Reflex-plan : a safety monitoring architecture for thinking fast and slow
(2025) p.562-569- Abstract
- Ensuring functional safety is crucial for the deployment of autonomous systems in real-life dynamic environments, as they must operate reliably and safely among humans. However, existing safety systems are designed with a closed-world assumption and can over-constrain the system by shutting down the robot at every safety violation, limiting the robot’s ability to complete its tasks. To address this problem, we present a novel operational safety approach supported by our software architecture Reflex-Plan, where a safety monitor proactively influences high-level planning to enable safe and adaptive recovery behaviors, thus preventing unnecessary stops. Unlike traditional safety monitors that primarily react to violations through predefined... (More)
- Ensuring functional safety is crucial for the deployment of autonomous systems in real-life dynamic environments, as they must operate reliably and safely among humans. However, existing safety systems are designed with a closed-world assumption and can over-constrain the system by shutting down the robot at every safety violation, limiting the robot’s ability to complete its tasks. To address this problem, we present a novel operational safety approach supported by our software architecture Reflex-Plan, where a safety monitor proactively influences high-level planning to enable safe and adaptive recovery behaviors, thus preventing unnecessary stops. Unlike traditional safety monitors that primarily react to violations through predefined stop mechanisms, our software architecture follows a two-step process: the fast-thinking safety monitor provides immediate reflexive responses, while the slow-thinking high-level planner processes the safety monitor’s feedback to plan recovery strategies. This allows the robot to respond quickly to safety-critical situations while maintaining adaptability for long-term autonomy. We validate the effectiveness of Reflex-Plan through real-world robot experiments in a mock hospital environment. Our experimental results confirm that keeping immediate safety responses within the safety monitor ensures fast reactivity. Recovery strategies are delegated to the reasoning layer, which improves adaptation, reduces failures, and supports stable operation without external intervention. (Less)
Please use this url to cite or link to this publication:
https://lup.lub.lu.se/record/65592667-bac4-4c27-b0fb-d5ff767af70d
- author
- Rizwan, Momina
LU
; Reichenbach, Christoph
LU
and Krueger, Volker
LU
- organization
- publishing date
- 2025-08-17
- type
- Chapter in Book/Report/Conference proceeding
- publication status
- published
- subject
- host publication
- 2025 IEEE 21st International Conference on Automation Science and Engineering (CASE) : 17-21 Aug. 2025 - 17-21 Aug. 2025
- pages
- 562 - 569
- publisher
- IEEE
- external identifiers
-
- scopus:105018301814
- DOI
- 10.1109/CASE58245.2025.11164059
- project
- RobotLab LTH
- language
- English
- LU publication?
- yes
- id
- 65592667-bac4-4c27-b0fb-d5ff767af70d
- date added to LUP
- 2025-12-16 11:24:15
- date last changed
- 2025-12-17 04:01:32
@inproceedings{65592667-bac4-4c27-b0fb-d5ff767af70d,
abstract = {{Ensuring functional safety is crucial for the deployment of autonomous systems in real-life dynamic environments, as they must operate reliably and safely among humans. However, existing safety systems are designed with a closed-world assumption and can over-constrain the system by shutting down the robot at every safety violation, limiting the robot’s ability to complete its tasks. To address this problem, we present a novel operational safety approach supported by our software architecture Reflex-Plan, where a safety monitor proactively influences high-level planning to enable safe and adaptive recovery behaviors, thus preventing unnecessary stops. Unlike traditional safety monitors that primarily react to violations through predefined stop mechanisms, our software architecture follows a two-step process: the fast-thinking safety monitor provides immediate reflexive responses, while the slow-thinking high-level planner processes the safety monitor’s feedback to plan recovery strategies. This allows the robot to respond quickly to safety-critical situations while maintaining adaptability for long-term autonomy. We validate the effectiveness of Reflex-Plan through real-world robot experiments in a mock hospital environment. Our experimental results confirm that keeping immediate safety responses within the safety monitor ensures fast reactivity. Recovery strategies are delegated to the reasoning layer, which improves adaptation, reduces failures, and supports stable operation without external intervention.}},
author = {{Rizwan, Momina and Reichenbach, Christoph and Krueger, Volker}},
booktitle = {{2025 IEEE 21st International Conference on Automation Science and Engineering (CASE) : 17-21 Aug. 2025}},
language = {{eng}},
month = {{08}},
pages = {{562--569}},
publisher = {{IEEE}},
title = {{Reflex-plan : a safety monitoring architecture for thinking fast and slow}},
url = {{http://dx.doi.org/10.1109/CASE58245.2025.11164059}},
doi = {{10.1109/CASE58245.2025.11164059}},
year = {{2025}},
}