Skip to content

SafeLoop: Risk-Aware Rollback for Vision-Language-Action Manipulation

Sep 2026 · 0 citations
Computer Science

TL;DR

SafeLoop is introduced, a non-invasive external wrapper that adds hazard prediction and rollback-based recovery to a VLA model without changing its parameters, and achieves a stronger overall safety-success trade-off than alternative methods.

Abstract

Recent vision-language-action (VLA) models are promising for general-purpose manipulation, but long-horizon execution remains fragile. Small state-estimation or control errors can lead to irreversible failures (e.g., collisions and object drops). Avoiding these risks requires a proactive safety mechanism capable of anticipating hazards. In this paper, we introduce SafeLoop, a non-invasive external wrapper that adds hazard prediction and rollback-based recovery to a VLA model without changing its parameters. SafeLoop trains a risk predictor from vision and proprioception to output four values: the probability and time-to-hazard for body collisions and for object failures. A lightweight controller then chooses one of three actions based on the predicted risk: continue execution (noop), save a safety checkpoint (record), or retreat in joint space (rollback). Rollback moves the robot back to a recent safe waypoint and queries the base policy again, which may yield an alternative continuation. Across 24 LIBERO tasks (16 random seeds each) and three real-robot tasks (25 rollouts each), SafeLoop achieves a stronger overall safety-success trade-off than alternative methods, reducing hazard cases by roughly 70% while preserving task success and the base-policy control rate. Project code is available at https://github.com/Loule0-0/SafeLoop/tree/release/safeloop.

View source

Similar papers

Preprint Sep 2026

VLA-Corrector: Stage-Aware Observable State Understanding for Prompt-Based Closed-Loop Recovery of Vision-Language-Action Policies

Results show that observable visual-proprioceptive-action history is sufficient to infer latent task states and enable practical failure recovery for existing VLA policies, and the proposed approach substantially improves closed-loop reliability under diverse perturbations.

Chang-Nan Song, Bin Qian, Yan Feng et al. · 0 citations
Preprint Sep 2026

SafeRI: Recognition and Intervention for Token-Level Safety Intervention in Large Vision Language Models

This work proposes a streaming recognition and gated LoRA framework for intrinsic VLM safety, which is trained from unsafe prefixes, transition statements, and safe continuations, so that it learns to redirect unsafe generations back to safe responses after activation.

Cao-Yuan Ma, Tian Gu, Wen-Pu Liu et al. · 0 citations
Preprint Aug 2026

Imagining Recovery: Inference-Time Counterfactual Realignment for Vision-Language-Action Models

Counterfactual Realignment (CoRe), a training-free framework that recovers a frozen VLA at inference time without failure data, is proposed, a training-free framework that recovers a frozen VLA at inference time without policy fine-tuning or failure-specific recovery training.

Yan-Yan Zhang, Di-Sheng Liu, Kai Ye et al. · 4 citations
Preprint Sep 2026

SafeStage: Evaluating Safety Before, During, and After Vision-Language-Conditioned Robot Manipulation

Vision-language-conditioned robot policies integrate perception, language understanding, and control for general-purpose manipulation. However, existing evaluations often focus on task success, isolated physical constraints, semantic refusal, or realized physical damage, providing limited insight into where safety fail...

Jin-Zhu Luo, Qi Zhang, Wei Wang et al. · 0 citations
Preprint Sep 2026

ProAct-VLM: Pre-Failure Vision-Language Task Replanning with Continuous Perception Feedback

Long-horizon robotic tasks are vulnerable to unexpected environmental changes that can render planned actions ineffective or unsafe. To address this, robots must detect such changes as they occur, interpret their impact, and adjust their actions accordingly. Traditional rule-based decision-making pipelines are brittle...

Ahmed N. Ahmed, Omar Moured, Mughni Irfan Mohammed Abdul et al. · 0 citations
#artificial intelligence Preprint Oct 2026

A Safe Action Is Not Enough: Feasible-Future Decoding for Vision-Language-Action Policies

This work develops a selective finite-candidate approximation and establishes conditions for recovering the best retained viable candidate in a frozen vision-language-action policy, grounded in an exact policy-relative target yet requiring neither policy retraining nor online rollouts.

Tu Nguyen, Matthieu Zimmer, Vu Anh Vu et al. · 0 citations

Related blog posts

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.