Abstract
We present a framework for online generation of robust motion plans for robotic systems with nonlinear dynamics subject to bounded disturbances, control constraints, and online state constraints such as obstacles. In an offline phase, one computes the structure of a feedback controller that can be efficiently implemented online to track any feasible nominal trajectory. The offline phase leverages contraction theory, specifically, Control Contraction Metrics, and convex optimization to characterize a fixed-size “tube” that the state is guaranteed to remain within while tracking a nominal trajectory (representing the center of the tube). In the online phase, when the robot is faced with obstacles, a motion planner uses such a tube as a robustness margin for collision checking, yielding nominal trajectories that can be safely executed, that is, tracked without collisions under disturbances. In contrast to recent work on robust online planning using funnel libraries, our approach is not restricted to a fixed library of maneuvers computed offline and is thus particularly well-suited to applications such as UAV flight in densely cluttered environments where complex maneuvers may be required to reach a goal. We demonstrate our approach through numerical simulations of planar and 3D quadrotors, and hardware results on a quadrotor platform navigating a complex obstacle environment while subject to aerodynamic disturbances. The results demonstrate the ability of our approach to jointly balance motion safety and efficiency for agile robotic systems.
Keywords
1. Introduction
Despite significant progress in the field of motion planning, the problem of safe real-time planning for robots with nonlinear and underactuated dynamics subject to uncertainty has remained an outstanding challenge. A key difficulty is that uncertainty and disturbances in the dynamics force us to reason about the “funnel” (or tube) of possible outcomes (see Figures 1 and 2) that the disturbances may drive the system to, rather than a single planned trajectory. Consequently, the key challenges for planning translate into the ability to guarantee both safety (with respect to constraint satisfaction and collision avoidance) and performance (with respect to some cost function optimality) for the robotic system in cluttered and possibly dynamically changing environments. A planar-quadrotor navigating in real-time through a previously unseen cluttered environment in the presence of a horizontal cross-wind disturbance. A nominal (disturbance-free) trajectory (dashed-red line) is generated online in response to obstacles reported in the environment such that the invariant tube (computed offline) centered around the trajectory does not intersect obstacles. The breakpoints in the tube mark the instances where the nominal path is locally re-optimized as it adjusts to the actual executed trajectory veering to the edges of the tube due to the cross-wind (but still remains within it as guaranteed by the tracking controller). The spacing between the edge of the tube and the obstacles accounts for the size of the vehicle itself. Illustration of the robust planning with invariant tubes methodology on a full 3D quadrotor in simulation and experiment.

1.1. Outline of approach
The goal of this paper is to propose an approach for generating motion plans with certifiable margins of safety. In particular, in an offline stage, one synthesizes the structure of a tracking controller which can be efficiently implemented online to guarantee exponential convergence to any feasible nominal trajectory in the absence of disturbances. Additionally, the offline computation yields a fixed-size invariant “tube” (akin to a funnel) that can be centered around any nominal trajectory as a guaranteed collision-free envelope in the presence of bounded disturbances. In the online phase, when the robot is faced with obstacles, one can use such a tube as a robustness margin during collision checking, thus leading to nominal trajectories that can be safely executed. We stress that this paper does not propose a new motion planning algorithm. Instead, it proposes a framework for using a standard motion planner as a “black box” or “primitive routine,” combined with a feedback control design methodology that together enable the online generation of safe nominal motion plans that can be robustly executed.
The key idea behind our approach is to leverage contraction theory (Lohmiller and Slotine, 1998), a method for analyzing nonlinear systems by studying convergence between pairs of trajectories. This makes it particularly well-suited to the problem we consider here since it does not require us to commit to a particular nominal trajectory in order to analyze the stability properties of a feedback controller designed to track it. In particular, we design tracking controllers by using control contraction metrics (CCMs) (Manchester and Slotine, 2017), a generalization of control Lyapunov functions that can be computed using convex optimization.
2. Problem statement and related work
Consider robotic systems whose dynamics are described by the nonlinear differential equation
The motion planning problem we wish to address is to find a (possibly non-stationary) policy
The topic of planning under uncertainty has been approached from two general methodologies within the robotics community. In the first approach, one seeks probabilistic guarantees on safety (e.g., collision probabilities) for a stochastic model of uncertainty. This is elegantly described by the chance-constrained programming framework (Charnes and Cooper, 1959). Typical solution methods generally consider linear systems affected by Gaussian noise (Blackmore et al., 2006, 2011; Ono et al., 2013) or more generally, exploit linear-Gaussian dependencies (Luders et al., 2016). The extension to nonlinear dynamics and/or non-Gaussian noise is inherently difficult; typical methods employ sampling (Monte Carlo) techniques (Janson et al., 2015b; Sun et al., 2015), stochastic Lyapunov theory (Battilotti and De Santis, 2003; Buehler et al., 2016), or Gaussian processes with (probabilistically) robust feedback linearization (Helwa et al., 2019). In the more general case with partial observability and/or noisy sensing, the stochastic formulation is lifted to the belief space planning framework (Kaelbling et al., 1998; Kurniawati et al., 2008; Prentice and Roy, 2009; Platt et al., 2012; Agha-mohammadi et al., 2014). This approach has been typically constrained by limitations such as Gaussian belief state assumptions, linear dynamics, and/or small state and action spaces, for instance, in the Partially Observable Markov Decision Process (POMDP) framework.
In the second approach, in contrast to the stochastic methodology, one considers bounded models of uncertainty, where w(t) is assumed to be piecewise An overview of methods for computing exactly or outer-approximating the reachability set for nonlinear systems. The references in the blue-outline box constitute the primary motivation for our planning framework, that is, sequential composition of invariant tubes. The red-outline box indicates the method for computing these tubes, that is, via CCMs.
