A Safe Action Is Not Enough: Feasible-Future Decoding for Vision-Language-Action Policies
On the map: Vision-language-action models → Failure recovery and robustness also fits: Safety and adversarial attacks
Abstract (arXiv)
A safe action is not necessarily a viable one. A frozen vision-language-action (VLA) policy can favor a locally admissible move that leaves no policy-supported route to safe task completion. We call this the feasibility-likelihood gap: likelihood ranks the next move, while feasibility depends on the futures it leaves open. To bring those futures into the decision, we derive the exact next-block marginal of the history-conditioned policy-environment trajectory law restricted to safe task completion. The derivation reveals a candidate-dependent feasible-future mass: its support records whether safe completion remains possible under the frozen continuation process, while its magnitude measures how much weighted safe-completion mass remains. Since exact evaluation is impractical online, we develop a selective finite-candidate approximation and establish conditions for recovering the best retained viable candidate. Our alarm-triggered, training-free reranker VICS-G lowers mean cumulative safety cost by 1.9%-57.5% across six Safety-CHORES settings while remaining within 2.5 percentage points of policy sampling in success and 0.82 steps in mean episode length. Our approach offers a promising and practical path toward safer task completion, grounded in an exact policy-relative target yet requiring neither policy retraining nor online rollouts.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Failure recovery and robustness, one of 13 directions in Vision-language-action models. First posted on arXiv 4 Oct 2026.
Builds on
No reference list yet.
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026HazardArena: Evaluating Semantic Safety in Vision-Language-Action Models
- 2026Are Vision-Language-Action Models Robust to One-Step Observation Perturbations?
- 2026Look Before You Leap: Distilling Tree Search into Action Evaluation for Frozen VLA Models
- 2026Vision--Language Signals in Constrained RL: Safety Gains Without Anticipation
- 2026SafeVLA-Bench: A Benchmark for the Success-Safety Gap in Vision-Language-Action Models
- 2026Concept-Based Dictionary Learning for Inference-Time Safety in Vision Language Action Models
- 2026Does a Learned Corrector Beat a Simple Retreat? Evidence from a Frozen VLA
- 2026It Is Not Seeing the Hazard: A Frozen Vision-Language Safety Score Measures Its Caption Bank