Teahose.
SIGN IN
NEW HERE — WHAT TEAHOSE DOES
We read the entire AI & tech firehose — so you don't have to.
PODPodcastsAll-In, No Priors, Acquired…
NEWNewslettersStratechery, Newcomer…
PAPPapersPhysical AI research
PHProduct Huntdaily launches
VCInvestor ScoutSequoia, a16z, Benchmark…
CLAUDE DISTILLS →
7 reads, 30 sec each — free, 6 AM ET.
+ a live graph of the companies, people & themes underneath.
HOME/ARXIV PHYSICAL AI RESEARCH/ContactGuard: Pre-Contact Execut…
PAPR
// RESEARCH PAPER
ARXIV PHYSICAL AI RESEARCH

ContactGuard: Pre-Contact Execution Monitoring with Action-Conditioned Latent World Models

DATE August 13, 2026SOURCE ARXIV PHYSICAL AI RESEARCHPARTICIPANTS GEHAN ZHENG, MATTHEW JOHNSON-ROBERSON, WEIMING ZHIARXIV 2608.13438
// KEY TAKEAWAYS5 ITEMS
  1. 01The Failure Detection Window Has Been in the Wrong Place
  2. 02Latent World Models Outperform Every Tested Failure Detector
  3. 03Imagination Beats Observation
  4. 04The Monitor Is Policy-Agnostic and Requires No Retraining of the Underlying Policy
  5. 05Real-Time Inference Is Not a Bottleneck
// SUMMARY

1. Key Themes

The Failure Detection Window Has Been in the Wrong Place

The central insight of this paper is that most manipulation failure detection happens after the damage is done. ContactGuard flips this by predicting failure before gripper contact, during the window when a visuomotor policy has planned its next action chunk but hasn't yet executed it. As the authors state in the Introduction: "Contact-rich manipulation failures are often detected only after the robot has committed to contact... a poor approach may already push, miss, slip, or disturb the object before conventional detectors react." The system anchors 0.5 seconds before gripper closure and makes its abort decision before any physical contact occurs — meaning the scene is preserved and recoverable.

Latent World Models Outperform Every Tested Failure Detector — by a Wide Margin

ContactGuard's action-conditioned latent rollout substantially outperforms established runtime failure detectors including FAIL-Detect, RND, and SAFE across all four tasks. On the Cup task, ContactGuard achieves an AUC of 0.982 versus SAFE's 0.840, FAIL-Detect's 0.813, and RND's 0.840 (Table 2). On the Box task, ContactGuard reaches 0.984 AUC versus FAIL-Detect's 0.219 — a near-collapse of conventional detectors on this task. The practical implication: existing uncertainty and novelty-based monitors are unreliable specifically at the pre-contact moment, which is where failures are still preventable.

Imagination Beats Observation — The "Current Latent" Ablation Is the Key Finding

The most commercially significant finding is the gap between reading the current visual state versus predicting the future visual state after rolling the planned action through a world model. Using the same encoder, labels, probe architecture, and data, the "current latent" ablation trails ContactGuard on every task. On Cup, the AUC difference is 0.982 vs. 0.840; on Pencil, 0.992 vs. 0.923; on Towel, 0.978 vs. 0.871 (Table 2). The paper notes: "paired bootstrap 95% confidence intervals for the difference excluding zero." This validates the core thesis — you cannot adequately predict contact failure from what the robot sees right now; you need to simulate what it's about to do.

The Monitor Is Policy-Agnostic and Requires No Retraining of the Underlying Policy

ContactGuard is designed as a plug-in verifier. It treats the deployed policy as a black box: "ContactGuard consumes only the current observation and the concrete action chunk already emitted by the policy, without accessing policy internals or requiring joint training" (Section 1). The world model trains on unlabelled robot trajectories; only a small labeled set (~250 attempts per task) is needed to train the lightweight logistic regression failure probe. This dramatically lowers the integration cost for companies with existing deployed policies.

Real-Time Inference Is Not a Bottleneck

At the deployed 30-step horizon (1 second lookahead), the full encode-rollout-probe pass completes in 19.18ms on an RTX 5090 (Table 4). The authors confirm: "the full encode–rollout–probe pass fits comfortably within the pre-closure slack, so the monitor does not bottleneck control." The architecture uses a ViT-Tiny encoder and 4-layer transformer — deliberately lightweight — making this viable on edge compute without dedicated inference hardware beyond a mid-range GPU.


