Turning Safety into Competence: Minimally Exploitable Robot Policies via Safety-Filtered Reinforcement Learning
Not on the map. Why?
Abstract (arXiv)
Robots deployed for competitive tasks must outmaneuver their opponents without sacrificing safety. Existing approaches, including safe reinforcement learning (RL), train a single policy to achieve task success and avoid failures simultaneously. This coupling can complicate training and leave the learned policy exploitable by deliberate attacks. We propose Safety to Competence (S2C), a two-stage RL framework that separates safety synthesis from competitive task learning. We formulate competitive interactions as safety-critical Markov games and prove that perfect filtering preserves policy non-exploitability when all players commit to safe maneuvers. S2C learns a robust safety filter via adversarial RL, embeds it in the environment during task policy training, and retains the same filter at deployment. In simulated touchdown games, S2C outperforms eight safe RL baselines, achieving the highest win rate and Elo rating, and the lowest exploitability. Hardware stress tests against a human opponent confirm S2C's competence.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 25 of its 35 references that are in the map. First posted on arXiv 23 Sep 2026.
Builds on
25 of 35 references.
References · 25
- 2017Multi-Agent Actor-Critic for Mixed Cooperative-Competitive Environmentscited by 1,519
- 2017Constrained Policy Optimizationcited by 928
- 2021The Surprising Effectiveness of PPO in Cooperative, Multi-Agent Gamescited by 903
- 2018Reward Constrained Policy Optimizationcited by 397
- 2019Control Barrier Functions: Theory and Applicationscited by 332
- 2020Is Independent Learning All You Need in the StarCraft Multi-Agent Challenge?cited by 281
- 2017A Unified Game-Theoretic Approach to Multiagent Reinforcement Learningcited by 265
- 2017Hamilton-Jacobi Reachability: A Brief Overview and Recent Advancescited by 186
- 2023Learning Agile Soccer Skills for a Bipedal Robot with Deep Reinforcement Learningcited by 111
- 2020Learning Control Barrier Functions from Expert Demonstrationscited by 88
- 2020DeepReach: A Deep Learning Approach to High-Dimensional Reachabilitycited by 81
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 77
13 more
- 2025Generalizing Safety Beyond Collision-Avoidance via Latent-Space Reachability Analysiscited by 44
- 2019Efficient Iterative Linear-Quadratic Approximations for Nonlinear Multi-Player General-Sum Differential Gamescited by 37
- 2025Uncertainty-aware Latent Safety Filters for Avoiding Out-of-Distribution Failurescited by 30
- 2022ISAACS: Iterative Soft Adversarial Actor-Critic for Safetycited by 24
- 2021Predictive control barrier functions: Enhanced safety mechanisms for learning-based controlcited by 13
- 2021Safe Exploration by Solving Early Terminated MDPcited by 13
- 2024Gameplay Filters: Robust Zero-Shot Safety through Adversarial Imaginationcited by 12
- 2023Learning Vision-based Pursuit-Evasion Robot Policiescited by 9
- 2025Safety with Agency: Human-Centered Safety Filter with Application to AI-Assisted Motorsportscited by 6
- 2024Blending Data-Driven Priors in Dynamic Gamescited by 5
- 2024MAGICS: Adversarial RL with Minimax Actors Guided by Implicit Critic Stackelberg for Convergent Neural Synthesis of Robot Safetycited by 5
- 2026Synthesis and Deployment of Maximal Robust Control Barrier Functions through Adversarial Reinforcement Learningcited by 4
- 2025Provably Optimal Reinforcement Learning under Safety Filteringcited by 2
Built on by
Not cited yet.