Safe Multi-Robot Coordination via VLM-LLM Reasoning and Reachability Analysis
Organizations: TUM School of Computation, Information, and Technology (CIT), Technical University of Munich (TUM), Heilbronn, Germany. · Institute for Intelligent Cyber-Physical Systems (ICPS), Heilbronn University of Applied Science, Heilbronn, Germany.
Abstract
Safe coordination in heterogeneous machine-to-machine (M2M) robotic systems is challenging when robots differ in sensing capabilities, environmental awareness, and motion execution roles. This paper presents a centralized safety-aware M2M framework for cooperative goal-directed navigation in a heterogeneous mobile robot team comprising a vision-capable quadruped and a camera-less robotic vehicle. The objective is to guide both platforms toward a goal region while avoiding static and dynamic obstacles and preventing unsafe inter-robot interactions. Under the principle of shared perception, the vision-capable robot provides semantic environmental awareness through a centralized server over an MQTT broker, enabling the camera-less platform to navigate using this shared scene representation alongside its own odometry, IMU, and state feedback. A vision-language model (VLM) interprets the visual stream, and the extracted semantic data is mapped into conservative metric geometric constraints, including inflated obstacle sets, safe corridors, and goal regions. A large language model (LLM) proposes high-level task allocations, while physical command authority is restricted to a robot-specific zonotope reachability gate. This verification engine propagates independent reachable tubes to evaluate obstacle avoidance, safe-corridor containment, and inter-robot separation predicates before approving commands. Online experiments across clear-path and dynamic-obstacle scenarios show that the pipeline reliably approves safe motion, triggers conservative replanning or holding maneuvers upon constraint violation, and enforces a strict architectural separation between advisory semantic reasoning and formally verified motor execution.
Figures & tables
| Capability axis | ||||||||
| System | Category | SEM | SYM | GATE | MR | XFER | INT | Safety mechanism reported |
| Language-model planning and vision–language–action models | ||||||||
| SayCan [ 6 ] | LLM planning | ✓ | ✓ | ✗ | ✗ | ✗ | ✗ | Affordance scoring; no kinodynamic verification. |
| PaLM-E [ 11 ] | VLA model | ✓ | ✓ | ✗ | ✗ | ✗ | ✗ | End-to-end; safety implicit in training data. |
| RT-2 [ 40 ] | VLA model | ✓ | (✓) | ✗ | ✗ | ✗ | ✗ | Co-trained action tokens; no runtime gate. |
| Code-as-Policies [ 23 ] | LLM code generation | ✓ | ✓ | ✗ | ✗ | ✗ | ✗ | Programmatic guards written by the model itself. |
| Component | Pipeline Role | Produced Information | Command Authority |
|---|---|---|---|
| Unitree Go2 | Vision-capable robot; publishes camera frames, odometry, IMU, and robot-state data over MQTT. | ROS 2 image topics; odometry, IMU, and state messages. | None; receives approved commands only. |
| SVEA robot car | Camera-less robot; publishes odometry, IMU, and state; executes independently verified robot-specific commands. | Odometry, IMU, and state messages; used for robot-specific reachability evaluation. | None; receives approved commands only. |
| Mosquitto MQTT | Asynchronous M2M transport for telemetry, status messages, and approved command packets. | Routed state messages, server status, and verified commands. | None; transport layer only. |
| Qwen2.5-VL via Ollama | Semantic interpretation of Go2 camera frames. | Schema-validated JSON scene output with labels, regions, and confidence values. | None; perception evidence only. |
| Qwen3 via Ollama | Symbolic task-level reasoning from validated scene context and robot states. | Symbolic task proposal for downstream reachability verification. | None; symbolic guidance only. |
| Python zonotope module | CORA-style set propagation; robot-specific predicate evaluation. | Safety flag and approved command . | Sole command-approval authority. |
| ID | Scenario | Cycles | Duration (s) | Objective | Predicate stressed |
| S1 | Office room, goal approach | 720 | 24.0 | Establish nominal acceptance: verify the gate approves motion when a traversable corridor and a goal cue are both present and no dynamic obstacle is in the workspace. | , |
