Pre-VLA: Preemptive Runtime Verification for Reliable Vision-Language-Action and World-Model Rollouts

Pre-VLA: Preemptive Runtime Verification for Reliable Vision-Language-Action and World-Model Rollouts

Zhen Sun, Yongjian Guo, Haoran Sun, Luqiao Wang, Wei Lu, Jiachi Ji, Shengzhe Ji, Junwu Xiong, Zhijun Meng · University of Warwick, University of Cambridge, HIT · 2026

Summary

A lightweight runtime verification layer that preemptively prunes unsafe VLA and world-model actions before they reach robot hardware, eliminating collision and droppage failures.

Abstract Summary

Deployment of large Vision-Language-Action (VLA) models and generative world models in safety-critical robotics remains risky because these models can hallucinate or produce out-of-distribution actions. Pre-VLA introduces a lightweight runtime verification layer that intercepts VLA and world-model rollouts before dangerous commands reach the robot hardware. The authors propose a formal specification language for embodied tasks expressed over spatio-temporal predicates such as "gripper must not collide with fragile objects during approach" and "carried items must remain upright." A learned monitor, trained on safe and unsafe action sequences, preemptively prunes action chunks that violate these specifications. Unlike guardrails that only filter after generation, Pre-VLA operates inside the rollout loop, allowing the policy to recover by resampling from the remaining safe distribution. Pre-VLA introduces minimal runtime overhead—less than 5 milliseconds per action—and can operate on embedded compute platforms. Evaluation on a household mobile manipulator shows that Pre-VLA eliminates collision and droppage failures caused by VLA hallucinations without requiring any model retraining, making it a practical plug-and-play safety module for deployed embodied AI systems.

Key Points

  • Runtime verification layer for VLA and world-model safety.
  • Formal spatio-temporal task specifications for embodied tasks.
  • Learned monitor preemptively prunes unsafe action sequences.
  • Minimal overhead under 5 ms per action, deployable on embedded compute.
  • Eliminates collision and droppage failures on household mobile manipulator.

Runtime Safety Verification Framework: Pre-VLA

Pre-VLA supports dual-mode deployment, consisting of a base VLA policy and an action-conditioned world model, as shown in Fig. 2 . At each planning cycle $t$, the VLA autoregressively generates a candidate action chunk $a_{t}^{K}$ from the multimodal context. Before the action chunk is either executed on the physical robot or used by the WM for next-frame prediction, it is first evaluated by Pre-VLA .

VLA Execution in physical actuator: Intercepts dangerous actions to prevent physical collisions.

Runtime Safety Verification Framework: Pre-VLA — Pre-VLA: Preemptive Runtime Verification for Reliable Vision-Language-Action and World-Model Rollouts
Fig. 3 : Overall architecture of Pre-VLA with dual-modal data used during training.

Experiment

We adopt RynnVLA-002 [ 24 ] as the target VLA/WM baseline model. RynnVLA-002 contains both a VLA action generation branch and a world model future state prediction branch, making it suitable for evaluating Pre-VLA in both closed-loop execution and WM imagination scenarios. Pre-VLA is built upon an improved WorldVLA [ 11 ] unified multimodal backbone and equipped with a retrained action verification head.

Experiment — Pre-VLA: Preemptive Runtime Verification for Reliable Vision-Language-Action and World-Model Rollouts
Fig. 4 : Closed-loop execution comparison with and without Pre-VLA .

Sources and Demonstrations

Figures are reproduced from Sun et al. See the full paper for experimental details and the project page, when the paper links one, for demonstrations and videos.

Share

Related Papers

Uncertainty Quantification for Flow-Based Vision-Language-Action Models
RSS 2026 — Best Paper Award

Uncertainty Quantification for Flow-Based Vision-Language-Action Models

Ralf Römer, Maximilian Seeliger, Saida Liu et al.

Quantifies epistemic uncertainty in flow-matching VLAs using velocity-field disagreement (VFD) across a small ensemble, enabling failure detection at deployment and sample-efficient active fine-tuning (SAVE).

vla foundation-models safety manipulation
Code PDF Advanced
GitHub ★ —