On the exact end of the spectrum, one may leverage logic-based methods (e.g., quantifier elimination) to recursively compute the backward reachable set of a given goal set (Raković et al., 2006a; Kong et al., 2015). In a similar vein, the differential game formulation treats any admissible disturbance as an adversarial agent and one can compute the backward reachable set of unsafe sets (e.g., obstacle locations) as the solution to a Hamilton–Jacobi PDE using level-set methods (Tomlin et al., 2003; Gillula et al., 2010; Chen et al., 2016; Herbert et al., 2017; Fridovich-Keil et al., 2018). While these methods are exact in that they precisely characterize a collision-free “roadmap” to the goal set, and in the differential game formulation, also yield the optimal closed-loop controller, implementation of these methods for dynamically changing or unknown environments and/or high-dimensional systems is computationally prohibitive. A computational relaxation in this spirit is the barrier certificates method (Prajna et al., 2007; Barry et al., 2012) in which one characterizes the unsafe regions in the state-space as the zero-superlevel set of a function whose time derivative on the zero-level set is negative for a given controller and all admissible disturbances. While this yields a more conservative sufficient condition, the method is again incompatible with generalizing to unknown environments discovered in real-time.
As presented earlier, the motion planning problem entails an optimization over the class of state-feedback functions—a computationally intractable task in general with a solution that is incompatible with changing environments (e.g., obstacle locations). In an effort to reduce computational complexity, the prevailing solution approach, and indeed the strategy adopted within this work, is to parameterize general state-feedback policies as a sum of a nominal (open-loop) input u* and a feedback term designed to track the nominal state trajectory x* (induced by u* assuming no disturbances).
Suppose (x*, u*) is a state-input trajectory satisfying the nominal dynamics (i.e., (1) with w ≡ 0) and (x, u) is a state-input trajectory satisfying (1) under the action of a parameterized policy (2). Let
(RCI Tube) Intuitively, a tracking controller with an associated RCI tube Ω(⋅) guarantees that the state of the system is always “close” to its nominal value x*(t) (precisely, within set Ω(x*(t)). Thus, by planning a nominal state-input trajectory satisfying the tightened constraints For fully-actuated (i.e., feedback linearizable) systems, RCI tubes or funnels may be computed and optimized using sliding control (Slotine, 2007; Lopez et al., 2018). More conservative approximations of these sets may be found using linear reachability analysis, where one computes continuous linearizations of the dynamics about reference trajectories and treats nonlinearities as bounded disturbances (Althoff and Dolan, 2014; Althoff et al., 2015). Alternatively, by bounding the dynamics’ Lipschitz constant or Jacobian, one obtains an exponentially growing outer approximation of the reachable set. For instance, in Pin et al. (2009), a bound on the global Lipschitz constant is used to compute sequentially tightened constraint sets for a reference trajectory to ensure robust constraint satisfaction, while Bravo et al. (2006) present a general framework for computing outer approximations of reachable sets using zonotopes, which, while possessing favorable computational properties, again yield overly conservative approximations. The differential inequality approach in Scott and Barton (2013) and Villanueva et al. (2017) attempts to alleviate the conservativeness resulting from such linear methods through online co-optimization of the reference trajectory and its associated reachable set. In similar spirit, Manchester and Kuindersma (2017, 2019) leverage a measure of the size of the approximate invariant funnels computed using linear analysis (i.e., propagation of ellipsoids under linearized dynamics) within the formulation of the cost function for the nominal trajectory itself. However, these problems are posed as one-off offline computations and not suitable for real-time re-planning on fast robotic systems. In general, treating nonlinearities as bounded disturbances naturally leads to overly conservative approximations. Convex programming-based verification methods such as sum-of-squares (SOS) programming have gained increasing popularity in feedback motion planning. For instance, the LQR-Trees algorithm (Tedrake et al., 2010) constructs a tree of local LQR feedback controllers; however, it cannot handle scenarios in which the task and environment are unknown until runtime. Recently, the funnel library approach (Majumdar and Tedrake, 2012, 2017) has been proposed to handle online geometric constraints (e.g., obstacles) that force the robot to re-plan in real-time. The approach leverages SOS programming to compute, offline, a library of funnels around a set of nominal trajectories in which the state is guaranteed to remain despite bounded disturbances. These funnels are then sequentially composed online to avoid obstacles. However, this approach is restricted to employing a fixed set of trajectories computed offline. While the richness of the funnel library may be increased by exploiting invariances in the dynamics (Majumdar and Tedrake, 2017) or pre-computing a family of funnels parameterized by shifts to a nominal trajectory (Majumdar et al., 2012), one would ideally like to generate a funnel around any nominal trajectory generated online. The concept of feedback motion planning is also fundamental within Tube Model Predictive Control (TMPC), whereby one computes a tracking feedback (also termed ancillary) controller that keeps the state within an invariant “tube” around the nominal MPC trajectory despite disturbances. TMPC has been studied extensively for linear systems with bounded disturbances or model uncertainties (Langson et al., 2004; Mayne et al., 2005; Limon et al., 2010; Farina and Scattolini, 2012; Rakovic et al., 2012), and for linear systems with stochastic disturbances (Fleming et al., 2015) (see also the recent review Mayne, 2014). The application of TMPC to nonlinear systems is certainly not new; see, for instance, Raković (2009) where the properties of TMPC for nonlinear systems are explored via lifting the analysis to set dynamics and employing the Banach fixed-point theorem. However, the construction of invariant tubes and the design of the associated ancillary controller in the nonlinear setup is significantly more complicated than in the linear case. In Raković (2009), for instance, the existence of a stabilizing (nonlinear) ancillary controller (that results in contracting set iterates) is simply assumed, while in Kögel and Findeisen (2015), a static linear state-feedback ancillary controller is used to stabilize the “linear” component of the nonlinear dynamics and Lipschitz continuity is used to bound the effect of disturbance propagation. Some techniques to construct the ancillary controller and accompanying invariant tube proposed in existing literature include systems with matched nonlinearities and linear ancillary feedback (Raković et al., 2006b); integral sliding mode ancillary feedback with Lipschitz-based reachability analysis (Rubagotti et al., 2011); ellipsoidal invariant tubes constructed using linear-matrix-inequalities (LMI) and bounds on the Lipschitz constant (Yu et al., 2013) or assuming a polytopic linear differential inclusion model for the dynamics (Yu et al., 2010); ancillary-MPC with Lipschitz-based reachability analysis (Mayne et al., 2011); systems with incrementally conic uncertainties stabilized using linear ancillary feedback (Carsons et al., 2013); and linearization with static or time-varying linear ancillary feedback with nonlinearities treated as bounded disturbances (Cannon et al., 2011). As with the robotic planning literature, methods leveraging linearization or Lipschitz constants are inherently overly conservative. The notion of incremental input-to-state stability (δ-ISS) for discrete-time systems was used in Bayer et al. (2013) to derive the invariant tube as a sublevel set of the associated δ-ISS Lyapunov function, which was assumed to be given. More recently, Köhler et al. (2019) leverage the assumed existence of such a function and implicitly incorporate constraint tightening via constraining the growth of this function (using a nonlinear dynamical representation of the scalar defining the Lyapunov sublevel sets) as part of the MPC optimization problem. Again, these bounding functions are either assumed given, or constructed assuming local linear feedback. In contrast, the work presented herein focuses on the design and optimization of the functions themselves (and the associated feedback controllers), subsequently permitting the use of algorithms such as the one presented in Köhler et al. (2019).
