Papers
arxiv:2609.13231

ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Models

Published on Sep 2
· Submitted by
Manan Tayal
on Sep 22
Authors:
,

Abstract

Vision-Language-Action (VLA) models demonstrate strong generalization in robotic manipulation and navigation, but existing fine-tuning methods provide limited safety guarantees. Current approaches primarily rely on Lagrangian optimization that enforces safety through soft penalties on expected cumulative cost, often resulting in residual constraint violations or overly conservative behavior. Moreover, learning safety in visual domains is challenging due to the absence of dense per-step safety annotations. We propose ShieldVLA, a safety-aligned fine-tuning framework for VLA models based on Hamilton-Jacobi (HJ) reachability. ShieldVLA learns a model-free approximation of the HJ reachability value function directly from visual observations to estimate the safe operating region. The learned safety critic gates policy optimization by separating reward maximization within feasible regions from recovery near unsafe states, avoiding persistent reward-cost trade-offs. To enable scalable supervision in visual environments, we introduce rubric-based VLM safety scores that convert semantic safety feedback into structured critic targets without requiring manual cost labels. Across five navigation and manipulation benchmarks spanning multiple VLA backbones, ShieldVLA reduces cumulative safety cost by 57% on average and improves task success rate by +0.13 over SafeVLA.

Community

Paper submitter

ShieldVLA fine-tunes VLA policies (tested on OpenVLA-OFT, OmniVLA, SPOC-VLA, etc.) using feasibility-gated PPO: a model-free Hamilton-Jacobi safety critic decides whether the current state still permits safe recovery, and pushes the policy to prioritize recovery when it doesn't. The critic is trained from calibrated VLM rubric scores instead of ground-truth cost labels, avoiding the need for hand-annotated safety costs. Compared against SafeVLA across simulated nav/manipulation benchmarks (Dubins-VL, TurtleBot-Nav, Safety-CHORES, Franka-Reach).

Sign up or log in to comment

Get this paper in your agent:

hf papers read 2609.13231
Don't have the latest CLI?
curl -LsSf https://hf.co/cli/install.sh | bash

Models citing this paper 0

No model linking this paper

Cite arxiv.org/abs/2609.13231 in a model README.md to link it from this page.

Datasets citing this paper 0

No dataset linking this paper

Cite arxiv.org/abs/2609.13231 in a dataset README.md to link it from this page.

Spaces citing this paper 0

No Space linking this paper

Cite arxiv.org/abs/2609.13231 in a Space README.md to link it from this page.

Collections including this paper 0

No Collection including this paper

Add this paper to a collection to link it from this page.