A Safety Filter Helps Humanoids Stay Safe Without Sacrificing Their Tasks

A Safety Filter Helps Humanoids Stay Safe Without Sacrificing Their Tasks

Songyuan Zhang, Baljeet Singh, Sarthak Ranjeet Kaingade, Chuchu Fan, Bryan Trinh

7 min read•Oct 11, 2026

FAITH gives a robot a learned safety filter that checks whether an action can keep every body part clear of protected areas, while a separate task policy pursues the assigned job. In simulations and qualitative humanoid trials, it preserved task performance when safe behavior was possible and steered toward lower predicted harm when a shove made avoiding contact impossible.

What Did the Researchers Build?

FAITH is a reinforcement-learning framework for robots that need to perform a task while keeping their bodies out of protected areas. This is a harder problem than checking whether a robot is safe at one instant. A legged robot might be clear of an obstacle now but moving too quickly to avoid it next, or a disturbance might leave it with no way to prevent a collision.

The system separates task performance from safety enforcement. A task policy learns how to pursue a goal using its task reward. A separate, learned safety filter evaluates and adjusts the policy’s actions according to whether safe behavior remains possible. The filter is designed to account for future safety, rather than only reacting to the robot’s current position.

FAITH also handles situations where no safe action is available. Instead of switching to a separate emergency controller, the same filter aims to choose the action with the lowest predicted peak harm. The researchers tested the approach in a double-integrator system, Safety Gym environments, and a high-dimensional humanoid simulation, then demonstrated it on a physical humanoid.

What Were the Key Results?

Across the simulations, the researchers report that FAITH achieved high task performance while maintaining safety in feasible situations. Here, “feasible” means the robot still has some way to avoid violating the safety constraint. When safety was no longer achievable, the controller reduced predicted harm rather than behaving as though a safe option still existed.

The evaluation examined three questions: whether the method could retain task return while staying safe, whether it could reduce harm when a violation was unavoidable, and whether it could scale to whole-body constraints on a humanoid. Comparisons included RCRL, a feasibility-aware primal-dual method; RC-CRPO, a feasibility-aware adaptation of a primal method; and a control-barrier-function approach based on a reduced-order model.

Physical demonstrations showed two different responses to pushes. After a lighter push, the humanoid recovered its balance while avoiding boxes. After a stronger push, it fell away from the protected region, landing on its legs and torso rather than making the penalized head or hand contacts. The supplied text contains no numerical benchmark scores, so exact performance gaps cannot be reported.

Humanoid simulation showing a robot falling away from a protected area

How Does FAITH Work?

The central component is an approximation of an “optimal safety critic.” In reinforcement learning, a critic estimates how good an action or state is expected to be. FAITH’s safety critic instead helps the system judge whether future actions can keep the robot within the safety constraint. That matters for legged robots, where momentum, body shape, and the ability to recover can make a currently clear path unsafe a moment later.

During control, the task policy proposes an action and a learned feedforward safety filter checks it. If the action would violate the learned safety condition, the filter changes the action to keep the robot within the feasible safety region. Because the filter is learned, it can apply this adjustment without solving a costly online search over a high-dimensional action space at each step.

The task policy is trained with PPO, a common reinforcement-learning method, using task reward rather than a competing safety penalty. This separation avoids asking one policy objective to trade off safety against task progress. Under the paper’s stated assumptions—a perfect filter and successful global policy optimization—the filtered policy recovers the constrained optimum on feasible states. That is a conditional result, not a guarantee for a learned system with estimation errors.

When the filter estimates that no safe action exists, it instead moves toward the action with minimum predicted peak harm. This gives the controller a continuous way to respond across feasible and infeasible situations, without a separate mode switch or fallback policy. The approach differs from simply projecting an action to the nearest safe alternative: the filter is built around future safety and includes a response to states where the safe-action set is empty.

Hardware control pipeline for the learned humanoid safety filter

Why Does This Matter for Robotics?

Robots operating near people, equipment, or fragile objects need more than a safe-looking pose at the current moment. Their whole bodies must stay clear of hazards, and the controller must account for whether the robot can still recover after a push or a fast movement. FAITH targets this challenge directly, especially for legged and humanoid systems with many linked parts and limited ability to stop instantly.

Separating task learning from safety filtering could also make it easier to retain useful behaviors while adding a safety layer. In principle, a robot could keep pursuing its assigned task when safe actions exist, rather than having safety penalties constantly compete with task rewards during training. When a disturbance makes safe recovery impossible, minimizing predicted harm offers a more deliberate response than continuing to pursue the original task unchanged.

The demonstrations are relevant to humanoid robots on Robot Overflow, while the broader idea of keeping a robot’s full body clear of protected areas also matters for warehouse robots working around people and infrastructure. The results are an early step toward those settings, not evidence that the method is already validated for routine deployment around people.

What Are the Limitations and Open Questions?

FAITH does not provide formal safety or optimality guarantees in its learned implementation. The paper identifies discounting, finite approximations, and learning errors as reasons the real controller can differ from the idealized result. Its evaluation also focuses on planar protected regions; it does not assess impact severity or human injury.

The physical humanoid results are qualitative demonstrations, not a statistical safety evaluation. The paper does not quantify how LiDAR noise, control latency, or communication delays affect outcomes. Further testing would need to measure these factors and assess more realistic three-dimensional hazards before supporting claims about deployment around people.

Frequently Asked Questions

Does FAITH guarantee that a robot will never violate a safety constraint? No. The idealized method has conditional results, but learning errors and other approximations leave the implemented controller without a formal guarantee.

What happens if avoiding a collision is no longer possible? The filter aims to select the action with the lowest predicted peak harm instead of assuming a safe action exists.

Does the task policy have to trade reward against a safety penalty? No. FAITH trains the task policy using task reward and enforces safety through a separate learned filter.

Was FAITH tested on a physical robot? Yes. A humanoid demonstrated balance recovery after a lighter push and a fall away from the protected region after a stronger push.

Conclusion

FAITH separates task learning from safety filtering and gives the controller a response for both recoverable and unavoidable hazards. Its simulations and humanoid demonstrations are promising, but quantitative hardware testing and stronger safety validation remain important next steps.