2.1. Statement of contributions
In this paper, we leverage recent advances in contraction theory for control design through the use of control contraction metrics (CCM) (Manchester and Slotine, 2017). Contraction theory (Lohmiller and Slotine, 1998) is a method of analyzing nonlinear systems in a differential framework, that is, via the associated variational system (Crouch and Van der Schaft, 1987, Chp 3), and is focused on the study of convergence between pairs of state trajectories toward each other. Thus, at its core, contraction explores a stronger notion of stability—that of incremental stability between solution trajectories, instead of the stability of an equilibrium point or invariant set. While the analysis in Lohmiller and Slotine (1998) and most other works on contraction theory focus on analyzing the stability of closed-loop vector fields—(Jouffroy, 2003; Sontag, 2010; Sontag et al., 2014; Simpson-Porco and Bullo, 2014; Forni and Sepulchre, 2014); see also the recent review in Aminzarey and Sontag (2014) and references therein, recent results demonstrate the applicability of contraction theory for constructive control design, for example, control via backstepping (Sharma and Kar, 2009; Zamani et al., 2013), control for singularly perturbed systems using multiple time-scales (Rayguru and Kar, 2015), and control via CCMs (Manchester et al., 2015; Manchester and Slotine, 2017; Singh et al., 2017). The concept of δ-ISS has also been studied within a contraction theory framework, for example, in Zamani et al. (2013), where contraction metrics are derived for a class of nonlinear systems stabilized using backstepping. Compared to works on establishing incremental stability through suitable δ-ISS Lyapunov functions (Angeli, 2002, 2009), contraction metrics are an intrinsic characterization of incremental stability (i.e., coordinate invariant) and the search for a suitable metric and associated stabilizing controller via convex optimization boasts obvious practical benefits.
The contributions of this paper are the following. First, on the theoretical side, while the CCM approach is directly inspired by Manchester and Slotine (2017), we present an alternative proof of incremental exponential stability between trajectories using a suitable CCM-derived controller (Section 3.3). This proof employs techniques from calculus of variations and differential geometry in order to derive a tighter characterization of the controller’s disturbance rejection properties and the size of the corresponding invariant tube (Section 3.4), under significantly weaker conditions for the CCM as compared to Manchester and Slotine (2017) and Zamani et al. (2013). Second, we derive a bound on the magnitude of the tracking controller by leveraging properties of CCMs and exploiting analogies with differential control Lyapunov functions (Section 4.5). Third, on the algorithmic side, we present an offline/online framework for robust motion planning where in the offline phase, we formulate a quasiconvex optimization problem using SOS programming that searches for an optimal CCM in order to minimize the cross-section of the invariant tube (Section 4). The optimized tube is used online to obtain nominal motion plans that can be robustly tracked (Section 5). Fourth, on the experimental front, we illustrate our method and several variations on simulated 6-state planar-quadrotor and 10-state 3D quadrotor systems (Section 6). Finally, we present experimental results on a quadrotor hardware testbed by generating robust motion plans using sampling-based planning and polynomial smoothing for a cluttered lab environment and evaluate the performance of the quadrotor in the presence of aerodynamic disturbances induced by unmodeled drag forces (Section 7).
A preliminary version of this work was presented at ICRA 2017 (Singh et al., 2017). In this revised and extended version, we additionally present (i) full proofs for all technical results, (ii) a tutorial on CCM computation via illustrative examples, (iii) extensions to the online planning algorithm to leverage less conservative time-varying tubes, (iv) extensive additional numerical experiments, including failure analysis, and (v) validation on a hardware testbed.
Our approach has several advantages over prior work on robust motion planning and MPC. First, by explicitly enforcing safety in the online planning process, the method is particularly suited to planning in previously unseen and tightly constrained environments, where it might be difficult to find feasible solutions by sequencing a pre-computed set of maneuvers (Figure 1). Second, in contrast to the class of techniques that employ linear reachability analysis to conservatively approximate funnels/tubes for nonlinear systems by treating nonlinearities as bounded disturbances, our analysis directly reasons about intrinsic nonlinearities in the dynamics and thus has the potential to be less conservative for highly nonlinear systems. Notably, our approach allows for both the design and optimization of invariant tubes and tracking feedback controllers. Third, the method is computationally rooted in convex optimization, which in turn carries a smaller computational burden than differential game formulations for computing reachable tubes, which require numerical solutions to PDEs.
