Safe Embodied AI for Long-horizon Tasks: A Cross-layer Analysis of Robotic Manipulation
Not on the map. Why?
Abstract (arXiv)
Embodied AI systems are increasingly expected to reason and act over extended horizons in physical environments. This growing capability brings safety to the foreground, because failures in the physical world can harm people, damage objects, and disrupt workplaces. Although safe embodied AI has attracted substantial attention, the literature remains fragmented across planning, policy design, and runtime execution. Long-horizon robotic manipulation is a particularly revealing anchor domain for this problem because semantic misgrounding, subtask-level error propagation, execution drift, and contact-rich physical risk can accumulate within the same closed-loop system. This survey therefore provides a structured review of safety in long-horizon robotic manipulation from an embodied AI perspective. We organize the literature by intervention locus, covering planning-time, policy-time, and execution-time safety, and we analyze the strength of the evidence that each line of work provides, distinguishing formal guarantees, statistical support, and empirical safety heuristics. This framework clarifies the distinct roles of backbone capability papers, direct safety mechanisms, and benchmark or evaluation studies, while exposing where current safety claims are well supported and where they remain indirect. We identify persistent gaps, including limited evidence for policy-time safety, weak formal support for contact-rich long-horizon manipulation, immature uncertainty-triggered intervention, and a shortage of manipulation-specific safety benchmarks. We conclude by outlining research directions for cross-layer assurance, evaluation design, and safer deployment of long-horizon robotic agents in real-world settings.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 87 of its 310 references that are in the map. First posted on arXiv 4 Jun 2026.
Builds on
87 of 310 references.
References · 87
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2018Safe Exploration in Continuous Action Spacescited by 247
- 2024Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversationscited by 129
- 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agentscited by 116
- 2024GRAPE: Generalizing Robot Policy via Preference Alignmentcited by 109
- 2023Toward General-Purpose Robots via Foundation Models: A Survey and Meta-Analysiscited by 103
- 2024Unpacking Failure Modes of Generative Policies: Runtime Monitoring of Consistency and Progresscited by 69
- 2026MEM: Multi-Scale Embodied Memory for Vision Language Action Modelscited by 61
- 2023Errors are Useful Prompts: Instruction Guided Task Programming with Verifier-Assisted Iterative Promptingcited by 46
- 2021Guidance on the Assurance of Machine Learning in Autonomous Systems (AMLAS)cited by 42
38 more
- 2025SARM: Stage-Aware Reward Modeling for Long Horizon Robot Manipulationcited by 42
- 2024RePLan: Robotic Replanning with Perception and Language Modelscited by 41
- 2025RoboFAC: A Comprehensive Framework for Robotic Failure Analysis and Correctioncited by 41
- 2024Align Anything: Training All-Modality Models to Follow Instructions with Language Feedbackcited by 39
- 2025AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructionscited by 38
- 2025FailSafe: Reasoning and Recovery from Failures in Vision-Language-Action Modelscited by 35
- 2025ContextVLA: Vision-Language-Action Model with Amortized Multi-Frame Contextcited by 35
- 2025VLSA: Vision-Language-Action Models with Plug-and-Play Safety Constraint Layercited by 34
- 2023HallE-Control: Controlling Object Hallucination in Large Multimodal Modelscited by 32
- 2025RoboEval: Where Robotic Manipulation Meets Structured and Scalable Evaluationcited by 32
- 2026BagelVLA: Enhancing Long-Horizon Manipulation via Interleaved Vision-Language-Action Generationcited by 30
- 2024EARBench: Towards Evaluating Physical Risk Awareness for Task Planning of Foundation Model-based Embodied AI Agentscited by 27
- 2025Do What You Say: Steering Vision-Language-Action Models via Runtime Reasoning-Action Alignment Verificationcited by 26
- 2026ForceVLA2: Unleashing Hybrid Force-Position Control with Force Awareness for Contact-Rich Manipulationcited by 22
- 2025RoboHorizon: An LLM-Assisted Multi-View World Model for Long-Horizon Robotic Manipulationcited by 19
- 2025Tactile-VLA: Unlocking Vision-Language-Action Model's Physical Knowledge for Tactile Generalizationcited by 19
- 2025DeepThinkVLA: Enhancing Reasoning Capability of Vision-Language-Action Modelscited by 18
- 2023LoHoRavens: A Long-Horizon Language-Conditioned Benchmark for Robotic Tabletop Manipulationcited by 17
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agentscited by 17
- 2026FD-VLA: Force-Distilled Vision-Language-Action Model for Contact-Rich Manipulationcited by 17
- 2026Joint-Aligned Latent Action: Towards Scalable VLA Pretraining in the Wildcited by 15
- 2025RoboSafe: Safeguarding Embodied Agents via Executable Safety Logiccited by 14
- 2026LiLo-VLA: Compositional Long-Horizon Manipulation via Linked Object-Centric Policiescited by 14
- 2026TaF-VLA: Tactile-Force Alignment in Vision-Language-Action Models for Force-aware Manipulationcited by 13
- 2026VLA-OPD: Bridging Offline SFT and Online RL for Vision-Language-Action Models via On-Policy Distillationcited by 13
- 2025Confidence Calibration in Vision-Language-Action Modelscited by 12
- 2025I-FailSense: Towards General Robotic Failure Detection with Vision-Language Modelscited by 12
- 2025SafePlan: Leveraging Formal Logic and Chain-of-Thought Reasoning for Enhanced Safety in LLM-based Robotic Task Planningcited by 11
- 2025ConformalNL2LTL: Translating Natural Language Instructions into Temporal Logic Formulas with Conformal Correctness Guaranteescited by 11
- 2026Learning Actionable Manipulation Recovery via Counterfactual Failure Synthesiscited by 10
- 2025Safe LLM-Controlled Robots with Formal Guarantees via Reachability Analysiscited by 9
- 2025How to Train Your Latent Control Barrier Function: Smooth Safety Filtering Under Hard-to-Model Constraintscited by 9
- 2026Rewind-IL: Online Failure Detection and State Respawning for Imitation Learningcited by 9
- 2024Learning Control Barrier Functions and their application in Reinforcement Learning: A Surveycited by 8
- 2026CompliantVLA-adaptor: VLM-Guided Variable Impedance Action for Safe Contact-Rich Manipulationcited by 8
- 2026ForeAct: Steering Your VLA with Efficient Visual Foresight Planningcited by 8
- 2026RC-NF: Robot-Conditioned Normalizing Flow for Real-Time Anomaly Detection in Robotic Manipulationcited by 8
- 2026HazardArena: Evaluating Semantic Safety in Vision-Language-Action Modelscited by 8
50 most cited of 87 All 87 (JSON)
Built on by
Citing papers per year: 2026: 1.
1 paper.