✗ Failed on benchmark 2026

Observer-Reconstructed Neural Safety Filter

Implementation & benchmark of arXiv:2607.15961 — Dynamic Constraint Reconstruction Based Control Barrier Functions for Safety-Critical Control of High-Dimensional Manipulators

Usefulness8/10
Difficulty6/10
Novelty6/10

Source paper: Dynamic Constraint Reconstruction Based Control Barrier Functions for Safety-Critical Control of High-Dimensional Manipulators arXiv:2607.15961 ⓘ · analyzed Aug 30, 2026

AI-generated research hypothesis, automatically tested. Not peer-reviewed.

Idea description

Wrap a neural policy with a control-barrier safety layer whose constraints use an online estimate of model mismatch or environmental disturbance. Instead of enforcing a fixed worst-case bound at every state, the layer reconstructs the current effective dynamics from an extended state observer and adds only the margin required by the remaining estimation error.

Formulas

$$\psi_0(x)=h(x),\qquad \psi_1(x)=\dot h(x)+\lambda_1h(x),\qquad \psi_2(x,u)=\dot\psi_1(x,u)+\lambda_2\psi_1(x).$$
$$u^*=\arg\min_{u}\frac{1}{2}\|u-u_{\mathrm{NN}}(x)\|_2^2\quad\mathrm{s.t.}\quad \hat\psi_2(x,\hat d,u)\geq\kappa\varepsilon_d,\quad u\in\mathcal U.$$$
$$\|d-\hat d\|\leq\varepsilon_d\quad\Longrightarrow\quad \psi_2(x,u)\geq0\ \text{whenever}\ \hat\psi_2(x,\hat d,u)\geq\kappa\varepsilon_d.$$$

Mathematical statement

Let the learned policy output a nominal action $u_{\mathrm{NN}}(x)$ for state $x$, and let the unknown dynamics error be represented by an additive disturbance $d$. An extended observer estimates $d$ as $\hat d$ and provides an error bound $\|d-\hat d\|\leq\varepsilon_d$. For a scalar safety function $h(x)\geq0$ with relative degree two, define $\psi_0=h$, $\psi_1=\dot h+\lambda_1h$, and $\psi_2=\dot\psi_1+\lambda_2\psi_1$, where $\lambda_1,\lambda_2>0$. The safety filter chooses the action closest to the neural action subject to $\hat\psi_2(x,\hat d,u)\geq\kappa\varepsilon_d$, where $\kappa$ bounds the disturbance-to-barrier channel. If the observer error bound is valid and the filter remains feasible, the positive set defined by $h\geq0$ and $\psi_1\geq0$ is forward invariant. The adaptive term $\kappa\varepsilon_d$ reduces conservatism while protecting against observer error.

Implementation notes

Use this as the final action layer for an RL policy, model-based controller, or neural inverse-dynamics policy. The network receives observation $x$ and outputs $u_{\mathrm{NN}}$; an observer maintains an estimate of the unmodeled force and a QP projects the action into the reconstructed safe set. For a first implementation, use a two-dimensional point mass or pendulum with a learned residual dynamics model. At each step, update an augmented observer using $\dot{\hat x}=f_\theta(\hat x,u)+\hat d+L_x(x-\hat x)$ and $\dot{\hat d}=L_d(x-\hat x)$, compute $\hat\psi_2$, and solve the QP above. The HOCBF derivatives and QP are computed online; $\hat d$ is estimated, while $\varepsilon_d$ is calibrated from a validation disturbance stream using a high quantile of $\|d-\hat d\|$. The first cheap experiment should compare PPO or SAC with no filter, a fixed-margin robust CBF, and this observer-reconstructed filter on a point mass with switching bounded disturbances. Measure violations, tracking error, and projection norm while sweeping disturbance amplitude and observer gain. The predicted signature is zero violations while the empirical residual satisfies $\|d-\hat d\|\leq\varepsilon_d$ and a lower intervention norm than the fixed-margin filter. Underestimated margins should produce a sharp failure boundary when the residual exceeds $\varepsilon_d$.