2.2. Organization
The paper is organized into four key sections: • Trajectory Tracking with Contraction Theory 1. Introduction and Definitions; Sections 3.1–3.2: Introduction to Contraction Theory and CCMs as differential Control Lyapunov functions. 2. Exponentially Stabilizing Controllers; Section 3.3: Define the CCM-induced Riemannian distance and prove exponential stabilizability via explicit- and implicitly defined CCM-based feedback controllers. 3. Disturbance Rejection; Section 3.4: Prove Riemannian distance boundedness under the assumption of bounded additive disturbances, thereby defining the RCI set. • Offline Synthesis of CCMs and Computation of Bounds 1. Characterizing the RCI Tube; Section 4.1: Define a fixed-size ellipsoidal outer approximation to the RCI set to enable fast planning. 2. Synthesizing Optimized CCMs; Sections 4.2–4.4: Formulate minimization of the RCI set’s size as a quasiconvex functional optimization, and illustrate a tractable finite-dimensional reduction via SOS programming. 3. Bounding the CCM Tracking Controller; Section 4.5: Derive bounds on the CCM feedback controller for pairs of states contained within an RCI set. • Robust Planning; Section 5: Formulate planning with tightened constraints and present a receding-horizon variation to allow online RCI set-aware re-planning. • Experiments 1. Numerical Experiments—Planar and 3D Quadrotors; Section 6: Illustrate offline CCM synthesis and RCI set computation, online execution via planning with sampling-based planners and polynomial splines, validation of theoretical bounds under varying disturbances. 2. Hardware Experiments—Quadrotor Racecourse; Section 7: Deployment of the CCM feedback controller on an embedded device, calibrating a drag model as the disturbance, planning and execution through a fixed race-course, validation of theoretical bounds and statistical analysis of tracking performance.
3. Trajectory tracking with contraction theory
In this section, we demonstrate how to derive trajectory tracking controllers with (i) exponential convergence properties in the absence of disturbances, and (ii) strong boundedness properties in the presence of bounded disturbances, by leveraging contraction theory. In particular, this section of the paper is concerned with the task of robust nonlinear feedback control design. The integration of the results of this section into a feedback planning algorithm will be the focus of Section 5. The core principle behind contraction theory (Lohmiller and Slotine, 1998) is to study the evolution of distance between any two infinitesimally close neighboring trajectories and draw conclusions on the distance between any finitely apart pair of trajectories. We begin by first introducing the fundamentals of contraction theory, in the absence of control.
3.1. Introduction to contraction
Given an autonomous system of the form:
Then, if the (symmetric part) of the Jacobian matrix ∂f/∂x is uniformly negative definite, that is
Contraction metrics generalize this observation by considering as infinitesimal squared length distance, a symmetric positive definite function
3.2. Control Contraction Metrics
Control contraction metrics (CCMs) generalize contraction analysis to the controlled dynamical setting, in the sense that the analysis searches jointly for a controller design and the metric that describes the contraction properties of the resulting closed-loop system. To define CCMs, we first introduce the concept of variational dynamics.
Denote the tangent space of
(CCM) This definition of a CCM allows us to interpret V(x, δ
x
) as a differential control Lyapunov function (CLF) on the tangent bundle
3.2.1. Exponentially stabilizing CCMs
Under the special case of exponential stability, we can provide a more precise algebraic definition of CCMs. Suppose that the following equality holds for all
Condition (5) implies that the vectors b
j
form a Killing vector field for the metric tensor M(x). Under this condition,
Then, if the following property holds for some constant λ > 0 and all
Notice that condition (7) simply indicates that for all directions where the variational system lacks controllability (given by the null-space of B
T
(x)M(x)), the system is naturally contracting with rate λ. In the scenario where (5) fails to be true, one may leverage the following weaker alternative to conditions (5) and (7)
(CCM)
3.3. Incrementally stabilizing controllers
We now illustrate how to leverage a differential controller which guarantees stability on an infinitesimal scale by the property
(Incremental Exponential Stability) Then, the trajectory x*(t) is said to be incrementally exponentially stabilizable (IES) with rate λ and overshoot constant C. To derive our IES-guaranteeing stabilizing controller, we require the following definitions regarding curves and distances on
(Curves and Distances on Riemannian Manifolds). Treating Given a desired nominal state-input trajectory pair (x*(t), u*(t)), let In case the weaker condition (9) is used, δ
u
= δ
u
(x, δ
x
, u), and thus, π(x(t), t) will be given by the solution to the differential equation Schematic of the differential CLF V(x, δx) at the end points of the geodesics γ(⋅, t) and γ(⋅, t′), at times t and t′ > t, respectively, and the geodesic velocity vector at the position s ∈ (0, 1) along the geodesic. The contours of V are shaped according to the metric tensor M(x). The differential controller ensures that at all points along the geodesic V(x, δx) is shrinking in the direction tangent to the geodesic.
(Incrementally stabilizing controller)
This result is true for all t ≥ 0 such that x(t) ∉ Cut(x*(t)). For completeness, suppose now that x(t) ∈ Cut(x*(t)), a Lebesgue measure zero set. In this scenario, the minimizing geodesic γ(⋅, t) may not be unique and thus the Riemannian energy
It follows that
The construction of the virtual parameterized set of solutions induced by (13) is needed as one cannot directly reason about the evolution of the minimizing geodesic. Instead, we leverage the Euler–Lagrange equation to equate an upper bound on the time derivative of the Riemann energy between trajectories x*(⋅) and x(⋅), that is, eq. (16), and an integral of the Lie derivative of the metric tensor M(x) with respect to the nominal dynamics, that is, equations (17) and (18).
It can be shown that conditions (5) and (7) are invariant under state diffeomorphism and metric pushforward (Manchester and Slotine, 2017). This invariance allows one to relax the topological assumptions on the state-space
3.3.1. Min-norm stabilizing controller
Notice that the proof of Theorem 3.5 relies on establishing the inequality:
A few comments are in order. First, from the earlier discussion, problem
While the interpretation of the energy as an incremental CLF is an observation also made in Manchester and Slotine (2017), by showing equivalence between the right hand sides of (16), (17), and (20) and using this to establish IES for x*(t), we are able to derive the robustness guarantees for controller (11) under significantly weaker conditions than those necessary in Manchester and Slotine (2017). We explore this distinction next in further detail.
3.4. Disturbance rejection
We now deduce the disturbance rejection properties of an exponentially stabilizing CCM controller and derive the resulting RCI mapping for the closed-loop system stabilized with this controller. Henceforth, (x*(t), u*(t)) is assumed to satisfy the unperturbed dynamics, while x(t) denotes the actual state trajectory (i.e., with disturbances) using the control law u*(t) + k(x*, x), where k(⋅, ⋅) is an exponentially stabilizing CCM controller.
