State-Dependent Conformal Perception Bounds for Neuro-Symbolic Verification of Autonomous Systems
Thomas Waite, Yuang Geng, Trevor Turnquist, Ivan Ruchkin, Radoslav Ivanov
TL;DR
This work introduces state-dependent conformal bounds as a principled interface between neural perception and symbolic verification to enable high-confidence safety guarantees for autonomous systems. It leverages gradient-free optimization to partition the state space into regions and assigns region-specific perception bounds $\ eta(x)$, exploiting heteroskedasticity with respect to state to tighten reachable sets. The method combines two losses (EL, ETDL) to shape region partitions and applies scalar conformal prediction within each region, yielding per-region bounds that feed a high-confidence reachability analysis via Verisig. In a Mountain Car case study, state-dependent bounds produce significantly smaller reachable tubes than time-series CP baselines, demonstrating practical gains in verification conservatism and safety guarantees with controlled confidence $1-\\alpha$. The approach advances neuro-symbolic verification by marrying data-driven perception bounds with symbolic reachability under dynamical models, enabling tighter, probabilistic safety guarantees for complex autonomous systems.
Abstract
It remains a challenge to provide safety guarantees for autonomous systems with neural perception and control. A typical approach obtains symbolic bounds on perception error (e.g., using conformal prediction) and performs verification under these bounds. However, these bounds can lead to drastic conservatism in the resulting end-to-end safety guarantee. This paper proposes an approach to synthesize symbolic perception error bounds that serve as an optimal interface between perception performance and control verification. The key idea is to consider our error bounds to be heteroskedastic with respect to the system's state -- not time like in previous approaches. These bounds can be obtained with two gradient-free optimization algorithms. We demonstrate that our bounds lead to tighter safety guarantees than the state-of-the-art in a case study on a mountain car.
