Safe Vision Language Action Models via Barrier Enhanced Flow Matching
On the map: Vision-language-action models → Safety and adversarial attacks
also in 1 more
Abstract (arXiv)
This article presents a modular inference framework that integrates Flow Matching generative models with formal Control Barrier Function (CBF) safety guarantees. Unlike existing methods that apply external safety filters to a model's final output, our approach modifies the Flow Matching denoising process within the model to inherently generate safe trajectories. By employing a smooth Log-Sum-Exponential aggregate barrier, we enforce safety over entire action chunks. This aggregate barrier ensures a minimal increase in computational overhead and does not alter the semantic intent of the model. We show that, within the proposed framework, the 2-Wasserstein distance between the generated distribution and the target distribution remains bounded. Our method eliminates the need for safety-specific datasets or costly model retraining, providing a versatile solution for safe inference. We validate the approach on two robotic manipulation platforms and a 2D navigation benchmark, verifying that our framework achieves reliable safety without degrading the success rate of the model.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Safety and adversarial attacks, one of 13 directions in Vision-language-action models. Builds on 24 of its 31 references that are in the map. First posted on arXiv 31 Jul 2026.
Builds on
24 of 31 references.
Closest ancestors · 2
Same direction, newest first
- 2025VLSA: Vision-Language-Action Models with Plug-and-Play Safety Constraint Layer9 Dec
- 2025SafeVLA: Towards Safety Alignment of Vision-Language-Action Model via Constrained Learning5 Mar
Other references · 22
- 2017Attention Is All You Needcited by 59,932
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2022Flow Matching for Generative Modelingcited by 5,426
- 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 2,993
- 2024OpenVLA: An Open-Source Vision-Language-Action Modelcited by 2,777
- 2021Convex optimizationcited by 2,479
- 2025π0.5: a Vision-Language-Action Model with Open-World Generalizationcited by 1,653
- 2023Learning Fine-Grained Bimanual Manipulation with Low-Cost Hardwarecited by 1,490
- 2023LIBERO: Benchmarking Knowledge Transfer for Lifelong Robot Learningcited by 1,338
- 2025SmolVLA: A Vision-Language-Action Model for Affordable and Efficient Roboticscited by 507
- 2016Control Barrier Function Based Quadratic Programs for Safety Critical Systemscited by 261
- 2023Flow Matching on General Geometriescited by 260
10 more
- 2023Error Bounds for Flow Matching Methodscited by 88
- 2023SafeDiffuser: Safe Planning with Diffusion Probabilistic Modelscited by 69
- 2024CoBL-Diffusion: Diffusion-Based Conditional Robot Planning in Dynamic Environments Using Control Barrier and Lyapunov Functionscited by 30
- 2025SafeFlow: Safe Robot Motion Planning with Flow Matching via Control Barrier Functionscited by 12
- 2025SafeFlowMatcher: Safe and Fast Planning using Flow Matching with Control Barrier Functionscited by 11
- 2021Model-Free Safety-Critical Control for Robotic Systemscited by 8
- 2023Composing Control Barrier Functions for Complex Safety Specificationscited by 7
- 2025Robot Learning: A Tutorialcited by 5
- 2025From Demonstrations to Safe Deployment: Path-Consistent Safety Filtering for Diffusion Policiescited by 4
- 2025Robust Data-Driven Receding Horizon Controlcited by 1
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026ActSafeGuard: Differentiable and Training-Aligned Constraint Enforcement for Flow-Matching Policies
- 2026Neuro-Symbolic Safety Guidance for Vision-Language-Action Models via Constrained Flow Matching
- 2026ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Models
- 2026Dynamic Control Barrier Function Regulation with Vision-Language Models for Safe, Adaptive, and Realtime Visual Navigation
- 2026Your Model Already Knows: Attention-Guided Safety Filter for Vision-Language-Action Models
- 2026Uncertainty Quantification for Flow-Based Vision-Language-Action Models
- 2026SUREFlow: State-space Uncertainty-aware REsidual Flow Matching for Robust Robot Manipulation
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policies