(Disturbance Rejection). Assume there exists a CCM M(x) satisfying conditions (5) and (7) that is uniformly bounded, that is, Suppose, additionally that
Inequality (16) implies Defining δ
z
(s, t)≔Θ(γ(s, t))δ
γ
(s, t), we obtain Recall that the velocity field of a geodesic is parallel along the geodesic (Spivak, 1999), and thus, Finally, notice that the equality in (22) yields the well-known Bernoulli differential equation. Then, since
Notice that the differential inequality derived in (22) may be integrated in time to yield a δ-ISS statement similar to Definition 2.3 in Zamani et al. (2013). Specifically, in Zamani et al. (2013), the authors prove δ-ISS by leveraging a decrescent condition similar to inequality (8) with respect to tangent vectors δ
w
defined on the tangent space of the disturbance manifold
We further note that a similar bound is also proved in
Manchester and Slotine (2017)
. However, as their proof also leverages a differential treatment of disturbance, the result requires stronger conditions (akin to the Killing field condition in (5)) between M(x) and the disturbance input matrix B
w
. Our result circumvents the need for a differential treatment of disturbance by directly leveraging the stability property of inequality (24), as proven in Theorem 3.5.
So far we have shown how the existence of a feasible CCM M(x) allows us to construct exponentially stabilizing controllers with bounded-input-bounded-output disturbance rejection guarantees. In the next section, we demonstrate how one can leverage convex optimization techniques, specifically SOS programming, to compute offline, an optimized CCM that minimizes the size of the RCI tube.
4. Offline synthesis of CCMs and computation of bounds
In this section, we show how to compute CCMs offline that minimize a certain measure of the size of the RCI set which in turn minimizes the deviation of the perturbed trajectory from the nominal, thereby reducing the amount by which we must tighten the set
4.1. Ellipsoidal RCI tube
Notice that the mapping in (23) is given using the Riemann distance which may depend upon a spatially varying metric. In order to efficiently plan a nominal trajectory whose associated RCI tube does not collide with obstacles, we would prefer a mapping that is independent of x*. To this end, consider the following technical lemma (the proof is provided in Appendix B).
(Geodesic Boundedness) Consider points Equation (25) gives an ellipsoidal outer approximation of the RCI tube as defined in (23), and is thus independent of x* (see Figure 5 for an illustration). This is essential for two reasons: (i) it drastically simplifies collision checking with respect to obstacles by avoiding geodesic computations, and (ii) the tightened state constraint set

Illustration of the sets Ω(x*) and
4.2. Sum-of-squares programming
Our computational approach is rooted in SOS programming, for which we provide a brief review here. For a more detailed review of SOS programming and its applications, please refer to Parrilo (2000); Ahmadi and Majumdar (2016); Majumdar and Tedrake (2017). We begin by discussing semi-definite programs (SDPs), a class of convex optimizations problems formulated over the space of symmetric positive semi-definite matrices. A symmetric matrix
The computational advantage of SOS programming stems from its intrinsic link to SDPs. Specifically, a polynomial p of degree 2d is SOS if and only if p(x) = z(x) T Qz(x), where Q≽0 and z is a vector of monomials up to order d. Thus, certifying that a polynomial is SOS reduces to the task of finding a psd matrix Q subject to a finite set of linear equalities, thus taking the form in (26). Certificates of the form in (28) will form the building block for the computation of CCMs, as discussed next.
4.3. Synthesizing optimized CCMs
As shown in Manchester and Slotine (2017), condition (7) can be written as a pointwise Linear-Matrix-Inequality (LMI) by introducing the dual metric W(x)≔M(x)
−1
and the change of variables η
x
≔M(x)δ
x
. Specifically, define a matrix B
⊥
(x) whose columns form a basis for the null-space of B(x)
T
(i.e., B(x)
T
B
⊥
(x) = 0). Then, conditions (5) and (7) are equivalent to
The equivalent re-formulation of the weaker condition (9) in terms of the dual metric is given by LMI (30) and
First, to address the infinite-dimensionality of the problem, we consider a finite-dimensional approximation whereby the dual metric W(x) is parameterized as a polynomial matrix and the LMIs are written as SOS constraints, enforced over the semialgebraic set
The cost function above is an upper bound on the worst-case (normalized) Euclidean distance within the ellipsoid defined in (25) since from (33), we have
Recognizing that for a fixed contraction rate λ, the CCM conditions define a convex feasibility region for W(x), and that minimization of the condition number of a positive definite matrix over a closed convex set (i.e., the inner minimization in problem
One may alternatively choose the following objective for problem
4.4. Illustrative example
Consider the 6-state planar-quadrotor system depicted in Figure 6. Notably, this system is underactuated and has unstable zero dynamics, and thus represents a challenging system to benchmark the approach. Definition of planar-quadrotor state variables: l denotes the thrust moment arm (symmetric), and u1 and u2 denote the right and left thrust forces, respectively.
The state vector is defined as
By translation invariance of the dynamics, we expect that W will not be a function of (p
x
, p
z
). Furthermore, by leveraging this state representation, condition (29) requires that W is not a function of v
z
or
To enforce the semi-definite constraints of the type h(x) ≥ 0 ⇒ F(x)≽0 where
We parameterized W(x) as a polynomial matrix in (v x , ϕ) with up to degree 4 monomials (higher degree monomials yielded no further improvement in the bounds). The trigonometric terms from the dynamics function were approximated using Chebyshev polynomial expansions up to third order. To account for this approximation, satisfaction of the LMIs was numerically checked post optimization using the true dynamics by gridding over (v x , v z , ϕ).
Having cast the optimization as a SOS program, we may now proceed with solving problem Problem Projections of the ellipsoidal tube upon various state-dimensions.

Notice that the projection of the outer ellipsoidal approximation of the RCI set onto the p x -p z plane has a major axis equal to 74 cm, and a minor axis equal to 41 cm, which compare quite favorably with the quadrotor wingspan, equal to 50 cm. That is, the size of the RCI tube is rather small and thus the nominal motion planner for the quadrotor is not overly constrained by the tightening of the state constraints.
