mlsanityData to 7 Oct 2026

Safe Vision Language Action Models via Barrier Enhanced Flow Matching

arXiv 2607.29569 ↗First posted 31 Jul 2026cs.RO cs.SY eess.SYcited by 2

On the map: Vision-language-action models → Safety and adversarial attacks

also in 1 more
Abstract (arXiv)

This article presents a modular inference framework that integrates Flow Matching generative models with formal Control Barrier Function (CBF) safety guarantees. Unlike existing methods that apply external safety filters to a model's final output, our approach modifies the Flow Matching denoising process within the model to inherently generate safe trajectories. By employing a smooth Log-Sum-Exponential aggregate barrier, we enforce safety over entire action chunks. This aggregate barrier ensures a minimal increase in computational overhead and does not alter the semantic intent of the model. We show that, within the proposed framework, the 2-Wasserstein distance between the generated distribution and the target distribution remains bounded. Our method eliminates the need for safety-specific datasets or costly model retraining, providing a versatile solution for safe inference. We validate the approach on two robotic manipulation platforms and a 2D navigation benchmark, verifying that our framework achieves reliable safety without degrading the success rate of the model.

Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Safety and adversarial attacks, one of 13 directions in Vision-language-action models. Builds on 24 of its 31 references that are in the map. First posted on arXiv 31 Jul 2026.

Builds on

24 of 31 references.

Closest ancestors · 2

Same direction, newest first

  1. 2025VLSA: Vision-Language-Action Models with Plug-and-Play Safety Constraint Layer9 Dec
  2. 2025SafeVLA: Towards Safety Alignment of Vision-Language-Action Model via Constrained Learning5 Mar

Other references · 22

  1. 2017Attention Is All You Needcited by 59,932
  2. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  3. 2022Flow Matching for Generative Modelingcited by 5,426
  4. 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 2,993
  5. 2024OpenVLA: An Open-Source Vision-Language-Action Modelcited by 2,777
  6. 2021Convex optimizationcited by 2,479
  7. 2025π0.5: a Vision-Language-Action Model with Open-World Generalizationcited by 1,653
  8. 2023Learning Fine-Grained Bimanual Manipulation with Low-Cost Hardwarecited by 1,490
  9. 2023LIBERO: Benchmarking Knowledge Transfer for Lifelong Robot Learningcited by 1,338
  10. 2025SmolVLA: A Vision-Language-Action Model for Affordable and Efficient Roboticscited by 507
  11. 2016Control Barrier Function Based Quadratic Programs for Safety Critical Systemscited by 261
  12. 2023Flow Matching on General Geometriescited by 260
10 more
  1. 2023Error Bounds for Flow Matching Methodscited by 88
  2. 2023SafeDiffuser: Safe Planning with Diffusion Probabilistic Modelscited by 69
  3. 2024CoBL-Diffusion: Diffusion-Based Conditional Robot Planning in Dynamic Environments Using Control Barrier and Lyapunov Functionscited by 30
  4. 2025SafeFlow: Safe Robot Motion Planning with Flow Matching via Control Barrier Functionscited by 12
  5. 2025SafeFlowMatcher: Safe and Fast Planning using Flow Matching with Control Barrier Functionscited by 11
  6. 2021Model-Free Safety-Critical Control for Robotic Systemscited by 8
  7. 2023Composing Control Barrier Functions for Complex Safety Specificationscited by 7
  8. 2025Robot Learning: A Tutorialcited by 5
  9. 2025From Demonstrations to Safe Deployment: Path-Consistent Safety Filtering for Diffusion Policiescited by 4
  10. 2025Robust Data-Driven Receding Horizon Controlcited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026ActSafeGuard: Differentiable and Training-Aligned Constraint Enforcement for Flow-Matching Policies
  2. 2026Neuro-Symbolic Safety Guidance for Vision-Language-Action Models via Constrained Flow Matching
  3. 2026ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Models
  4. 2026Dynamic Control Barrier Function Regulation with Vision-Language Models for Safe, Adaptive, and Realtime Visual Navigation
  5. 2026Your Model Already Knows: Attention-Guided Safety Filter for Vision-Language-Action Models
  6. 2026Uncertainty Quantification for Flow-Based Vision-Language-Action Models
  7. 2026SUREFlow: State-space Uncertainty-aware REsidual Flow Matching for Robust Robot Manipulation
  8. 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policies