| S2 | Stairwell, non-traversable hazard | 361 | 12.0 | Establish maximal rejection: verify that a region which is geometrically open but not traversable is excluded by corridor containment even though no obstacle intersection occurs. | (isolated) |
| S3 | Corridor, pedestrian entry | 421 | 14.0 | Verify dynamic-obstacle handling: compound inflation of a moving human footprint and redirection of the candidate path through the remaining traversable corridor. | |
| S4 | Sustained human tracking | 451 | 15.0 | Verify sustained operation under continuous re-planning at close range, including decision stability and clearance maintenance. | , |
| Total | 1,953 | 65.1 | verified candidate arcs, steps each | ||
| Volume | Gate outcome (%) | Internal safety state (%) | |||||||
|---|---|---|---|---|---|---|---|---|---|
| ID | Scenario | Cycles | Arcs | Approved | Withheld | Safe | Warning | Unsafe | Mean risk |
| S1 | Office, goal approach | 720 | 6,480 | 56.4 | 43.6 | 92.2 | 7.8 | 0.0 | |
| S2 | Stairwell hazard | 361 | 3,249 | 0.0 | 100.0 | 48.5 | 51.5 | 0.0 | |
| S3 | Corridor, pedestrian | 421 | 3,789 | 47.7 | 52.3 | 78.9 | 17.1 | 4.0 | |
| S4 | Sustained tracking | 451 | 4,059 | 37.9 | 62.1 | 18.8 | 12.6 | 68.5 | |
| All scenarios | 1,953 | 17,577 | 39.8 | 60.2 | 64.3 | 19.0 | 16.7 | ||
| Decision | Cycles | Share | Mean risk | Clearance (m) |
|---|---|---|---|---|
| Motion approved | ||||
| PROCEED | 247 | |||
| AVOID PROCEED | 201 | |||
| TURN LEFT | 170 | |||
| TURN RIGHT | 160 | |||
| Motion withheld | ||||
| Class | Detections | Confidence | Range (m) | Min (m) |
|---|---|---|---|---|
| Person | 456 | |||
| Chair | 404 | |||
| Cabinet | 113 | |||
| All | 973 | |||
| Unresolved confidence: 89 ( ), treated as maximum uncertainty. | ||||
| Dynamic: 456 ( ); static: 517 ( ). | ||||
| Condition | Active Predicate(s) | Decision | Status |
|---|---|---|---|
| All predicates satisfied | PROCEED | Approved | |
| Obstacle present; alt. path available | (after redirect) | AVOID+PROCEED | Approved |
| Obstacle-free; corridor violated | REPLAN | Withheld | |
| Obstacle intersection | STOP/HOLD | Withheld | |
| Inter-robot overlap | HOLD | Withheld | |
| Synchronization failure | Gate 1 (Eq. ( 2 )) | HOLD/STOP | Withheld |
| Pipeline Stage | Symbol | Range (ms) | Budget (ms) | Rationale |
|---|---|---|---|---|
| MQTT transport | 5–25 | 15 | Local LAN or loopback broker; single-hop, low contention. | |
| Synchronization & validation | 1–8 | 5 | Timestamp-pair checking, alignment, duplicate and out-of-order rejection. | |
| VLM inference & JSON validation | 350–1200 | 750 | Qwen2.5-VL via Ollama; range depends on GPU availability, image resolution, and prompt complexity. | |
| Semantic-to-geometric conversion | 5–35 | 20 | Homography projection, Minkowski inflation, corridor and goal-region construction. | |
| LLM symbolic reasoning | 120–600 | 300 | Qwen3 via Ollama processing compact JSON scene context and robot states. | |
| Reachability propagation ( ) | 20–160 | 100 | Short-horizon zonotope propagation and three-predicate evaluation per robot; . |
| ID | Condition | Pipeline Modification | Isolated Contribution |
|---|---|---|---|
| B1 | No reachability gate | Reachability module disabled; LLM proposals published without geometric verification. | Role of the reachability gate in preventing unsafe command execution. |
| B2 | No VLM perception | VLM removed; geometric conversion receives no semantic scene evidence. | Role of online semantic perception in constructing obstacle sets, safe corridors, and goal regions. |
| B3 | VLM LLM without reachability | Both language models retained; reachability gate removed. | Whether language-model outputs alone suffice for safe command publication. |
| B4 | No shared perception for SVEA | SVEA does not receive Go2-derived scene evidence and relies only on its own state feedback. | Role of shared perception for the camera-less robot’s safety constraint construction. |
| A1 | Obstacle inflation sweep | varied; remaining pipeline unchanged. | Sensitivity of command approval rate to obstacle buffering. |
| A2 | Perception uncertainty sweep | varied with VLM confidence. | Sensitivity to semantic uncertainty in the safety-margin model. |
Safe Robot Navigation
Safe robot navigation develops methods for reaching goals while avoiding collisions and managing uncertainty, dynamic obstacles, and environmental hazards.
See all 141 papers