4.5. Bounding the CCM tracking controller
Having synthesized a CCM, the corresponding RCI set as well as its ellipsoidal outer approximation used for planning are characterized by (23) and (25), respectively, allowing us to define the tightened state constraints
There are two ways to compute bounds on the CCM feedback controller. For systems that satisfy the stronger Killing field condition given by (29), Theorem 4.4 provides a bound on the magnitude of the optimized tracking controller computed using problem
(Norm Bound for Tracking Controller)
See
Appendix B
.
We now leverage Lemma 4.3 to derive a bound on the magnitude of the min-norm CCM controller defined in Problem
(Tracking Control Effort) Assume the dual CCM W(x) satisfies conditions (29) and (30). Factorize W(x) as L(x)
T
L(x) and define S(x) = L
−T
FL
−1
and Y(x) = B
T
L
−1
. Let
A tight approximation for
For systems that do not satisfy the strong Killing field condition in (29), and instead satisfy the alternative pair of conditions, that is, (30) and (31), one may bound the feedback control by augmenting the state with u, and treating
5. Robust planning
We are finally ready to formalize the robust planning algorithm. The core part of the algorithm relies on computing nominal motion plans (x*, u*) for the unperturbed dynamics using tightened constraints. Given the ellipsoidal tube derived in Section 4.1 and the control effort bounds computed in the previous section, these tightened constraints are given as
Notice that the state constraint is shrunk by the fixed-size ellipsoid
5.1. Receding horizon implementation
Given a robust motion plan (i.e., a nominal state-input trajectory (x*, u*) such that the RCI tube centered on x* does not intersect any obstacles), one can make local updates to it using the following MPC problem solved at the discrete-time instants
Problem MPC should be understood as a local re-optimization step—thus, it should be solved using local methods such as trajectory optimization techniques (Betts, 2010) or elastic bands (Quinlan and Khatib, 1993) (as opposed to fully-fledged global planners). Notice that the initial value of the updated nominal state trajectory, that is,
Let
(Recursive Feasibility for MPC)
For Thus, for the MPC problem solved at time t
i
, one can modify constraint (47) to This constraint states that the Riemann energy between the start of the new nominal MPC trajectory Algorithm 1 provides pseudocode for the overall approach.
Algorithm 1 1: 2: Inputs: dynamics model, 3: Compute: Optimized metric & contraction rate: (W(x), λ), Ellipsoidal RCI set: 4: 5: Inputs: x(0) (initial state), 6: Compute nominal (x*, u*), such that 7: Initialize: t
plan
← 0 8: 9: 10: Re-plan nominal (x*, u*) 11: 12: 13: 14: Update t
plan
← t 15: 16: 17: Apply control
6. Numerical experiments
We now verify our approach in simulation by continuing with the 6-state planar-quadrotor system in Section 6.1, and then apply the framework to the more challenging 10-state 3D quadrotor model in Section 6.2. All simulation code (MATLAB) is available at https://github.com/StanfordASL/RobustMP.
6.1. Planar quadrotor
We continue with the planar-quadrotor system introduced in Section 4.4. With the CCM computed, we now address the planning component of this task. First, we impose the control bounds on the thrust for each propeller to the range [0.1, 2]mg. With the computed CCM from Section 4.4, the feedback control effort bound
6.1.1. Planning with static tubes
Having computed (offline) the RCI mapping, we tested Algorithm 1 on the previously unseen densely cluttered environment in Figure 1. The disturbance direction fluctuated (continuously) between left and right to try to push the vehicle into an obstacle. Problem MPC was re-solved every Δ = 1s with horizon T = 2s using the pseudospectral collocation method and the SNOPT solver, and leveraged the static bound given in (25). The tracking controller was implemented using zero-order-hold at 200 Hz. Leveraging a suboptimal implementation in MATLAB, the time required to compute the tracking controller (on a 3.5 GHz Intel equipped with 16 GB of RAM) is on the order of 3.5 ms. On average, each MPC problem took 0.35 s to solve. This compares favorably with the re-solve time of 1 s. Furthermore, we expect that this computational performance can be significantly improved with a more efficient implementation and by using trajectory optimization methods that fully exploit the local nature of the problem. We do not report the computation of the nominal trajectory (line 6 in Algorithm 1) since it highly depends on the motion planner used and is not a focus of this paper.
This example provides evidence that Algorithm 1 can be used for the online generation of safe motion plans that can be reliably executed (provided that the nominal motion plan can also be computed in real-time). This example also illustrates the benefits of our method as compared to the funnel library approach (Majumdar and Tedrake, 2017). A pre-computed set of trajectories (as required by Majumdar and Tedrake, 2017)) would be unlikely to contain a sequence leading from the start to goal while maneuvering through the very tight spaces between obstacles.
6.1.2. Planning with dynamic tubes
We also illustrate the use of the RCI tubes using the time-varying bounds referenced in Remark 5.2. Due to the increased complexity of the MPC problem, the lookahead and re-solve times were increased to T = 4 s and Δ = 1.5 s, respectively. Figure 9 illustrates the benefits of dynamically updating tubes. We draw attention to the MPC solver making effective use of the time-varying tube to generate tighter nominal trajectories that would have been deemed infeasible using the fixed-size tube. Implementation of the planar-quadrotor example with time-varying tubes. For clarity, the quadrotor graphic has been removed and the obstacles have been inflated by the vehicle size.
