VLA-Tug

VLA-Tug: Anticipating When and How Vision-Language-Action Models Fail via Calibrated Latent Probing

Anonymous authors

Paper under review

Anticipate the failure. Name its mode. Bound the errors.

A small probe reads the latent layers of a Vision-Language-Action model while it acts. It raises an alarm before the failure, predicts how the policy fails, and its alarm threshold is calibrated to hold false-alarm and missed-detection targets.

Overview of VLA-Tug: the probe on the VLA's latent layers, its three heads, and the calibrated alarm.
Overview. We introduce VLA-Tug, a probe on the VLA backbone embeddings that predicts failures and their mode. (a) A recurrent encoder maps the embedding into a latent failure space; a score head and a calibrated trigger raise the alarm, and a mode head then predicts the failure mode. (b) VLA-Tug alarms before the failure, allowing early stopping or intervention by an expert model.

Interactive demo

Choose a rollout of an unseen task and play it. The probe's state, the scores of three methods and the predicted failure mode follow the video.

(a) VLA-Tug: from the backbone embedding to the alarm and the predicted failure mode The views turn slowly; drag one to turn it yourself, double-click to reset.
Agent view
Wrist view
Instruction
VLA
Backbone

Backbone embedding

Action expert
Action chunk
VLA-Tug
Latent state encoderLSTM
Latent failure space
Failure score headMLP

Calibrated trigger

No alarm

Failure mode headMLP
Predicted failure mode top 3

VLA-Tug probes the VLA's backbone embedding and maps it into a latent failure space.

Expert modelearly stop or intervention

current step   VLA-Tug alarm   × annotated failure time

(b) Runtime failure detection
Agent view
Wrist view

alarm   dashed line: calibrated threshold   annotated failure time and the on-time window before it

Abstract

Vision-Language-Action models (VLAs) enable general-purpose embodied intelligence, but their performance is brittle under distribution shift, where unanticipated failures can damage equipment or endanger people. Deploying VLAs in real-world systems therefore requires a runtime monitor that is timely, calibrated, and informative while being efficient enough to run on the edge. Existing methods fail to fulfill these requirements. We present VLA-Tug, a lightweight probe over the latent layers of a VLA backbone that improves early failure detection and bounds the missed-detection and false-alarm rates, with minimal inference overhead. We show that supervising on the pre-failure segment of a trajectory increases early failure detection at matched false-positive rates by up to 30% over the strongest learned baseline. Under shift to unseen tasks, the bounds on missed-detection and false-alarm rates remain valid in up to 86% of runs, versus at most 21% for baselines. Unlike existing methods, VLA-Tug predicts the failure mode to enable corrective actions, raising top-3 accuracy on unseen tasks by up to 44% over a majority baseline. We release a dataset of 3,180 annotated manipulation episodes to support future work on latent failure detection in VLAs.

Probe the latent layers. Calibrate the alarm.

1

Pool

Average the backbone embedding of every policy step over the agent-image, wrist-image and language tokens: a 6144-d vector per step.

2

Train

Train a probe on the steps that precede a failure: an LSTM over the embeddings with a failure-score head, a failure-mode head and a semantic (CLIP) head.

3

Calibrate

Set the alarm threshold on held-out rollouts with max-conformal prediction or Learn-then-Test, which bounds the false-positive rate and the early true-positive rate together.

4

Evaluate

Score against annotated failure times: the area under the early true-positive rate versus false-positive rate curve up to 40%.

Results

TODO: one sentence on the headline result. Numbers must match the paper's tables.

