- The paper develops a QP-compatible safety filter that uses implicit differentiation and first-order contact-force prediction to apply control barrier functions to non-control-affine contact dynamics.
- The paper shows that the smoothing parameter κ affects safety non-monotonically, so boundary-focused screening is needed instead of simply selecting the smallest value.
- The paper introduces a robustly tightened barrier constraint that eliminated observed force violations across four deterministic simulations, while preserving task feasibility with calibrated error margins.
Overview
This paper addresses safety-critical control for robotic systems whose dynamics are governed by smoothed implicit contact models, specifically the complementarity-based formulation used in differentiable simulators such as Dojo (Howell et al., 2022). The central difficulty is that the contact force is defined implicitly through a nonlinear complementarity problem (NCP), so the dynamics are not control-affine and standard discrete-time control barrier function (CBF) quadratic programs cannot be applied directly. The authors develop a QP-compatible safety filter based on a first-order Taylor approximation of the implicitly defined contact force, and they identify and address two sources of error: linearization error in the local force prediction, and mismatch introduced by the smoothing (central-path) parameter κ.
The paper's key empirical finding is that reducing κ—which improves local model accuracy—does not monotonically improve closed-loop safety. In a 1D box-contact example with γmax=0.25 N, only κ=10−4 among four tested values remained within the force limit; both smaller and larger values produced violations. This non-monotonicity motivates both a screening procedure for selecting κ and a robust tightening of the CBF constraint.
Problem setup
The contact model relaxes hard complementarity via a central-path condition: ϕ(z)≥0, γ≥0, and γϕ(z)=κ, where ϕ is the signed-distance function. Friction follows from the maximum dissipation principle subject to the friction cone ∥β∥2≤μγ. Given problem data κ0, the relaxed NCP is written as κ1, and sensitivities of the solution—including the contact force input derivative κ2—are obtained by implicit differentiation.
The barrier function is defined directly on the force constraint: κ3. Since enforcing the discrete-time CBF condition κ4 on the true implicit dynamics would require solving a nonlinear program at each step, the authors instead linearize the next-step contact force around a nominal input κ5:
κ6
and impose the CBF condition on the predicted margin κ7, yielding an affine constraint solvable as a standard CBF-QP that minimally deviates from the nominal controller.
Non-monotonic dependence of safety on κ
Writing the true margin as κ8 where κ9 is the one-step approximation error, a violation occurs whenever γmax=0.250. Although γmax=0.251 decreases as γmax=0.252 shrinks, the predicted margin itself also varies with γmax=0.253. The authors derive a local identity under the assumption that the closed-loop quantities are differentiable in γmax=0.254: log-differentiating the central-path relation gives
γmax=0.255
where γmax=0.256 is the logarithmic sensitivity of the closed-loop contact gap to γmax=0.257. Since the gap changes with γmax=0.258 through the state, filtered input, and smoothed contact update, the sign of this sensitivity is not fixed: decreasing γmax=0.259 improves the margin only when κ=10−40. This formally establishes that κ=10−41 cannot be treated merely as a numerical smoothing parameter—it is a safety-relevant design choice, and the safe region in κ=10−42 may be an interval rather than a single point.
Boundary-focused κ screening
To select κ=10−43, the paper proposes Algorithm 1, which runs short-horizon CBF rollouts on representative boundary-approaching scenarios for each candidate κ=10−44 and compares two statistics: κ=10−45, the upper-tail quantile of the observed one-step under-prediction κ=10−46, and κ=10−47, the lower-tail quantile of the predicted margin minus κ=10−48. A candidate is compatible if it has zero implicit-solver failures and κ=10−49; among compatible candidates, the largest score wins, with ties broken toward smaller κ0. This procedure operationalizes the insight that a good κ1 must balance approximation accuracy against margin preservation near the boundary.
Robust barrier tightening
Residual linearization error remains after screening. Because under-prediction of the contact force is the safety-critical case—an unsafe input can appear feasible—the authors assume a lower bound κ2 over the operating region and prove a simple proposition: enforcing the tightened condition κ3 guarantees κ4, hence forward invariance of the safe set when κ5. In practice κ6 is chosen conservatively from rollout statistics (upper quantile or maximum of κ7).
The framework extends conditionally to the unsmoothed (κ8) model by decomposing its margin error into linearization error plus smoothing mismatch, each requiring its own bound. The smoothing mismatch admits a physical interpretation through impulse-momentum conservation:
κ9
bounding the force difference by the effective mass and the discrepancy in post-contact normal velocities. Safety for the unsmoothed system therefore requires bounding both terms simultaneously—a stronger requirement than safety for the smoothed model alone.
Experimental results
Four systems were evaluated—1D box contact, planar push, box pivot, and hopper—with ϕ(z)≥00 fixed throughout and reference trajectories from trajectory optimization tracked by nominal PD controllers. A ϕ(z)≥01-sweep over 20 log-spaced values from ϕ(z)≥02 to ϕ(z)≥03 confirmed substantial cross-system variability: box contact and box pivot exhibited violations at intermediate ϕ(z)≥04 (near ϕ(z)≥05) but not at extremes, planar push showed strongly non-monotonic margins, while the hopper was monotonic in ϕ(z)≥06.
With ϕ(z)≥07 and ϕ(z)≥08 fixed before evaluation, the robust CBF (rCBF) eliminated all observed force violations across all four deterministic rollouts, whereas the standard CBF left residual violations (e.g., violation rates of 0.345 on box contact and 0.053 on box pivot). Notably, rCBF also restored task feasibility on box pivot and hopper, where the standard CBF failed to complete the task. A sensitivity study on ϕ(z)≥09 revealed a conservatism trade-off: on the hopper the 85th-percentile margin sufficed, while planar push required the 90th percentile to become violation-free, with increasing γ≥00 raising mean control deviation from the nominal input.
Limitations and open questions
Several caveats bear directly on the strength of the results. First, the guarantee in Proposition 1 holds only when the bound γ≥01 is valid over the operating region; since no closed-form bound exists, γ≥02 is calibrated empirically from offline rollouts, so the guarantee is conditional on rollout coverage being representative. Second, extension to the unsmoothed model requires bounding the smoothing mismatch, which relies on the impulse-momentum argument and knowledge of the effective mass; this bound is stated but not validated experimentally. Third, all experiments are deterministic simulations without model uncertainty or state estimation error, so robustness to disturbances remains untested. Fourth, the screening procedure depends on a set of boundary-approaching rollout scenarios, and the paper does not characterize how sensitive the selected γ≥03 is to that scenario set or to the quantile parameters γ≥04 and γ≥05. Finally, whether the non-monotonicity phenomenon generalizes to higher-dimensional contact configurations, or admits a predictive characterization beyond the local sensitivity identity, is left open.
Conclusion
The paper formulates discrete-time CBF-based force-safety filtering for smoothed implicit contact dynamics via local Taylor approximation, proves that tightening the predicted CBF condition by a calibrated margin restores the nominal barrier guarantee despite linearization error, and demonstrates—both analytically and across four simulated contact-rich systems—that the smoothing parameter γ≥06 affects closed-loop safety non-monotonically and must therefore be screened rather than simply minimized. The proposed rCBF eliminates force violations in all tested deterministic simulations while preserving task feasibility, establishing contact smoothing as a safety-relevant design parameter rather than a purely numerical device.