---
title: Control Sub-Barrier Certificate (CSBC)
url: https://www.emergentmind.com/topics/control-sub-barrier-certificate-csbc
type: topic
---

# Control Sub-Barrier Certificate (CSBC)

Searching arXiv for papers on control sub-barrier certificates and closely related barrier-certificate frameworks.
Control Sub-Barrier Certificate (CSBC) denotes a subsystem-level or inner-safe-set barrier construct used to certify safety under control, especially in compositional and uncertainty-aware settings. The term is not introduced in "Fossil 2.0: Formal Certificate Synthesis for the Verification and Control of Dynamical Models" [2311.09793], but that work provides the closest general mechanism for synthesizing controller-certificate pairs and verifying closed-loop barrier conditions over continuous- and discrete-time models. In the recent literature, CSBC is used explicitly for interconnected stochastic systems, where a local certificate for each subsystem is composed into a global control barrier certificate (CBC) under small-gain conditions [2409.10018], for discrete-time stochastic networks against $\omega$-regular specifications [2103.02226], for large-scale stochastic systems with bounded-time logic specifications [2101.06916], and for large-scale stochastic switched systems with dwell-time constraints [2005.01287]. A related but distinct interpretation appears in robust adaptive discrete-time safety filtering, where an inner safe set induced by estimation uncertainty functions as a sub-barrier construction, although the paper does not explicitly define CSBC [2508.08153]. Across these formulations, the common theme is that a CSBC certifies either a local subsystem safety property in the presence of interconnection inputs, or a stricter inner safe set whose forward invariance is enforced by a controller.

## 1. Terminological scope and conceptual variants

The term “Control Sub-Barrier Certificate” is used explicitly in compositional safety frameworks for interconnected stochastic systems. In that usage, a CSBC is a local barrier for a subsystem in an interconnected network that explicitly retains interconnection or disturbance gains in its inequalities, so that many subsystem certificates can be composed into a network-level CBC under small-gain conditions [2409.10018]. In discrete-time stochastic networks, the same terminology is used for subsystem certificates with internal inputs and outputs, where the expected one-step barrier change is bounded by a quadratic supply rate in the internal input and output [2103.02226].

A second usage is interpretive rather than terminological. In Fossil 2.0, the closest construct is a control-enabled barrier certificate whose safe region is specified by a superlevel set $\{x \mid h(x)\ge 0\}$ or a sublevel set $\{x \mid B(x)\le 0\}$ and whose forward invariance is guaranteed under a synthesized feedback controller [2311.09793]. This suggests that, in deterministic controller synthesis and formal verification, CSBC can be understood as a control-enabled barrier certificate in sublevel-set form.

A third usage arises in robust adaptive discrete-time barrier methods. There, the paper introduces adaptive inner safe sets
$$
S_t := \{x \in X \mid \mathcal{B}_t(x) \ge 0\},
$$
with
$$
\mathcal{B}_t(x) := B(x) - \frac{1}{2}\tilde{\theta}_t^\top \Gamma^{-1}\tilde{\theta}_t,
$$
and notes that $S_t \subset S$ unless the parameter error vanishes [2508.08153]. Since the paper does not define CSBC explicitly, the sub-barrier interpretation is that the certificate guarantees positive invariance of an inner safe set contained in the nominal safe set.

These variants share a structural idea: the certificate is “sub-” either because it is local to a subsystem, because it retains interconnection gain terms rather than certifying the monolithic system directly, or because it certifies a tightened inner region rather than the full nominal safe set.

## 2. Deterministic barrier and control-barrier formulations

For continuous-time autonomous systems
$$
\dot{x}=f(x), \qquad x\in X\subset \mathbb{R}^n,
$$
a barrier certificate $h:X\to \mathbb{R}$ defines a safe set $S$ by $h(x)\ge 0$, with initialization, separation, and invariance conditions
$$
\forall x\in X_0:\ h(x)\ge 0,
$$
$$
\forall x\in U:\ h(x)<0,
$$
$$
\forall x\in S:\ L_f h(x)+\alpha(h(x))\ge 0,
$$
where $L_f h(x)=\nabla h(x)^\top f(x)$ and $\alpha$ is an extended class-$\mathcal{K}$ function [2311.09793]. In affine-in-control systems,
$$
\dot{x}=f(x)+g(x)u,
$$
the control barrier function condition can be posed in existential form,
$$
\forall x\in S,\ \exists u\in \mathcal{U}:\ L_f h(x)+L_g h(x)u+\alpha(h(x))\ge 0,
$$
or in synthesis form under a feedback law $u=\pi(x)$,
$$
\forall x\in S:\ L_f h(x)+L_g h(x)\pi(x)+\alpha(h(x))\ge 0
$$
[2311.09793].

