Safety Guardrails in the Sky: Realizing Control Barrier Functions on the VISTA F-16 Jet

arXiv cs.RO / 3/31/2026

💬 OpinionIdeas & Deep AnalysisModels & Research

Key Points

  • The paper proposes “Guardrails,” a runtime assurance mechanism that uses control barrier functions to guarantee dynamic safety for autonomous systems operating near the boundaries of their allowed domains.
  • Guardrails blends human/AI operator commands with safe corrective control actions, ensuring the system remains within safety constraints while still allowing operator control when feasible.
  • The authors implemented Guardrails on an F-16 jet and ran flight tests demonstrating enforcement of g-limits, altitude bounds, and geofence constraints, including combined constraint scenarios.
  • Flight results indicate Guardrails can keep the pilot in control when safe and minimally modify unsafe inputs when constraints would otherwise be violated.

Abstract

The advancement of autonomous systems -- from legged robots to self-driving vehicles and aircraft -- necessitates executing increasingly high-performance and dynamic motions without ever putting the system or its environment in harm's way. In this paper, we introduce Guardrails -- a novel runtime assurance mechanism that guarantees dynamic safety for autonomous systems, allowing them to safely evolve on the edge of their operational domains. Rooted in the theory of control barrier functions, Guardrails offers a control strategy that carefully blends commands from a human or AI operator with safe control actions to guarantee safe behavior. To demonstrate its capabilities, we implemented Guardrails on an F-16 fighter jet and conducted flight tests where Guardrails supervised a human pilot to enforce g-limits, altitude bounds, geofence constraints, and combinations thereof. Throughout extensive flight testing, Guardrails successfully ensured safety, keeping the pilot in control when safe to do so and minimally modifying unsafe pilot inputs otherwise.