PC-Diffuser: Path-Consistent Capsule CBF Safety Filtering for Diffusion-Based Trajectory Planner

arXiv:2603.10330 · cs.RO, cs.AI · Submitted 2026-03-11 · Read on arXiv

Listen

Radio episode about this paper

Transcript

Introduction to the show: ident: Robotics Radio. Generated commentary on the latest robotics and control papers.

Rosa: I'm Rosa, and with me are Dev and Taro, guest researcher.

Dev: Today's paper: "PC-Diffuser: Path-Consistent Capsule CBF Safety Filtering for Diffusion-Based Trajectory Planner".

Rosa: Diffusion-based trajectory planners, while powerful for long-horizon planning, lack formal mechanisms to guarantee safety in rare or out-of-distribution scenarios.

Dev: First, who's behind it and why it matters.

Title and authors: Rosa: So we've seen how the PC-Diffuser framework works to embed a certifiable safety structure into diffusion planning, and now I want to talk a bit about the people behind it, specifically Eugene Ku and Yiwei Lyu.

Dev: I was thinking that since this is an augmentation framework built on top of existing diffusion models, their focus must have been on how to inject this safety mechanism without completely destroying the planner's ability to generate complex paths.

Taro: I’m interested in what their background suggests about their approach; are they more focused on the theoretical guarantees of the barrier function structure or the practical implementation details of integrating it into a neural network loop?

Rosa: It seems like they balanced both, because their work addresses three major questions: which object to certify, how to make certification dynamics-consistent, and how to change the plan minimally <ref:2603.10330#pg1>.

Dev: That structure suggests they weren't just tinkering with one part; they were trying to solve a multi-faceted problem by creating a joint structure that supports rollout-time safety, dynamic feasibility, and minimal deviation from the learned diffusion behavior <ref:2603.10330#pg1>.

Taro: I think that holistic approach is crucial when dealing with complex autonomous driving environments where different failure modes can interact in unpredictable ways <ref:2603.10330#pg1>.

Rosa: Precisely, and it’s important to remember that their main contribution was introducing this certifiable, path-consistent barrier-function structure that jointly supports all three requirements <ref:2603.10330#pg2>.

Dev: That joint support is what sets them apart from methods that might only focus on one aspect, like just collision avoidance or just dynamic feasibility in isolation.

Taro: And when we look at the authors' goals, they weren't just trying to make a slightly safer planner; they were aiming to ensure that safety enforcement is both physically meaningful and minimally invasive <ref:2603.10330#pg1>.

Rosa: That focus on minimality is key for real-world deployment; if the correction introduces huge, unexpected changes, it ruins the driving quality immediately.

Dev: And that ties directly into their method of using capsule distance instead of standard Euclidean distance because that choice was made specifically to reduce unnecessary conservativeness <ref:2603.10330#pg2>.

Taro: So, in short, they are pushing for a framework where safety is not an external check but an intrinsic part of the trajectory generation process itself <ref:2603.10330#pg1>.

Rosa: And that's the essence of PC-Diffuser—making safety enforcement both physically meaningful and minimally invasive, which is a very important distinction for any field roboticist looking at this work <ref:2603.10330#pg2>.

The paper's summary: Dev: Now that we’ve touched on the authors, let's get into the core of what PC-Diffuser actually does, focusing on how it functions within the diffusion process.

Rosa: So in essence, they are taking a trajectory generated by a diffusion model and inserting this safety layer inside every single denoising step to enforce forward invariance along the rollout <ref:2603.10330#pg1>.

Taro: Can you elaborate on what that means technically? Is it checking every single point in the sequence, or is it something more localized? I want to understand the scope of this enforcement.

Dev: It’s not just checking every point; they evaluate collision risk using a capsule-distance barrier function, h j(x) = d capSego(x) - d safe, which enforces forward invariance of a collision-free set through inequality constraints on the time derivative of that barrier function <ref:2603.10330#pg2>.

Rosa: So, the barrier function itself is defined using capsule distance between vehicle longitudinal axes, d capSego(x), which they argue better reflects actual vehicle geometry compared to simple Euclidean distance <ref:2603.10330#pg2>.

Taro: That geometric focus makes sense for a physical system; if the safety metric is based on how far apart the vehicle's axes are, it should be more relevant than a general distance metric.

Dev: Exactly, and they establish that this capsule barrier is continuously differentiable with respect to ego state whenever the closest-point pair attaining the minimum distance is unique, ensuring that j is well-defined along the rollout dynamics <ref:2603.10330#pg2>.