Early failure detection on seen and unseen tasks: the area under the early-TPR vs. FPR curve up to an FPR of 40% (in %, higher is better), the mean over the runs of a setting, with the standard deviation over them after the ±; the number of runs and a qualitative difficulty (more stars, harder) are under the name of the setting (seeds; LIBERO-X skill: one fold per held-out skill; real robot: 5 seeds, each with one fold per held-out task, 8 folds). Seen: held-out episodes of training tasks; unseen: held-out tasks. Cal.: calibrator (MC max-conformal, FC functional conformal). Cost on LIBERO-X (lower is better): fit time, memory to score a new episode, and per-step latency on a GPU and a CPU. Dashes: not available. Best in bold, second best in italics.
MethodCal.LIBERO-10 π0.5LIBERO-10 GR00TLIBERO-X taskLIBERO-X signatureLIBERO-X skillReal robotCost (LIBERO-X)
3 seeds3 seeds3 seeds3 seeds8 folds5 seeds × 8 folds
difficulty *difficulty *difficulty *difficulty **difficulty ***
SeenUnseenSeenUnseenSeenUnseenSeenUnseenSeenUnseenSeenUnseenFit (s)State (MB)GPU (ms)CPU (ms)
SAFE-LSTMFC75.5±13.434.9±3.574.1±13.051.2±8.464.6±3.540.4±2.364.7±7.441.2±7.162.5±2.430.1±8.544.5±13.525.1±18.843.526.20.0660.86
SAFE-MLPFC74.1±2.039.9±15.162.9±18.239.2±9.459.3±2.042.3±2.953.7±2.446.2±2.356.8±6.023.5±12.440.1±15.920.2±16.6114.56.30.0340.032
STACMC33.8±5.136.4±5.324.2±7.517.5±9.821.0±2.328.0±0.125.6±3.728.7±0.324.6±5.021.5±8.0––0.00.021.30–
ActProbeMC39.3±11.326.7±2.632.4±16.830.1±9.312.6±4.222.7±4.611.9±3.113.9±1.520.3±9.413.6±7.1––7.10.090.150.11
FailureSpotFC61.9±3.036.2±21.036.9±19.844.7±18.626.3±2.120.4±1.228.0±2.526.2±5.630.4±3.419.6±7.9––9.26.40.0330.029
MahalanobisFC85.7±4.140.2±15.570.7±6.429.2±8.769.6±6.230.6±2.264.4±3.022.3±4.071.2±3.115.9±9.643.0±16.519.6±2.515.2302.00.415.37
EuclideanFC73.1±4.424.2±10.656.0±6.823.1±11.470.5±4.228.5±3.065.4±2.119.7±0.868.5±4.819.0±6.545.1±14.28.3±12.80.4305613.19368.83
PCA-KMeansFC35.7±12.212.9±5.144.5±8.720.0±0.031.7±3.425.0±1.235.3±1.832.5±1.737.8±7.720.7±7.124.0±11.419.4±7.739.91.60.120.055
VLA-Tug (ours)MC75.1±12.547.9±20.970.5±10.447.4±13.567.9±5.040.2±1.267.0±6.647.0±0.667.8±4.839.0±7.047.6±10.925.8±11.66.826.50.120.94

Dataset

Pooled embeddings and annotations of simulated rollouts of two VLAs (GR00T-N1.7 and π0.5) on LIBERO-10 with occlusions and on LIBERO-X, with failure times and failure modes. Dataset: link soon.

Code and reproduction

The code covers the probe, the calibration (SAFE band, max-conformal, Learn-then-Test), the baselines, the metrics and the scripts that produce the paper's tables and figures.

pip install -e ".[dev]"
python -m cli.download liberox_groot       # pooled features, targets, manifest, splits
python -m cli.train --datasets liberox_groot
python -m cli.evaluate --datasets liberox_groot
python -m cli.figures                      # main table, ablations, curves

These commands are taken from the repository README. During review the code is at the anonymous mirror linked above.

BibTeX

@misc{vla-tug,
  title  = {VLA-Tug: Anticipating When and How Vision-Language-Action Models Fail via Calibrated Latent Probing},
  author = {Anonymous},
  year   = {2026},
  note   = {Under review}
}

TODO: replace with the final entry (authors, arXiv id) once the paper is public.