The sublevel-set form most closely aligned with the phrase “sub-barrier” replaces $h$ by a barrier $B$ and defines the safe set as
$$
S=\{x \mid B(x)\le 0\}.
$$
Then invariance can be enforced by
$$
\forall x\in S:\ L_f B(x)+\alpha(B(x))\le 0,
$$
or, in closed loop,
$$
\forall x\in S:\ L_f B(x)+L_g B(x)\pi(x)+\alpha(B(x))\le 0
$$
[2311.09793]. This gives a precise deterministic CSBC interpretation: a sublevel-set barrier whose forward invariance is guaranteed under the synthesized controller.

Discrete-time analogues replace Lie derivatives by one-step differences. For autonomous dynamics $x_{k+1}=F(x_k)$ and a superlevel safe set $S=\{x\mid h(x)\ge 0\}$, invariance is encoded by
$$
\forall x\in S:\ h(F(x))-h(x)+\alpha(h(x))\ge 0.
$$
For controlled dynamics $x_{k+1}=F(x_k,u_k)$ under a policy $u=\pi(x)$,
$$
\forall x\in S:\ h(F(x,\pi(x)))-h(x)+\alpha(h(x))\ge 0.
$$
In sublevel form,
$$
\forall x\in S:\ B(F(x,\pi(x)))-B(x)+\alpha(B(x))\le 0
$$
[2311.09793].

A related stochastic finite-horizon formulation replaces pointwise invariance with an expected-evolution inequality. For continuous-time stochastic systems,
$$
dx = F(x)dt + \sigma(x)dw,
$$
the barrier generator condition
$$
\mathcal{A}B(x)\le -\alpha B(x)+\beta
$$
bounds the expected growth of the barrier process and yields finite-horizon safety probability bounds [1909.05109]. This suggests a broader interpretation in which “sub-barrier” refers not only to sublevel sets but also to a sub-solution inequality constraining expected barrier evolution.

## 3. Compositional CSBCs for interconnected stochastic and hybrid systems

In compositional stochastic safety, a CSBC is local by construction. For an augmented stochastic hybrid subsystem $\mathcal{A}_i(\Phi_i)$ with augmented state $z_i=(x_i,\vartheta_i)$, initial set $\mathbb{X}_{0_i}=X_{0_i}\times\{0\}$, and unsafe set $\mathbb{X}_{u_i}=X_{u_i}\times\{0,\dots,\epsilon_{2_i}\}$, an augmented control sub-barrier certificate $\mathcal{CB}_i:\mathbb{X}_i\to \mathbb{R}_{\ge 0}$ satisfies
$$
\mathcal{CB}_i(x_i,\vartheta_i)\ge \kappa_i\|x_i\|^2,
$$
$$
\mathcal{CB}_i(x_i,\vartheta_i)\le \mu_i \quad \forall (x_i,\vartheta_i)\in \mathbb{X}_{0_i},
$$
$$
\mathcal{CB}_i(x_i,\vartheta_i)\ge \beta_i \quad \forall (x_i,\vartheta_i)\in \mathbb{X}_{u_i},
$$
and for all $(x_i,\vartheta_i)\in\mathbb{X}_i$, there exists $\nu_i\in \mathbb{U}_i$ such that for all $w_i\in \mathbb{W}_i$,
$$
\mathbb{E}[ \mathcal{CB}_i(x_i',\vartheta_i') \mid x_i,\nu_i,w_i,\vartheta_i ] \le \gamma_i \mathcal{CB}_i(x_i,\vartheta_i) + \phi_i\|w_i\|^2 + \eta_i
$$
[2409.10018]. The term $\phi_i\|w_i\|^2$ is the explicit interconnection gain that distinguishes the local sub-barrier from a monolithic global certificate.

The global A-CBC is then constructed as
$$
\mathcal{CB}(x,\vartheta)=\sum_{i=1}^N \xi_i \mathcal{CB}_i(x_i,\vartheta_i),
$$
provided the small-gain condition
$$
\xi^\top(-\Theta+\Psi)<0
$$
and the separation condition
$$
\sum_{i=1}^N \xi_i\beta_i > \sum_{i=1}^N \xi_i\mu_i
$$
hold [2409.10018]. The resulting global certificate satisfies a one-step expected contraction inequality and yields finite-horizon and, when $\eta=0$, infinite-horizon probabilistic safety bounds.

