SafeBranch: Branch-Pair Safety Alignment for Embodied Agents
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
Vision-language-model-based embodied agents can complete instructed tasks but often violate safety constraints in the process, a problem recently framed as interactive safety. Training such agents to act safely is difficult, since safety and task success are distinct objectives, and safety arises only at a small number of safety-critical steps within a trajectory. Standard supervision is insufficient: imitating safe trajectories teaches behavior without explaining why it is safe, and contrasting arbitrary safe and unsafe trajectories mixes the safety signal with unrelated differences. We propose SafeBranch, a framework that aligns an embodied actor on safety through branch pairs constructed from the actor's own unsafe rollouts via environment rollback. SafeBranch rolls each unsafe rollout back to the safety-critical step that caused the violation, queries the actor for a safe alternative, and pairs the original action with the alternative so that the two branches differ only at that step. The trained actor acts safely at deployment with no critic in the loop. On IS-Bench, SafetyALFRED, and out-of-distribution variants with unseen tasks and objects, it improves safe task completion, achieving roughly ten times more safe successes than the untrained baseline on the unseen-object variant. Project page: https://github.com/98hyunse/SafeBranch.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 15 of its 25 references that are in the map. First posted on arXiv 20 Aug 2026.
Builds on
15 of 25 references.
Closest ancestors · 1
Same direction, newest first
Other references · 14
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2023Self-Refine: Iterative Refinement with Self-Feedbackcited by 3,442
- 2023Reasoning with Language Model is Planning with World Modelcited by 861
- 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agentscited by 288
- 2023REFLECT: Summarizing Robot Experiences for Failure Explanation and Correctioncited by 175
- 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agentscited by 116
- 2024GRAPE: Generalizing Robot Policy via Preference Alignmentcited by 109
- 2024Anchored Preference Optimization and Contrastive Revisions: Addressing Underspecification in Alignmentcited by 46
- 2025IS-Bench: Evaluating Interactive Safety of VLM-Driven Embodied Agents in Daily Household Taskscited by 41
- 2025Safety Guardrails for LLM-Enabled Robotscited by 35
- 2025World Modeling Makes a Better Planner: Dual Preference Optimization for Embodied Task Planningcited by 26
- 2025ADVEDM:Fine-grained Adversarial Attack against VLM-based Embodied Agentscited by 23
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026SafeRelBench: A Spatial-Relation-Aware Benchmark for Process-Level Safety in VLM-Driven Embodied Agents
- 2025AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions
- 2025A Framework for Benchmarking and Aligning Task-Planning Safety in LLM-Based Embodied Agents
- 2026GuardianBench: A Same-Scene Instruction-Contrastive Benchmark for Latent Contextual Risk in Embodied AI
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents
- 2025RoboSafe: Safeguarding Embodied Agents via Executable Safety Logic
- 2026EMBGuard: Constructing Hazard-Aware Guardrails for Safe Planning in Embodied Agents
- 2026PlanGuard: A Guardrail for Multi-Step Plan Safety in Embodied Agents