Federated VLA 适配的安全问题:人类纠正数据如何跨机器人共享
When Human Corrections Travel: Safety in Federated VLA Adaptation
一篇立场论文,讲联邦学习共享机器人纠正数据时可能踩的安全坑,还给了可证伪的评估清单,做机器人学习的人可以看看。
arXiv 论文 2610.32888 讨论了 Vision-Language-Action(VLA)策略与联邦学习结合时的安全隐患。作者指出,不同来源的人类纠正数据在模态、安全语义(如紧急程度、行为范围)和隐私敏感度上差异很大,一个平均提升任务成功率的共享更新,可能压制罕见的安全干预或在其他机器人上产生不安全响应。论文提出三项要求:共享时保留多模态纠正的上下文与不确定性、部署前在各接收机器人的闭环中评估候选更新、同时评估泄露风险与安全关键证据的留存。文中提供的是反例和可证伪的评估议程,没有实验结果。
When Human Corrections Travel: Safety in Federated VLA Adaptation
Vision-language-action (VLA) policies can adapt to local human intervention, while federated learning can combine distributed robot experience without pooling raw records. We examine their prospective intersection: sharing adaptations derived from diverse human corrections across tasks, environments, people, and robot embodiments. Corrections differ in modality, safety semantics(urgency, behavioral scope, etc.), and privacy sensitivity. A shared update that improves mean task success may suppress a rare safety intervention or produce an unsafe response on another robot. We argue for three requirements: preserve the context and uncertainty of multimodal corrections when deciding what to share; assess candidate updates in each receiving robot's closed loop before deployment; and evaluate leakage alongside retention of safety-critical evidence. Immediate, legible defensive behavior remains necessary during human interaction. We offer counterexamples and a falsifiable evaluation agenda, not experimental results.