Coding Agents with an Obstacle-Aware Harness for Safe Robot Manipulation
Paper Overview
- Field: NLP
- Authors: Bingxin Xu, Yuzhang Shang, Zhen Dong, Emilio Ferrara
- Published: 2026-09-17
- arXiv: 2609.20822
Summary
Coding agents have emerged as a promising paradigm for robot manipulation: a language model writes the robot controller as a program, and agents built in this way now operate robots without robot-specific training. Whether this paradigm is also safe, however, has not been asked. The authors evaluate coding agents under a safety constraint, where each task pairs a manipulation goal with an obstacle the robot must not touch. The agent pursues the goal but collides with the obstacle in most cases, treating task completion as its sole objective while neglecting safety. The agent reasons about the obstacle in its traces, and the prompt already forbids touching it, so neither perception nor instruction is at fault; the fault lies in the planning, where the stated constraint never becomes a priority.
By decomposing manipulation into path phases and contact-rich moments, the authors localize the failure. In path phases, the model cannot prioritize safety constraints—it lacks the concept of an "obstacle-avoiding path" and does not replan when the chosen path is infeasible. At contact moments, it fails to realize that contact execution is subject to the same constraint.
The Proposed Solution: SafeHarness
To close this gap, SafeHarness equips the model with two obstacle-aware safety constraint prioritization safeguards:
1. Obstacle-aware path planning: obstacles are grounded as bounding boxes, and candidate paths are drawn over them as waypoint sequences. The agent pre-plans the path, validates it, replans if necessary, and only then executes. 2. Obstacle-aware contact execution: contact locations are chosen so that the contact itself avoids obstacles.
Results
SafeHarness achieves 71.9% task success and 87.5% obstacle avoidance, exceeding the previous state-of-the-art by 6.5% and 27.0% respectively. These results are 2.3x and 1.5x those of the same agent without the safety framework.
---
*Auto-collected on 2026-09-19.*