A closely related compositional structure appears for discrete-time stochastic systems with internal inputs and outputs. There, a subsystem CSBC $\mathds{B}_i:X_i\to \mathbb{R}_{\ge 0}$ satisfies
$$
\mathds{B}_i(x_i)\le \eta_i \quad \forall x_i\in X_{0_i},
$$
$$
\mathds{B}_i(x_i)\ge 1 \quad \forall x_i\in X_{u_i},
$$
and for all $x_i\in X_i$, there exists $\nu_i\in U_i$ such that for all $w_i\in W_i$,
$$
\mathbb{E}\!\left[\mathds{B}_i(x_i(k+1)) \mid x_i(k)=x_i,\nu_i(k)=\nu_i,w_i(k)=w_i\right]-\mathds{B}_i(x_i(k))
$$
is upper bounded by a quadratic supply rate in $w_i$ and $h_i(x_i)$ [2103.02226]. Under the interconnection LMI
$$
\begin{bmatrix} M & I_{\tilde r}\end{bmatrix}^{T}\underbar X^{\mathrm{comp}}\begin{bmatrix} M & I_{\tilde r}\end{bmatrix}\le 0
$$
and $\sum_i \eta_i < N$, the global CBC is the sum
$$
\mathds{B}(x)=\sum_{i=1}^N \mathds{B}_i(x_i)
$$
[2103.02226].

In large-scale stochastic switched systems, the subsystem object is an augmented pseudo-barrier certificate rather than a plain CSBC, but the paper explicitly maps it to subsystem-level “sub-barrier certificates.” For each augmented subsystem state $(x_i,p_i,l_i)$, the APBC satisfies
$$
\mathbb{E}\big[\mathcal{B}_i(x'_i,p'_i,l'_i)\mid x_i,p_i,l_i,w_i\big]\le \max\{\kappa_i\mathcal{B}_i(x_i,p_i,l_i),\rho_{\mathrm{int},i}(\|w_i\|),\psi_i\},
$$
with initial and unsafe level-set conditions, and these local certificates are composed via max-type small-gain conditions into a global augmented barrier certificate [2005.01287].

## 4. Construction and synthesis methodologies

Two synthesis paradigms dominate the literature summarized here: SMT-backed learner-verifier synthesis with neural templates, and SOS-based polynomial synthesis.

In Fossil 2.0, certificate and controller synthesis is performed through a counterexample-guided inductive synthesis loop. The certificate is parameterized as a feed-forward neural network $h(x;\theta)$ or $B(x;\theta)$, and when control is required, the feedback policy is parameterized as $\pi(x;\phi)$ [2311.09793]. The learner minimizes losses over sampled states that penalize violations of initialization, separation, or invariance, while the verifier encodes the negation of the barrier conditions over symbolic domains such as spheres, boxes, ellipsoids, or custom sets and checks satisfiability using Z3, dReal, or CVC5 [2311.09793]. For a closed-loop continuous-time barrier condition, the verifier checks
$$
\exists x\in S:\ L_f h(x)+L_g h(x)\pi(x)+\alpha(h(x))<0.
$$
If the formula is SAT, counterexamples are returned to the learner; if UNSAT, the certificate is proven over the specified dense domain [2311.09793]. Fossil synthesizes a feedback law concurrently with the certificate and verifies the closed-loop model; it does not synthesize existential control certificates of the form “$\exists u$ for each state” through online optimization [2311.09793].

SOS synthesis is the dominant method in explicit CSBC papers. In the augmented stochastic hybrid setting, the paper computes subsystem CBCs via SOS and then lifts them to A-CSBCs through a scaling
$$
\mathcal{CB}_i(x_i,\vartheta_i)=\omega_i(\vartheta_i)\,\bar B_i(x_i),
$$
where $\omega_i$ is chosen by cases depending on $\gamma_{1_i}$ and $\gamma_{2_i}$ [2409.10018]. The resulting A-CSBC parameters $(\gamma_i,\phi_i,\eta_i)$ are derived from the CBC parameters via inequalities in the proof of Theorem 5.2.

