ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Models
On the map: Vision-language-action models → Safety and adversarial attacks
also in 2 more
Abstract (arXiv)
Vision-Language-Action (VLA) models demonstrate strong generalization in robotic manipulation and navigation, but existing fine-tuning methods provide limited safety guarantees. Current approaches primarily rely on Lagrangian optimization that enforces safety through soft penalties on expected cumulative cost, often resulting in residual constraint violations or overly conservative behavior. Moreover, learning safety in visual domains is challenging due to the absence of dense per-step safety annotations. We propose ShieldVLA, a safety-aligned fine-tuning framework for VLA models based on Hamilton-Jacobi (HJ) reachability. ShieldVLA learns a model-free approximation of the HJ reachability value function directly from visual observations to estimate the safe operating region. The learned safety critic gates policy optimization by separating reward maximization within feasible regions from recovery near unsafe states, avoiding persistent reward-cost trade-offs. To enable scalable supervision in visual environments, we introduce rubric-based VLM safety scores that convert semantic safety feedback into structured critic targets without requiring manual cost labels. Across five navigation and manipulation benchmarks spanning multiple VLA backbones, ShieldVLA reduces cumulative safety cost by 57% on average and improves task success rate by +0.13 over SafeVLA.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Safety and adversarial attacks, one of 13 directions in Vision-language-action models. Builds on 30 of its 37 references that are in the map. First posted on arXiv 2 Sep 2026.
Builds on
30 of 37 references.
Closest ancestors · 1
Same direction, newest first
Other references · 29
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2025Qwen2.5-VL Technical Reportcited by 5,587
- 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 3,080
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2024OpenVLA: An Open-Source Vision-Language-Action Modelcited by 2,887
- 2025Qwen3-VL Technical Reportcited by 2,793
- 2018Addressing Function Approximation Error in Actor-Critic Methodscited by 2,417
- 2022RT-1: Robotics Transformer for Real-World Control at Scalecited by 2,061
- 2016Concrete Problems in AI Safetycited by 1,642
- 2024Octo: An Open-Source Generalist Robot Policycited by 1,484
17 more
- 2025Fine-Tuning Vision-Language-Action Models: Optimizing Speed and Successcited by 883
- 2023Eureka: Human-Level Reward Design via Coding Large Language Modelscited by 571
- 2018Reward Constrained Policy Optimizationcited by 417
- 2020Responsive Safety in Reinforcement Learning by PID Lagrangian Methodscited by 316
- 2023Language to Rewards for Robotic Skill Synthesiscited by 312
- 2018A Lyapunov-based Approach to Safe Reinforcement Learningcited by 297
- 2023Reward Design with Language Modelscited by 261
- 2018Safe Exploration in Continuous Action Spacescited by 247
- 2017Hamilton-Jacobi Reachability: A Brief Overview and Recent Advancescited by 201
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 88
- 2025Chasing the Tail: Effective Rubric-based Reward Modeling for Large Language Model Post-Trainingcited by 53
- 2023SPOC: Imitating Shortest Paths in Simulation Enables Effective Navigation and Manipulation in the Real Worldcited by 48
- 2025Generalizing Safety Beyond Collision-Avoidance via Latent-Space Reachability Analysiscited by 45
- 2025OmniVLA: An Omni-Modal Vision-Language-Action Model for Robot Navigationcited by 38
- 2020Safe Reinforcement Learning with Natural Language Constraintscited by 23
- 2025A Physics-Informed Machine Learning Framework for Safe and Optimal Control of Autonomous Systemscited by 12
- 2024Semi-Supervised Safe Visuomotor Policy Synthesis using Barrier Certificatescited by 7
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026HazardArena: Evaluating Semantic Safety in Vision-Language-Action Models
- 2025VLSA: Vision-Language-Action Models with Plug-and-Play Safety Constraint Layer
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policies
- 2026Neuro-Symbolic Safety Guidance for Vision-Language-Action Models via Constrained Flow Matching
- 2026SafeVLA-Bench: A Benchmark for the Success-Safety Gap in Vision-Language-Action Models
- 2026LIBERO-Safety: A Comprehensive Benchmark for Physical and Semantic Safety in Vision-Language-Action Models
- 2026Vision-Language-Action Safety: Threats, Challenges, Evaluations, and Mechanisms
- 2026Towards General Language-Conditioned Latent Safety Filters