2. Contrarian Perspectives

Proprioceptive State Hurts More Than It Helps in Small-Data Regimes

The conventional wisdom in robotics is that fusing joint state with visual observations improves downstream task performance. ContactGuard's ablation says the opposite: "dropping the state improves test AUC on all four tasks" (Table 5, Section 4.3). Without state, the single-view model achieves 0.920 AUC on Cup versus 0.660 with state; 0.878 on Pencil versus 0.455 with state. The authors' interpretation: "naive state fusion acting as a domain-specific shortcut in our small-data regime, displacing grasp-relevant visual dynamics." For teams building failure monitors trained on small labeled sets, this is a direct warning against reflexively adding proprioceptive inputs — they may actively degrade the signal you care about.

Pixel-Level Video Prediction Is Unnecessary — and Likely Counterproductive — for Failure Detection

The generative AI wave has pushed many robotics teams toward photorealistic video prediction models (world models that produce actual video frames) for planning and verification. ContactGuard explicitly rejects this approach: "the model need not generate photorealistic future frames. It only needs a representation that preserves outcome-relevant information: whether the planned interaction is likely to succeed or fail" (Section 1). Operating in compact 192-dimensional latent space rather than pixel space avoids "the cost and ambiguity of pixel-level video generation." The implication: companies investing in high-fidelity video world models for execution monitoring may be solving a harder problem than necessary, with worse sample efficiency and higher compute costs.

More Powerful Direct Classifiers on Current State Fail — Latent Rollout Is the Right Inductive Bias

A natural instinct for engineering teams would be: "just train a better classifier on what we observe right now." The paper tests this directly — nonlinear MLP probes with full hyperparameter sweeps applied to the current anchor latent and planned action chunk "do not improve held-out performance: their test AUC is unstable and below ContactGuard across all four tasks" (Appendix B, Table 6). On Box, the Direct-MLP large achieves only 0.666 AUC versus ContactGuard's 0.956. The conclusion is architectural, not just about scale: rolling planned actions through a pretrained dynamics model produces a qualitatively better failure feature than any classifier applied to the raw inputs, even with more model capacity.


3. Companies Identified

AgileX Robotics

  • Description: Chinese robotics hardware manufacturer producing dual-arm manipulator platforms
  • Why relevant: The AgileX Piper dual-arm robot is the physical hardware platform used in all real-robot experiments — "All experiments use a 14-DoF AgileX Piper dual-arm robot with three synchronized RGB cameras" (Section 4.1). ContactGuard's real-world validation is on this hardware.
  • Quote: "All experiments use a 14-DoF AgileX Piper dual-arm robot with three synchronized RGB cameras." (Section 4.1)

NVIDIA

  • Description: GPU manufacturer; dominant compute platform for robotics inference
  • Why relevant: All runtime benchmarks were conducted on an RTX 5090. The 19.18ms full-pass inference time is hardware-specific, and teams deploying on lesser GPUs should recalibrate their pre-contact timing budget.
  • Quote: "We benchmark the deployed JEPA model, using a ViT-Tiny encoder and 4-layer transformer predictor, on a single NVIDIA RTX 5090 in FP32." (Section 4, Runtime Analysis)

4. People Identified

Gehan Zheng

  • Lab/Institution: College of Connected Computing, Vanderbilt University
  • Why notable: Lead author on ContactGuard; also co-author on the related Rewind-IL paper (cited as [21]), which addresses online failure detection and state respawning for imitation learning. Part of an active cluster of work on runtime monitoring for visuomotor policies coming out of this group.
  • Quote: First author on arXiv:2608.13438; also cited as first author on "Rewind-IL: Online failure detection and state respawning for imitation learning" (Reference [21])

Matthew Johnson-Roberson

  • Lab/Institution: College of Connected Computing, Vanderbilt University
  • Why notable: Senior researcher and co-author; also appears as co-author on Dose3 (cited as [16]), another out-of-distribution detection method for robot trajectories. His group appears to be systematically building a stack of deployment-safety tools for physical AI.
  • Quote: Co-author on ContactGuard and on "Dose3: Diffusion-based unified out-of-distribution detection on SE(3) trajectories" (Reference [16])