In the data-driven large-scale-network setting, the CSBC is constructed from a single noisy input-state trajectory per subsystem. The subsystem certificate is quadratic,
$$
\mathds{B}_i(x_i)=x_i^\top P_i x_i,\qquad P_i\succ 0,
$$
and is obtained through a data-dependent SOS program involving a polynomial matrix $\mathcal{H}_i(x_i)$, robustified matrix inequalities, and semialgebraic set constraints [2508.09520]. The local controller is also synthesized from the data matrices. This framework requires the rank condition
$$
\mathrm{rank}(\mathcal{N}_i^{0,T})=N_i
$$
for the trajectory monomial matrix [2508.09520].

For discrete-time stochastic systems against $\omega$-regular specifications, the paper combines ADMM with SOS. Local subsystem searches are performed in parallel to compute CSBCs and local controllers subject to consensus on compositionality variables, while a global SDP enforces the interconnection feasibility conditions [2103.02226]. Another bounded-time compositional framework provides both SOS and CEGIS approaches for CSBC synthesis, with the global CBC obtained through a max-type small-gain construction [2101.06916].

Robust adaptive discrete-time safety filtering uses a different synthesis architecture. The barrier inequality defines a safe input set
$$
U(x;\hat{\theta}_t,p)=\left\{u\in U \mid B(f(x,u;\hat{\theta}_t)) - B(x) - L_B\overline{w} - E_{\theta,t}(x)\ge -\alpha\!\left(B(x)-\frac{(\eta_{\theta,t}(p))^2}{2}\right)\right\},
$$
and the controller is the solution of the projection problem
$$
\pi_t^{\mathrm{safe}}(x;p)=\arg\min_{\nu\in U(x;\hat{\theta}_t,p)} \|\nu-\pi_{\mathrm{nom},t}(x)\|
$$
[2508.08153]. This is a safety filter rather than an offline certificate-synthesis loop.

## 5. Probabilistic guarantees, logic specifications, and adaptive inner safe sets

One major distinction between CSBC formulations is the type of guarantee they provide. Deterministic formulations, including the control-enabled barrier constructions in Fossil 2.0, prove forward invariance and separation of safe and unsafe sets over the chosen domain [2311.09793]. In contrast, stochastic formulations often provide quantified probabilities of avoiding unsafe states over finite or infinite horizons.

For augmented stochastic hybrid systems, if $\mathcal{CB}$ is an A-CBC, the finite-horizon safety bound is
$$
P\{ x_{x_0 \nu}(t_k) \in \mathbb{X}_u \text{ for some } k\in[0,\mathcal{T}] \mid x_0,\vartheta_0 \}
$$
bounded by the two-case expression in equation (3.4), and when $\eta=0$ the infinite-horizon bound becomes
$$
P\{ x_{x_0 \nu}(t_k) \in \mathbb{X}_u \text{ for some } k\ge 0 \mid x_0,\vartheta_0 \}\le \mu/\beta
$$
[2409.10018]. These are derived via supermartingale arguments on the barrier process.

In finite-time stochastic verification and control, the barrier process need only satisfy an expected-growth envelope. For continuous-time systems, if
$$
\mathcal{A}B(x)\le -\alpha B(x)+\beta,
$$
then the probability of reaching the unsafe region over a finite horizon is upper bounded by one of the expressions in Theorem 1, depending on the relation between $\alpha$ and $\beta/\alpha$ [1909.05109]. The paper emphasizes that this state-dependent envelope generalizes c-martingale bounds and can be less conservative for larger noise levels [1909.05109].

For discrete-time stochastic systems under $\omega$-regular specifications, local CSBCs are not only safety certificates but building blocks in an automata-guided synthesis pipeline. The specification is represented by a deterministic Streett automaton, decomposed into safety tasks on triples of automaton states, and a switching policy is synthesized from a switching automaton that routes among local CBCs and controllers [2103.02226]. A related bounded-time framework uses deterministic finite automata over the complement specification, decomposes accepting runs into reachability elements, and derives a lower bound on the satisfaction probability of the original logic formula via a sum-product expression over reachability-task bounds [2101.06916].

