ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Models
Abstract
Vision-Language-Action (VLA) models demonstrate strong generalization in robotic manipulation and navigation, but existing fine-tuning methods provide limited safety guarantees. Current approaches primarily rely on Lagrangian optimization that enforces safety through soft penalties on expected cumulative cost, often resulting in residual constraint violations or overly conservative behavior. Moreover, learning safety in visual domains is challenging due to the absence of dense per-step safety annotations. We propose ShieldVLA, a safety-aligned fine-tuning framework for VLA models based on Hamilton-Jacobi (HJ) reachability. ShieldVLA learns a model-free approximation of the HJ reachability value function directly from visual observations to estimate the safe operating region. The learned safety critic gates policy optimization by separating reward maximization within feasible regions from recovery near unsafe states, avoiding persistent reward-cost trade-offs. To enable scalable supervision in visual environments, we introduce rubric-based VLM safety scores that convert semantic safety feedback into structured critic targets without requiring manual cost labels. Across five navigation and manipulation benchmarks spanning multiple VLA backbones, ShieldVLA reduces cumulative safety cost by 57% on average and improves task success rate by +0.13 over SafeVLA.
Community
ShieldVLA fine-tunes VLA policies (tested on OpenVLA-OFT, OmniVLA, SPOC-VLA, etc.) using feasibility-gated PPO: a model-free Hamilton-Jacobi safety critic decides whether the current state still permits safe recovery, and pushes the policy to prioritize recovery when it doesn't. The critic is trained from calibrated VLM rubric scores instead of ground-truth cost labels, avoiding the need for hand-annotated safety costs. Compared against SafeVLA across simulated nav/manipulation benchmarks (Dubins-VL, TurtleBot-Nav, Safety-CHORES, Franka-Reach).
This is an automated message from the Librarian Bot. I found the following papers similar to this paper.
The following papers were recommended by the Semantic Scholar API
- Towards General Language-Conditioned Latent Safety Filters (2026)
- Calibrated Predictive Safety for Heterogeneous Robots: An Action-Conditioned JEPA Framework with Model-Based Safety Shields (2026)
- ActSafeGuard: Differentiable and Training-Aligned Constraint Enforcement for Flow-Matching Policies (2026)
- SafeBranch: Branch-Pair Safety Alignment for Embodied Agents (2026)
- ValueFormer: A Causal Transformer Value Function with Stage-Aware Labels for Semi-Autonomous Vision-Language-Action Policies (2026)
- SynthDemo-RL: Breaking the Zero-Reward Barrier in VLA Adaptation with LLM-Guided Synthetic Demonstrations (2026)
- Not All Layers Need Tuning: Diagnosing and Directing Adaptation in Vision-Language-Action Models (2026)
Please give a thumbs up to this comment if you found it helpful!
If you want recommendations for any Paper on Hugging Face checkout this Space
You can directly ask Librarian Bot for paper recommendations by tagging it in a comment: @librarian-bot recommend
Get this paper in your agent:
hf papers read 2609.13231 Don't have the latest CLI?
curl -LsSf https://hf.co/cli/install.sh | bash Models citing this paper 0
No model linking this paper
Datasets citing this paper 0
No dataset linking this paper
Spaces citing this paper 0
No Space linking this paper
Collections including this paper 0
No Collection including this paper