mlsanityData to 14 Oct 2026

Safe Embodied AI for Long-horizon Tasks: A Cross-layer Analysis of Robotic Manipulation

arXiv 2606.05660 ↗First posted 4 Jun 2026cs.RO cs.AIcited by 1

Not on the map. Why?

Abstract (arXiv)

Embodied AI systems are increasingly expected to reason and act over extended horizons in physical environments. This growing capability brings safety to the foreground, because failures in the physical world can harm people, damage objects, and disrupt workplaces. Although safe embodied AI has attracted substantial attention, the literature remains fragmented across planning, policy design, and runtime execution. Long-horizon robotic manipulation is a particularly revealing anchor domain for this problem because semantic misgrounding, subtask-level error propagation, execution drift, and contact-rich physical risk can accumulate within the same closed-loop system. This survey therefore provides a structured review of safety in long-horizon robotic manipulation from an embodied AI perspective. We organize the literature by intervention locus, covering planning-time, policy-time, and execution-time safety, and we analyze the strength of the evidence that each line of work provides, distinguishing formal guarantees, statistical support, and empirical safety heuristics. This framework clarifies the distinct roles of backbone capability papers, direct safety mechanisms, and benchmark or evaluation studies, while exposing where current safety claims are well supported and where they remain indirect. We identify persistent gaps, including limited evidence for policy-time safety, weak formal support for contact-rich long-horizon manipulation, immature uncertainty-triggered intervention, and a shortage of manipulation-specific safety benchmarks. We conclude by outlining research directions for cross-layer assurance, evaluation design, and safer deployment of long-horizon robotic agents in real-world settings.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 87 of its 310 references that are in the map. First posted on arXiv 4 Jun 2026.

Builds on

87 of 310 references.

References · 87

  1. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  2. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
  3. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
  4. 2018Safe Exploration in Continuous Action Spacescited by 247
  5. 2024Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversationscited by 129
  6. 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agentscited by 116
  7. 2024GRAPE: Generalizing Robot Policy via Preference Alignmentcited by 109
  8. 2023Toward General-Purpose Robots via Foundation Models: A Survey and Meta-Analysiscited by 103
  9. 2024Unpacking Failure Modes of Generative Policies: Runtime Monitoring of Consistency and Progresscited by 69
  10. 2026MEM: Multi-Scale Embodied Memory for Vision Language Action Modelscited by 61
  11. 2023Errors are Useful Prompts: Instruction Guided Task Programming with Verifier-Assisted Iterative Promptingcited by 46
  12. 2021Guidance on the Assurance of Machine Learning in Autonomous Systems (AMLAS)cited by 42
38 more
  1. 2025SARM: Stage-Aware Reward Modeling for Long Horizon Robot Manipulationcited by 42
  2. 2024RePLan: Robotic Replanning with Perception and Language Modelscited by 41
  3. 2025RoboFAC: A Comprehensive Framework for Robotic Failure Analysis and Correctioncited by 41
  4. 2024Align Anything: Training All-Modality Models to Follow Instructions with Language Feedbackcited by 39
  5. 2025AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructionscited by 38
  6. 2025FailSafe: Reasoning and Recovery from Failures in Vision-Language-Action Modelscited by 35
  7. 2025ContextVLA: Vision-Language-Action Model with Amortized Multi-Frame Contextcited by 35
  8. 2025VLSA: Vision-Language-Action Models with Plug-and-Play Safety Constraint Layercited by 34
  9. 2023HallE-Control: Controlling Object Hallucination in Large Multimodal Modelscited by 32
  10. 2025RoboEval: Where Robotic Manipulation Meets Structured and Scalable Evaluationcited by 32
  11. 2026BagelVLA: Enhancing Long-Horizon Manipulation via Interleaved Vision-Language-Action Generationcited by 30
  12. 2024EARBench: Towards Evaluating Physical Risk Awareness for Task Planning of Foundation Model-based Embodied AI Agentscited by 27
  13. 2025Do What You Say: Steering Vision-Language-Action Models via Runtime Reasoning-Action Alignment Verificationcited by 26
  14. 2026ForceVLA2: Unleashing Hybrid Force-Position Control with Force Awareness for Contact-Rich Manipulationcited by 22
  15. 2025RoboHorizon: An LLM-Assisted Multi-View World Model for Long-Horizon Robotic Manipulationcited by 19
  16. 2025Tactile-VLA: Unlocking Vision-Language-Action Model's Physical Knowledge for Tactile Generalizationcited by 19
  17. 2025DeepThinkVLA: Enhancing Reasoning Capability of Vision-Language-Action Modelscited by 18
  18. 2023LoHoRavens: A Long-Horizon Language-Conditioned Benchmark for Robotic Tabletop Manipulationcited by 17
  19. 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agentscited by 17
  20. 2026FD-VLA: Force-Distilled Vision-Language-Action Model for Contact-Rich Manipulationcited by 17
  21. 2026Joint-Aligned Latent Action: Towards Scalable VLA Pretraining in the Wildcited by 15
  22. 2025RoboSafe: Safeguarding Embodied Agents via Executable Safety Logiccited by 14
  23. 2026LiLo-VLA: Compositional Long-Horizon Manipulation via Linked Object-Centric Policiescited by 14
  24. 2026TaF-VLA: Tactile-Force Alignment in Vision-Language-Action Models for Force-aware Manipulationcited by 13
  25. 2026VLA-OPD: Bridging Offline SFT and Online RL for Vision-Language-Action Models via On-Policy Distillationcited by 13
  26. 2025Confidence Calibration in Vision-Language-Action Modelscited by 12
  27. 2025I-FailSense: Towards General Robotic Failure Detection with Vision-Language Modelscited by 12
  28. 2025SafePlan: Leveraging Formal Logic and Chain-of-Thought Reasoning for Enhanced Safety in LLM-based Robotic Task Planningcited by 11
  29. 2025ConformalNL2LTL: Translating Natural Language Instructions into Temporal Logic Formulas with Conformal Correctness Guaranteescited by 11
  30. 2026Learning Actionable Manipulation Recovery via Counterfactual Failure Synthesiscited by 10
  31. 2025Safe LLM-Controlled Robots with Formal Guarantees via Reachability Analysiscited by 9
  32. 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraintscited by 9
  33. 2026Rewind-IL: Online Failure Detection and State Respawning for Imitation Learningcited by 9
  34. 2024Learning Control Barrier Functions and their application in Reinforcement Learning: A Surveycited by 8
  35. 2026CompliantVLA-adaptor: VLM-Guided Variable Impedance Action for Safe Contact-Rich Manipulationcited by 8
  36. 2026ForeAct: Steering Your VLA with Efficient Visual Foresight Planningcited by 8
  37. 2026RC-NF: Robot-Conditioned Normalizing Flow for Real-Time Anomaly Detection in Robotic Manipulationcited by 8
  38. 2026HazardArena: Evaluating Semantic Safety in Vision-Language-Action Modelscited by 8

50 most cited of 87 All 87 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.