Robust adaptive discrete-time certificates replace global invariance by sequential positive invariance of a time-varying family of inner safe sets. The adaptive barrier
$$
\mathcal{B}_t(x)=B(x)-\frac{1}{2}\tilde{\theta}_t^\top\Gamma^{-1}\tilde{\theta}_t
$$
induces
$$
S_t=\{x\in X \mid \mathcal{B}_t(x)\ge 0\}\subset S,
$$
and the robust adaptive CBC condition ensures that if $x_0\in S_0$, then the closed-loop system is robustly safe with respect to $\{S_t\}_{t=0}^T$ and hence with respect to $S$ over the time interval [2508.08153]. This supports an inner-set interpretation of CSBC: robustness is enforced by certifying a stricter sub-safe set that expands as uncertainty shrinks.

## 6. Case studies, scalability, and limitations

The reported case studies show that CSBC-style constructions are primarily motivated by scalability and by the need to retain explicit interconnection structure.

In the augmented stochastic hybrid framework, the compositional method was verified on an interconnected stochastic hybrid system composed of $1000$ nonlinear subsystems [2409.10018]. Each local CBC was synthesized as a degree-$4$ polynomial in approximately $5.3$ s with approximately $65$ Mbit memory on a MacBook Pro M2 Max, and the compositional assembly scaled linearly with the number of subsystems [2409.10018]. Three parameter regimes were reported, with finite-horizon safety at $\mathcal{T}=100$ of at least $97.3\%$, at least $91.33\%$, and at least $87.3\%$, respectively [2409.10018].

In the data-driven compositional framework for unknown large-scale networks, the paper demonstrates tractability for networks with up to $2000$ subsystems and reports per-subsystem runtime and memory figures such as approximately $10.49$ s and approximately $9.07$ MB for fully connected Lorenz subsystems, approximately $7.86$ s and approximately $2.83$ MB for a spacecraft line network, and approximately $3.9$ s and approximately $1.67$ MB for a Duffing ring [2508.09520]. The global CBC is obtained by summing local CSBCs once the small-gain inequalities are satisfied [2508.09520].

In discrete-time stochastic control against $\omega$-regular specifications, a case study on room temperature regulation in a circular building with $n=300$ rooms used fourth-order polynomial CSBCs, and the resulting global CBC yielded a violation bound of $59.4/1000=0.0594$ for a representative safety task [2103.02226]. In large-scale stochastic switched systems, the framework handled a room temperature network containing $1000$ rooms and a network of $500$ switched subsystems with total dimension $1000$, providing finite-horizon safety probabilities of at least $0.87$ and at least $0.86$ in the reported settings [2005.01287].

Fossil 2.0 reports improved synthesis on barrier benchmarks such as Barr1 and Barr3, with success rates up to $100\%$ and significantly reduced times versus Fossil 1.0 [2311.09793]. It also reports a Reach-Avoid-Remain example for an inverted pendulum with friction, where a certificate and linear feedback controller were synthesized in approximately $50$ s using dReal [2311.09793]. Although this is not phrased in CSBC terminology, it exemplifies the control-enabled barrier-certificate synthesis that underlies one deterministic interpretation of the concept.

Several limitations recur across the literature. SOS-based methods typically assume polynomial dynamics and semialgebraic sets, and can be conservative [2409.10018] [2508.09520] [2103.02226]. Compositional small-gain conditions are sufficient rather than necessary, and can become restrictive under strong or dense interconnections [2409.10018] [2508.09520]. In the data-driven framework, the single-trajectory rank condition may fail if excitation is inadequate [2508.09520]. Robust adaptive discrete-time methods require bounded disturbances in a known polytope, an estimator that returns $\hat{\theta}_t$, $\Theta_t$, and error bounds, and can incur conservatism when $\eta_{\theta,t}(1)$ is used instead of $\eta_{\theta,t}(2)$ [2508.08153]. Fossil’s learner-verifier loop is sound but not guaranteed to terminate, and dReal’s $\delta$-satisfiability can require special handling near equilibria [2311.09793].

A common misconception is that CSBC denotes a single standard mathematical object across all barrier-certificate research. The literature instead supports several technically distinct meanings. In compositional stochastic control, CSBC is explicitly a local subsystem certificate with interconnection gains [2409.10018] [2103.02226] [2101.06916]. In deterministic formal synthesis, the term is absent but can be mapped to a control-enabled sublevel-set barrier certificate verified on closed-loop dynamics [2311.09793]. In adaptive discrete-time safety filtering, the term is likewise absent, but the induced inner safe sets provide a natural sub-barrier interpretation [2508.08153]. This suggests that CSBC is best treated as a family resemblance concept rather than a universally standardized definition.

Source: https://www.emergentmind.com/topics/control-sub-barrier-certificate-csbc