6.2. 3D Quadrotor
6.2.1. Dynamics and constraints
We adopt the state-space representation
6.2.2. CCM computation
Notice that yaw is completely decoupled in these equations of motion. This property, manifested here trivially by choice of the rotation order, reinforces the oft-cited independence of yaw-motion from roll and pitch for quadrotors. One may however design trajectories using any other rotation parametrization and simply transform into this coordinate frame, without loss of generality. A consequence of this parametrization however is that we can decouple the “yaw” part of the dual metric, using the following block-partition model
Given the block diagonal structure of W, we solve for the top left 9 × 9 block of the metric using the SOS formulation discussed in Section 4 and independently design W
ψ
. Once again, the trigonometric terms in the dynamics were approximated using Chebyshev polynomial expansions up to third order (the resulting W(x) was numerically verified using the true dynamics via gridding over (f, ϕ, θ)). Figure 10 plots the optimal curve for J
CCM
as a function of λ (for the top left 9 ×9 block of W(x)), using the alternative objective given in Remark 4.2. The scaling matrix W
s
was chosen in order to prioritize the Euclidean error, and set as diag(15, 15, 15, 1, 1, 1, 1, 1, 1). Problem 
The optimal contraction rate can be seen to be λ = 1.29 and the corresponding dual metric W(x) contained 35 unique monomials in (f, ϕ, θ). Assuming a cross-wind acting in any direction with effective acceleration up to 0.1 m/s
2
, we used gridding to compute a value of 0.0432 for
Note that although the SOS optimization gives us the lower and upper bounds on the eigenvalues of W(x) (and hence M(x)) due to explicit encoding of the uniform definiteness constraint, which can subsequently be used with λ to compute an upper bound on
6.2.3. Simulation under nominal disturbances
To verify the controller performance, we randomly initialized obstacle environments for the quadrotor, an example is depicted in Figure 11. Trajectory planning was performed by first computing a waypoint path using geometric FMT* (Janson et al., 2015a), and then smoothing this path using polynomial splines with the min-snap algorithm in Richter et al. (2016). Finally, differential flatness was leveraged to recover the open-loop state and control trajectories. Collision checking was performed by leveraging the configuration space representation of the obstacles, that is, polytopes, inflated by the size of the quadrotor (approximated as a 20 cm radius ball) and the projection of the tube bound onto position coordinates (a further 8.8 cm radius ball). Randomly generated obstacle environment with towers and trees; initial position of the quadrotor is (0,0,1), corresponding to the leftmost corner. The goal set is depicted as the light blue box.
Figure 12 shows an example of such a computed trajectory, along with the surrounding tube margin. The maximum speed along this trajectory is 3.00 m/s and the maximum pitch angle is approximately 21.5°. The yaw trajectory was designed to follow the horizontal plane velocity. Note that both these aspects of planning (waypoint generation using sampling-based planning and polynomial smoothing) are real-time algorithms and therefore can be efficiently executed in receding-horizon fashion. Robustness is easily accounted for via inflating the obstacles by the tube margin. Computed nominal trajectory with attitude depicted using the body-fixed coordinate frame (forward: red, left: blue). The trajectory itself is centered within the depicted invariant ellipsoidal tube (shown inflated by the size of the quadrotor). The overhead view illustrates the tight margins near the beginning and end of the trajectory.
Figure 13 illustrates the simulation results for the computed trajectory in Figure 12 for a variety of disturbance time-series (sinusoidal varying and fixed direction signals with constant magnitude set to Time-series tracking error plots for 24 different disturbance time-series for the nominal trajectory in Figure 12. As expected, all errors remain within the theoretically computed bounds, ensuring safe execution of the planned path.
6.2.4. Assessing conservatism
Within this section, we empirically evaluate the conservatism in the computed tracking bounds by planning trajectories assuming the disturbance bound of 0.1 m/s
2
and increasing the actual disturbance level during simulation. We randomly generated 100 new trajectories similar to Figure 11 with varying obstacle placements. For each of the 100 nominal trajectories, we simulated the 24 disturbance time-series from Figure 13 with Empirical cdfs (rotated 90° for clarity) of tracking errors with varying simulation disturbance thresholds. Each cdf corresponds to data generated from 100 nominal trajectories and 24 disturbance time-series, for a total of approximately 4.1 million datapoints (equivalently, 4.5 h of simulation time) at each disturbance threshold. The horizontal lines indicate the theoretical tracking bounds as a function of 
It can be noted in Figure 14a that the gap between the largest geodesic energy tracking error observed for a fixed disturbance threshold and the theoretical upper bound is impressively tight. Indeed, this gap ranged between 1.56 and 30% of the theoretical bounds. Additionally, in all cases, the tracking errors crossed the theoretical bound computed using a value of
7. Hardware experiments
Finally, we illustrate the approach on an open-source quadrotor platform, shown in Figure 15. The quadrotor consists of (i) a standard DJI F330 frame, (ii) Pixhawk autopilot running the estimator and lower-level thrust and angular rate controllers, and (iii) a companion on-board ODROID-XU4 computer running a ROS node for computing the CCM controller (which generates the thrust and angular rate setpoints for Pixhawk). The code for the ROS node is available for download at https://github.com/ssingh19/asl_flight. There is also an Optitrack motion capture system providing inertial position and yaw estimates at 120 Hz, which is fused with the onboard EKF on the Pixhawk. Quadrotor experimental platform, equipped with Pixhawk autopilot (PX-AP) for low-level (thrust and angular rate) control, and ODROID companion computer for planning and CCM controller.
7.1. Controller implementation
7.1.1. CCM controller
During simulation, it was often observed that the computed geodesics at each sampling instant were nearly a straight line between x*(t) and x(t). Therefore, to further improve the runtime efficiency of the controller (i.e., avoid having to solve problem
While it is theoretically possible to bound the numerical error resulting from this approximation and the induced error within inequality (21) via bounding the Christoffel symbols associated with M(x), such an error analysis is likely to be conservative. Instead, we extracted tuples of (x*(t), x(t)) from the simulations in Section 6.2.4, and performed the following evaluations—see Figure 16: • Compare • Magnitude of the induced error (i.e., violation) in inequality (21) with u
x
set to the feedback computed using c
sl
. This is the main evaluation criterion, from a stability performance perspective. Validating use of straight-line approximation of geodesic to compute the online tracking controller. In the right subfigure, a negative value indicates slack, while a positive value indicates violation of the stability inequality (21). The steep saturation of the curve just past 0 indicates relatively inconsequential implications for the violation of the stability inequality.