Verification

Failed on benchmark

Stage 1 · Toy mechanism gate: Passed ✓

Stage 2 · Mechanism transferred to benchmark: Not reproduced ✗

Stage 2 · Practical benchmark result: No measurable effect

Methodology: 8 paired seeds, permutation test (p<0.05) against a learning-rate-tuned baseline. How verification works

Stage 1 — Mechanism check agent confidence 8/10

Built and numerically tested an observer-reconstructed HOCBF filter for a disturbed double integrator, including a 1D projection QP, disturbance observer, calibration, and parameter sweeps. The core implication passed 200,000 valid-bound Monte Carlo cases with 0 failures; underestimating the residual bound produced a 50.0% algebraic failure rate. The predicted mechanism appeared clearly: observer gain reduced q95 residual from 1.925 at gain 0.02 to 0.000006 at gain 0.8, and true barrier violations fell from 35 at 0.25x the maximum residual to 0 at 1.0x. However, the q95 calibration was not conservative enough in this switching-disturbance toy and caused 35 true barrier-channel violations, so this is evidence for the mechanism rather than a demonstrated practical win over the fixed robust filter.

Agent confidence
8/10
Baseline
Fixed robust CBF margin eps=1.2: 0 physical boundary crossings across 4 disturbance phases; intervention 32.67-32.88 action-time units; minimum position 0.643-0.806.
Idea
Observer filter, gain=0.2 and q95-calibrated eps=0.403: 0 physical crossings but 35 true psi2 violations per phase; intervention 32.509-32.519, about 0.5-1.1% below fixed. With eps equal to measured maximum residual 1.92: 0 psi2 violations and 0 crossings; underbound factors 0.25/0.5/0.75/0.9 yielded 35/20/10/5 violations.

Limitations: Only a scalar double-integrator was tested, with exact disturbance observation and a simplified discrete observer rather than a full noisy extended-state observer. No PPO/SAC training, learned residual model, continuous multidimensional QP, measurement noise, feasibility stress test, or wall-clock comparison was evaluated; q95 calibration was not validated against the worst-case switching residual.

How to run: python3 observer_cbf_experiment.py

Stage 2 — Benchmark vs. tuned baseline (arXiv:2607.15961)

Ahead of the baseline (−0.1%) but not statistically significant (p=1, wins 1 / 8 paired seeds).

Benchmark
Dynamics forecasting
Model
rnn_small
Paired seeds
8
Baseline mean
0.0087
Idea mean
0.0087
Effect (Δ)
-0 (−0.1%; negative = idea better)
Wins
1 / 8 paired seeds
p-value
1 (permutation test, 20 000 shuffles)
Smallest detectable effect
±0.3%
Mechanism
Not confirmed ✗
Practical effect
No effect
Baseline tuning
swept over 9 configs
Limitations:

The registered dynamics benchmark is supervised pendulum rollout prediction rather than closed-loop RL control, so the safety layer was represented as a prediction-space angle projection. No noisy measurements, learned residual model, multidimensional QP, feasibility failures, or PPO/SAC training were tested; the selected configuration produced no active projection.

How to run: python3 bench_run.py

Verdict computed by deterministic test code from paired-seed statistics — not by the language model.

Stage 2 — Benchmark latest Failed ✗

Agent confidence: 9/10

The observer-reconstructed safety projection was implemented and evaluated on the registered dynamics/rnn_small benchmark with identical separately trained systems. The core bound implication passed 200,000 valid-bound samples with zero failures, but the benchmark task metric showed no significant improvement: baseline MSE 0.0086620663 versus idea MSE 0.0086556738, paired delta -0.0000063924, permutation p=1.0. The trained-model mechanism signature was not confirmed because both systems had zero projection activity.

Baseline
Full 8-seed MSE mean 0.008662066247779876, std 0.0031931794676512606.
Idea
Full 8-seed MSE mean 0.008655673824250698, std 0.0031918931544755837.

Benchmark result

Ahead of the baseline (−0.1%) but not statistically significant (p=1, wins 1 / 8 paired seeds).

Benchmark
Dynamics forecasting
Model
rnn_small
Paired seeds
8
Baseline mean
0.0087
Idea mean
0.0087
Effect (Δ)
-0 (−0.1%; negative = idea better)
Wins
1 / 8 paired seeds
p-value
1 (permutation test, 20 000 shuffles)
Smallest detectable effect
±0.3%
Mechanism
Not confirmed ✗
Practical effect
No effect
Baseline tuning
swept over 9 configs
Limitations:

The registered dynamics benchmark is supervised pendulum rollout prediction rather than closed-loop RL control, so the safety layer was represented as a prediction-space angle projection. No noisy measurements, learned residual model, multidimensional QP, feasibility failures, or PPO/SAC training were tested; the selected configuration produced no active projection.

How to run: python3 bench_run.py

Artifacts

Implementation overview ⬇ Download all as ZIP 6 files · code, reports and structured results