Rosa: And it’s not just about collision avoidance; they also have to handle dynamic feasibility so that we don't generate a plan that looks good but would be impossible to drive under real vehicle dynamics <ref:2603.10330#pg1>.

Taro: So, how does the paper integrate the dynamic feasibility check with the safety check? Are they sequential, or are they coupled in some other way during that denoising step?

Dev: They introduce a path-tracking controller to bridge this gap by mapping the denoised waypoints to a dynamically feasible rollout by tracking them sequentially <ref:2603.10330#pg2>.

Rosa: That controller then produces a nominal control input, u nom,k = (a nom,k, delta nom,k), which respects the kinematic bicycle model and feeds into the CBF-QP safety filter <ref:2603.10330#pg2>.

Taro: That sounds like a solid pipeline; first you get a raw plan, then you map it to physical controls, and finally you check those controls against safety constraints. What about the correction phase?

Dev: The final part is path-consistent correction; they fix the steering to that nominal value delta k = delta nom,k and let the safety filter modify only the longitudinal channel by solving an optimization problem <ref:2603.10330#pg2>.

Rosa: That optimization problem, which minimizes deviation from the nominal acceleration while satisfying the CBF constraints, is what ensures they preserve the spatial geometry of the planned path by preventing lateral deviations <ref:2603.10330#pg2>.

The paper's improvements: Taro: I've been thinking about the improvements they suggest, specifically how this iterative structure actually helps in terms of overall performance and robustness compared to just using a single safety check at the end.

Rosa: The main improvement they highlight is that iterative integration is superior to a single post-hoc fix because it allows for monotonically decreasing corrections as denoising progresses <ref:2603.10330#pg1>.

Dev: That monotonicity is really key; it means the system steers toward safer long-horizon behavior gradually, rather than making one big, potentially jarring adjustment at the end <ref:2603.10330#pg1>.

Taro: So if we look at the impact of each piece individually, what did they find out about which component is most critical to this entire safety augmentation?

Rosa: The ablation study showed that dynamic feasibility is highlighted as having the largest impact; removing it increased collision rates by approximately eleven percent <ref:2603.10330#pg2>.

Dev: That confirms that getting the physical execution right before you worry too much about fine-grained safety constraints on every single point along the path is a high priority <ref:2603.10330#pg2>.

Taro: Does this mean that for deployment, we should prioritize ensuring the dynamic feasibility part works perfectly before tuning the capsule barrier function parameters?

Rosa: It suggests that combining safety, dynamic feasibility, and path-consistency together is what results in a trajectory that simultaneously satisfies all three requirements <ref:2603.10330#pg1>.

Dev: And they also showed that this combination leads to a significant improvement in driving quality, for instance, improving the composite score from zero point eight three to zero point eight eight on Val14 <ref:2603.10330#pg2>.

Taro: So it’s not just about surviving collisions; it’s about maintaining a high-quality driving experience while staying safe, which is what makes this work more applicable in real-world scenarios <ref:2603.10330#pg2>.

Conclusion: Rosa: So to wrap up our discussion on PC-Diffuser, we’ve seen how they integrated a certifiable, path-consistent barrier-function structure directly into the denoising loop of diffusion planning <ref:2603.10330#pg1>.

Dev: It seems they successfully solved the three fundamental questions regarding certification, consistency, and minimal deviation by creating this joint support for rollout-time safety, dynamic feasibility, and minimal deviation from the learned diffusion behavior <ref:2603.10330#pg1>.

Taro: For me, I think the biggest implication is showing that we can make safety enforcement both physically meaningful and minimally invasive within a generative framework <ref:2603.10330#pg2>.

Rosa: I agree; it moves us toward systems where safety isn't just a patch, but an intrinsic part of how the AI generates its plans <ref:2603.10330#pg1>.

Dev: It’s a solid step forward because they showed that dynamic feasibility is the most impactful component when we look at the ablation study results <ref:2603.10330#pg2>.

Taro: I think the long-term direction is using this iterative refinement to build plans that are robust against model drift, allowing the AI to co-adapt with its own learned behavior <ref:2603.10330#pg1>.

Rosa: It’s exciting work; I’m looking forward to seeing how this framework performs when we take it out of the controlled lab setting and see how long these guarantees hold up in open environments <ref:2603.10330#pg2>.

Dev: And from an engineering standpoint, we’ll keep watching how they handle the latency and failure modes when this entire pipeline is run at high frequency, which I know is a challenge for any real-time system <ref:2603.10330#pg1>.

Taro: I'm just ready to see if these trajectory plans can handle truly unpredictable events, because that’s the ultimate test for any autonomy research <ref:2603.10330#pg2>.

