scales linearly with the margin function's Lipschitz constant, revealing that smooth CBFs require smooth margins. Second, reinforcement learning (RL) approximations trained solely on safety policy data yield inaccurate value estimates for nominal policy actions, precisely where CBF filtering needs them. We propose the LatentCBF, which addresses both challenges through gradient penalties that lead to smooth margin functions without additional labeling, and a value-training procedure that mixes data from both nominal and safety policy distributions. Experiments on simulated benchmarks and hardware with a vision-based manipulation policy demonstrate that LatentCBF enables smooth safety filtering while doubling the task-completion rate over prior switching methods.

Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Builds on 30 of its 44 references that are in the map. First posted on arXiv 23 Nov 2025.

Builds on

30 of 44 references.

References · 30

  1. 2023Diffusion Policy: Visuomotor Policy Learning via Action Diffusioncited by 2,838
  2. 2018Addressing Function Approximation Error in Actor-Critic Methodscited by 2,417
  3. 2017Improved Training of Wasserstein GANscited by 2,235
  4. 2020Conservative Q-Learning for Offline Reinforcement Learningcited by 1,809
  5. 2025π0.5: a Vision-Language-Action Model with Open-World Generalizationcited by 1,761
  6. 2018Recurrent World Models Facilitate Policy Evolutioncited by 785
  7. 2024DINO-WM: World Models on Pre-trained Visual Features enable Zero-shot Planningcited by 386
  8. 2019Control Barrier Functions: Theory and Applicationscited by 372
  9. 2016Control Barrier Function Based Quadratic Programs for Safety Critical Systemscited by 287
  10. 2022Hybrid RL: Using Both Offline and Online Data Can Make RL Efficientcited by 161
  11. 2022Safe Control with Learned Certificates: A Survey of Neural Lyapunov, Barrier, and Contraction methodscited by 151
  12. 2020DeepReach: A Deep Learning Approach to High-Dimensional Reachabilitycited by 91
18 more
  1. 2024Agile But Safe: Learning Collision-Free High-Speed Legged Locomotioncited by 73
  2. 2021Robust Control Barrier-Value Functions for Safety-Critical Controlcited by 51
  3. 2025Generalizing Safety Beyond Collision-Avoidance via Latent-Space Reachability Analysiscited by 45
  4. 2023How to Train Your Neural Control Barrier Function: Learning Safety Filters for Complex Input-Constrained Systemscited by 44
  5. 2020Synthesis of Control Barrier Functions Using a Supervised Machine Learning Approachcited by 35
  6. 2025Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failurescited by 33
  7. 2022ISAACS: Iterative Soft Adversarial Actor-Critic for Safetycited by 28
  8. 2022Sim-to-Lab-to-Real: Safe Reinforcement Learning with Shielding and Generalization Guaranteescited by 27
  9. 2025Latent Policy Barrier: Learning Robust Visuomotor Policies by Staying In-Distributioncited by 25
  10. 2022Enforcing safety for vision-based controllers via Control Barrier Functions and Neural Radiance Fieldscited by 16
  11. 2022Refining Control Barrier Functions through Hamilton-Jacobi Reachabilitycited by 15
  12. 2021Safe Autonomous Racing via Approximate Reachability on Ego-visioncited by 13
  13. 2024One Filter to Deploy Them All: Robust Safety for Quadrupedal Navigation in Unknown Environmentscited by 9
  14. 2025Safety with Agency: Human-Centered Safety Filter with Application to AI-Assisted Motorsportscited by 8
  15. 2022A Robust, Multiple Control Barrier Function Framework for Input Constrained Systemscited by 6
  16. 2025Latent Representations for Control Design with Provable Stability and Safety Guaranteescited by 6
  17. 2025Reachability Barrier Networks: Learning Hamilton-Jacobi Solutions for Smooth and Flexible Control Barrier Functionscited by 3
  18. 2025Safety Certification in the Latent space using Control Barrier Functions and World Modelscited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 9.

9 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024Semi-Supervised Safe Visuomotor Policy Synthesis using Barrier Certificates
  2. 2025V-OCBF: Learning Safety Filters from Offline Data via Value-Guided Offline Control Barrier Functions
  3. 2025Learning Conservative Neural Control Barrier Functions from Offline Data
  4. 2020Learning Control Barrier Functions from Expert Demonstrations
  5. 2024Hamilton-Jacobi Reachability in Reinforcement Learning: A Survey
  6. 2025How Well Do Latent World Models Understand Partially Observable Safety Constraints?
  7. 2025Statistically Assuring Safety of Control Systems using Ensembles of Safety Filters and Conformal Prediction
  8. 2025AnySafe: Adapting Latent Safety Filters at Runtime via Safety Constraint Parameterization in the Latent Space