Weiming Zhi

  • Lab/Institution: College of Connected Computing, Vanderbilt University; School of Computer Science, University of Sydney; Australian Centre for Robotics
  • Why notable: Corresponding author on ContactGuard with dual institutional affiliation bridging Vanderbilt and Sydney. Also appears as co-author across at least six cited works in this paper's reference list — including PATCH ([22]), AutoIntervene ([35]), TRiPilot-FF ([32]), and others — indicating he is a central node in this emerging Physical AI deployment-safety research cluster.
  • Quote: Corresponding author, listed with three affiliations; co-author on PATCH ("Action-chunk-conditioned latent patch innovation monitoring for robot manipulation," Reference [22]) and AutoIntervene ("Calibrated intervention for action-chunking imitation learning policies," Reference [35])

5. Operating Insights

A Small Labeled Dataset (~250 Examples) Is Sufficient to Train a Production-Grade Failure Probe

The engineering implication that will matter most to deployment teams: ContactGuard's failure probe requires only a small labeled set of pre-contact clips — roughly 250 attempts per grasp setting — to achieve AUC scores above 0.94 on live robot rollouts. The world model itself trains on unlabelled trajectories. This means the labeling burden for adding this kind of safety layer to a deployed policy is tractable in weeks, not months. "The probe dataset Dprobe contains labelled pre-contact grasp clips... a binary label y ∈{0,1}, where y=1 denotes failure... Each labelled set contains roughly 250 attempts" (Sections 3.1 and 4.1). Teams collecting teleoperation data anyway — for policy training — are already generating the raw material needed for world model training; the only additional cost is labeling ~250 grasp outcomes.

False Abort Rate (FAR) Is the Operational Metric That Actually Matters for Throughput

Most ML papers optimize AUC. For deployed manipulation systems, the false-abort rate — incorrectly stopping a grasp that would have succeeded — directly kills throughput. ContactGuard achieves a FAR of 12% on Cup and 10.7% on Box in live rollouts (Table 1, Table 8), compared to Direct-linear's 80% and 21.4% respectively. On Pencil, ContactGuard's FAR is 7.1% while the Direct-linear baseline reaches 89.3% — essentially aborting almost every attempt. Teams evaluating failure monitors for production should demand FAR numbers at their operating threshold, not just AUC. A monitor with excellent AUC but poor threshold behavior at your actual failure rate will destroy cycle time.


6. Overlooked Insights

The Action-Swap Test Reveals That the Monitor Is Genuinely Sensitive to What the Robot Plans to Do — Not Just Where It Is

Buried in Section 4.3 is a counterfactual experiment that isn't prominently featured but has significant implications for how teams should think about monitor architecture. The authors hold the visual observation fixed and swap in the action chunk from a failed attempt into a successful pre-contact state. The predicted failure probability increases by +0.25 on Cup, +0.33 on Box, +0.56 on Pencil, and +0.65 on Towel — while a current-latent probe is entirely invariant to the swap. This is a strong empirical demonstration that ContactGuard's signal is genuinely action-conditioned, not a proxy for visual risk signatures in the scene. For companies building multi-policy systems or systems that sample multiple candidate actions (diffusion policy, flow matching), this directly suggests that ContactGuard could be used as a scoring function to select among candidate chunks — an application the authors acknowledge as future work ("coupling the monitor with multi-sample policies such as Diffusion, Flow Matching, or Streaming policies," Section 5) but do not explore. This may be the highest-value near-term extension.

The System Has No Recovery Mechanism — Aborts Are Dead Ends Without an External Module

The paper is clear about a limitation that will determine whether ContactGuard is a complete product or a component: "ContactGuard prevents failures by abstaining, but does not recover from them or complete the task after an abort. Post-abort task completion requires an external recovery module, which we leave for future work" (Section 5). In live evaluation, when the monitor triggers, "the robot pauses 5 s with the gripper open and then resumes the remaining chunk to record the would-be outcome" — this is an evaluation protocol, not a production behavior. Any team integrating ContactGuard needs to pair it with a replanning or recovery policy, or accept that aborted cycles are lost cycles. Given that recall on Towel is 88% and FAR is 24% (Table 8), roughly 1 in 4 successful grasps would be incorrectly stopped — each requiring manual intervention without a recovery module. The abort signal is ready; the recovery loop is not.