Texas A&M University

cs.RO, cs.AI

Submitted: 2026-03-11

Updated: 2026-10-05

Project page: https://eugene29.github.io/PC-Diffuser_website

License: http://creativecommons.org/licenses/by/4.0/

Importance score: 85/100

The gist: Diffusion-based trajectory planners, while powerful for long-horizon planning, lack formal mechanisms to guarantee safety in rare or out-of-distribution scenarios.

Key concepts

Capsule Distance Barrier Function
This is the core safety mechanism that prevents collisions. Instead of using simple Euclidean distance, it measures the minimum distance between two vehicle longitudinal axes. This method reflects real vehicle geometry better and reduces overly conservative safety margins.
Path-Tracking Controller
Diffusion planners often output waypoints, not actual controls. This component maps these waypoints to dynamically feasible control inputs by tracking the trajectory sequentially using a linearized LQR controller. This ensures the generated path can actually be driven safely according to vehicle dynamics.
Path-Consistent Correction
To maintain good driving quality, PC-Diffuser only allows the safety filter to modify longitudinal control while keeping steering fixed to its nominal value. This prevents lateral deviations, preserving the spatial geometry of the planned path and minimizing undesirable changes in driving style.

Terminology

Summary

Diffusion-based trajectory planners, while powerful for long-horizon planning, lack formal mechanisms to guarantee safety in rare or out-of-distribution scenarios. This paper introduces PC-Diffuser, a safety augmentation framework that embeds a certifiable, path-consistent barrier-function structure directly into the denoising loop of diffusion planning to ensure that safety is enforced during generation rather than as a post-hoc fix.

How it works

The framework addresses three fundamental questions: (1) Which is the right object to certify (the executed rollout), (2) How can we make certification dynamics-consistent, and (3) How should the correction change the plan minimally? To answer these, PC-Diffuser introduces a certifiable structure composed of three elements: a capsule-distance control barrier function for safety, a path-tracking controller for dynamic feasibility, and a path-consistent correction for minimal distributional deviation. These components are integrated iteratively into every denoising step to enable iterative, context-aware safeguarding during generation.

Safety: Capsule Distance Barrier Function

Safety is achieved using the Control Barrier Function (CBF) framework to enforce forward invariance of a collision-free set through inequality constraints on the time derivative of a barrier function h. Instead of standard Euclidean distance, PC-Diffuser uses the capsule distance, defined as the minimum distance between two vehicle longitudinal axes. This approach is designed to better reflect vehicle geometry and reduces unnecessary conservativeness. The barrier function is defined as:

h j(x) = dcapSego(x), S j (x j) − dsafe, where dsafe > 0 is a safety margin. Proposition 1 establishes that this capsule barrier is continuously differentiable with respect to the ego state whenever the closest-point pair attaining the minimum distance is unique, ensuring that h˙ j is well-defined along the rollout dynamics.

Dynamic Feasibility: Certifying the Executed Rollout

Diffusion planners typically produce waypoints, not control inputs. To ensure safety under vehicle dynamics, PC-Diffuser introduces an interface to map these waypoints to a dynamically feasible rollout. This is achieved by tracking the predicted trajectory sequentially with a linearized LQR controller to produce a nominal control unom,k = (anom,k, δnom,k) at each step. This nominal control respects the kinematic bicycle model and provides the inputs required for the CBF-QP safety filter.

Minimal Distributional Deviation: Path-Consistent Corrections

To avoid large distributional shifts that degrade driving quality, PC-Diffuser implements path-consistent corrections. This is done by fixing steering to the tracked nominal value δk = δnom,k and allowing the safety filter to modify only the longitudinal channel. The corrected control is found by solving an optimization problem (Eq. 11) that minimizes deviation from the nominal acceleration while satisfying CBF constraints:

a∗ k = arg min a k ∈ Ua∥a k − anom,k∥2 s.t. ∇h j(x k)⊤ f(x k) + g(x k) [a k, δnom, k]⊤ ≥ −α h j(x k).

This restriction preserves the spatial geometry of the planned path by preventing lateral deviations.

Integration and Evaluation

The certifiable structure is integrated into the denoising loop by operating on the predicted clean trajectory estimate, τˆ(t)0, rather than the noisy state τt. The process involves: (1) predicting a clean estimate from noise via Eq. (4); (2) updating a set of safety-critical agents R based on proximity; (3) applying PC-CBF to obtain the corrected trajectory τˆ∗(t)0; and finally, (4) re-injecting this corrected estimate back into the diffusion process via Eq. (17). This allows for co-adaptation, where the planner refines the trajectory while preserving safety. Evaluation on the nuPlan closed-loop benchmark shows that PC-Diffuser reduces collision rates from 100% to 10.29% on the all-collision challenge set, achieving a composite score of 0.59 and demonstrating that it safeguard[s] without compromising driving performance.

Ablation Study Insights

The ablation study confirms the necessity of each component: iterative integration is superior to a single post-hoc fix because it allows for monotonically decreasing corrections as denoising progresses, steering the model toward safer long-horizon behavior. Furthermore, dynamic feasibility is highlighted as having the largest impact, with its removal increasing collision rates by approximately 11%. The combination of safety, dynamic feasibility, and path-consistency results in PC-Diffuser yielding a trajectory that simultaneously satisfies all three requirements.

Improvements for AI systems

Here are the specific improvements that can be made to AI systems by implementing the PC-Diffuser framework, and what these improved systems will be able to do:

The implementation of PC-Diffuser provides a comprehensive safety augmentation pipeline that transforms trajectory planning from a probabilistic prediction task into a certifiable, dynamically feasible, and behaviorally consistent process. The resulting improved AI system is specifically designed for high-stakes autonomous driving environments where failure is catastrophic.

Here are the specific improvements and capabilities:

  1. Integration of Certifiable Safety Guarantees Directly into the Denoising Loop (Co-adaptation)

  2. Enforcement of Dynamic Feasibility via Kinematic Grounding

  3. Preservation of Learned Behavioral Distribution via Path-Consistent Corrections

  4. Iterative, Context-Aware Risk Mitigation During Generation (Instead of Post-Hoc Repair)

The improved AI system, powered by PC-Diffuser, can achieve the following:

  1. Guaranteed Collision Avoidance in Out-of-Distribution Scenarios: The system will maintain a collision rate as low as 10.29% (compared to 100% for vanilla diffusion models) on challenging datasets like the all-collision benchmark, significantly reducing catastrophic failures that occur when the environment deviates from training data.

  2. Execution of Physically Realizable Trajectories: By using a kinematic bicycle model and Control Barrier Functions (CBFs), the system guarantees that every generated waypoint sequence can be converted into a physically executable control input (acceleration and steering rate). This eliminates physically plausible but unexecutable plans, ensuring the vehicle respects its mechanical limits.

  3. Preservation of High-Quality Driving Performance: Unlike many safety methods that introduce overly conservative or myopic constraints, PC-Diffuser's path-consistent correction ensures that safety modifications primarily affect speed modulation (longitudinal control) rather than spatial geometry (lateral path), leading to a composite driving score improvement (e.g., from 0.83 to 0.88 on Val14), ensuring the vehicle maintains high driving quality and comfort while remaining safe.

  4. Robustness Against Model Drift and Distributional Shift: By re-injecting safety corrections back into the denoising loop iteratively, the system co-adapts with the diffusion model. This allows it to refine its plan toward a trajectory that is both safe (guaranteed by CBFs) and consistent with what it learned from expert demonstrations, preventing large distributional shifts that degrade driving quality.

  5. Adaptive Risk Prioritization: The system dynamically identifies safety-critical agents based on predicted proximity (using the capsule distance barrier function). It only enforces stringent constraints on agents within a specified safety threshold, making the planning process computationally efficient and focused only where necessary, rather than applying conservative constraints to every potential neighbor.

Abstract

Autonomous driving in complex traffic requires planners that generalize beyond hand-crafted rules, motivating data-driven approaches that learn behavior from expert demonstrations. Diffusion-based trajectory planners have recently shown strong closed-loop performance by iteratively denoising a full-horizon plan, but they remain difficult to certify and can fail catastrophically in rare or out-of-distribution scenarios. To address this challenge, we present PC-Diffuser, a safety augmentation framework that embeds a certifiable, path-consistent barrier-function structure directly into the denoising loop of diffusion planning. The key idea is to make safety an intrinsic part of trajectory generation rather than a post-hoc fix: we enforce forward invariance along the rollout while preserving the diffusion model's intended path geometry. Specifically, PC-Diffuser (i) evaluates collision risk using a capsule-distance barrier function that better reflects vehicle geometry and reduces unnecessary conservativeness, (ii) converts denoised waypoints into dynamically feasible motion under a kinematic bicycle model, and (iii) applies a path-consistent safety filter that eliminates residual constraint violations without geometric distortion, so the corrected plan remains close to the learned distribution. By injecting these safety-consistent corrections at every denoising step and feeding the refined trajectory back into the diffusion process, PC-Diffuser enables iterative, context-aware safeguarding instead of post-hoc repair...

Sources

Related papers