From Figure 16a, we observe that Empirical cdfs (rotated 90° for clarity) of tracking errors with varying simulation disturbance thresholds, from using a straight-line approximation of the geodesic for computing the tracking controller. As before, the horizontal lines indicate the theoretical tracking bounds as a function of 
7.1.2. Lower-level Pixhawk controller
The lower-level controller on the Pixhawk autopilot is tasked with tracking the thrust and angular rate control setpoints generated by the CCM controller. The Euler rate commands from the CCM controller are converted into desired body-rates onboard Pixhawk and fed into the existing PID control loop. For thrust control, the commanded normalized thrust fc from the CCM controller and the estimated inertial acceleration
7.2. Calibrating disturbance bound
The role of aerodynamic disturbance for experiments was played by the (neglected in eq. (52)) drag force. To calibrate an upper bound for planning, we flew two calibration trajectories: a figure-eight (presented in this section) and a “race-course” (similar to the one in the next section). We describe the figure-eight trajectory here. The nominal trajectory was set as: p
x
(t) = r
x
− r
x
cos(ωt), p
y
(t) = r
y
sin(2ωt), p
z
(t) = h, where we set r
x
= 1 m, r
y
= 0.7 m, ω = 2π/10, and a constant altitude h = 1.5 m. The drag force was estimated based on the following augmented translational dynamics
To estimate the net body-frame drag f
d
, we leveraged a smoothed finite-differenced estimate of Experiment results for drag calibration flight using fixed-yaw figure-eight trajectory. The experiment was performed by ramping up speed over two cycles; the plots shown correspond to three cycles at the final speed (period of 10 s). In subplot (f), corresponding to geodesic energy, the initial spike around 55 s corresponds to a jump in speed for the nominal (reference) trajectory. Following the spike, the error stays below the (drag-adjusted) theoretical bound illustrated by the horizontal line.
Concatenating the data from the figure-eight and race-course trajectories, we used least-squares to compute the following estimates: Comparison of linear drag model predictions and estimated drag for the figure-eight calibration flight. Note that the entire flight (including the cycles at slower speed) and the race-course trajectory were used for estimating the parameters of the linear drag model.
In these experiments, the unknown but bounded perturbing force was taken to be the linear drag model. However, given the recent advancements in leveraging drag models within planning, for instance, as in (Faessler et al., 2018), one may also incorporate the learned drag model within the nominal dynamics and compute a drag-compensated CCM. While this would necessitate including coupled velocity and yaw dependence within the CCM, it would allow the separation of drag from the unmodeled aerodynamic disturbances, thereby reserving the disturbance bound margin for purely exogenous effects. For the purposes of illustrating the methodology in this paper, we reserve this extension for future work.
7.3. Robust planning
Equipped with a calibrated disturbance model, we ran the robust trajectory planner (geometric FMT* plus polynomial spline smoothing) introduced in the simulation section on the “race-course” test environment shown below in Figure 20. The computed trajectory was setup to create a challenging loop through the obstacle course through intermediate waypoints placed, for example, at the center of gates and in between the poles. To ensure robustness with respect to the drag model, a single constant was used to scale time (effectively, speed) along the trajectory such that the drag-adjusted invariant tube was collision-free. Importantly, the drag model was not re-estimated for these test trajectories. The computed trajectory along with the invariant tube is shown in Figure 21. Figure 22 plots the nominal body-frame velocity and expected drag. Quadrotor “race-course” test environment. Computed nominal trajectory with attitude depicted using the body-fixed coordinate frame (forward: red, left: blue). The trajectory itself is centered within the depicted invariant ellipsoidal tube. The views illustrate the tight margins through the obstacles. Top: Body frame and net velocity; bottom: Predicted body-frame and net drag force, along nominal trajectory. Maximum expected drag: 0.59 m/s2.


The maximum expected drag along the nominal trajectory is 0.59 m/s
2
, corresponding to a top speed of 1.9 m/s. This results in an adjusted translation error bound of 52 cm and a geodesic energy bound of
Following the computation of the nominal trajectory, the quadrotor was flown through the obstacle loop three times, with a 25% increase in speed (respectively, decrease in lap time) with each successive lap. A time-lapse
5
during the fastest lap is shown in Figure 23. Time-lapse of quadrotor through the obstacle course during the fastest lap. Top speed achieved: 3.81 m/s.
Note that the trajectory was not re-computed during the experiment since the purpose here was to (i) illustrate that the theoretically computed tracking error bounds are indeed physically meaningful and achievable on an actual hardware testbed, and (ii) evaluate the conservatism in the tracking bounds via greater experienced disturbance than planned for. In particular, only the first speed setting is theoretically robustly collision-free, in that the invariant tube computed using the max expected drag is collision-free. The subsequent laps executed at higher speeds have significantly higher expected drag and the resulting scaled tubes are not collision-free. Given the simulation results presented in Figure 14b however, we anticipated (and observed) collision-free execution at the higher speeds as well.
The experiment results for the three laps are presented in Figures 24 to 26, and comprise (i) XY desired and actual traces, (ii) translational and geodesic energy tracking errors, and (iii) estimated and predicted body frame and net drag. The statistics for the three laps are presented in Table 1. XY Trace of desired and actual followed trajectories. Lap direction: counter-clockwise. Validation of translational (left column) and geodesic energy (right column) error upper bounds. Validation of predicted drag model with parameters fixed a priori to all laps. Nominal trajectory extremes (max drag corresponds to the prediction from the linear drag model), drag-adjusted bounds, and actual flight error statistics. All three laps respect the theoretical upper bounds computed prior to the flights.


The key takeaway from the preceding numbers and plots is that all theoretical (a priori) geodesic energy and translational error tracking bounds computed using the calibrated drag model are validated within all three flights. Additionally, we note the following interesting observations. First, the peaks in the geodesic energy curves line up quite well with the local peaks in aerodynamic disturbance due to either drag model or ground/interaction effects. Indeed, as the video illustrates, there are notable perturbations in the vicinity of the box (see also Figure 27), ground, and poles. Second, on each successive lap, as the trajectory becomes more aggressive, the geodesic energy tracking error becomes more concentrated at smaller fractions of the theoretical upper bounds. This is potentially due to the fact that the min-norm formulation of the feedback controller in Section 3.3.1 possesses a “minimally invasive” property akin to trigger or event-based control, in that, the optimal feedback can be zero. However, for the faster trajectories, the feedback is non-zero for a greater proportion of the time, thereby resulting in proportionally tighter tracking. Further, we observe that the geodesic energy at higher velocities would violate the bounds generated for lower velocities. This suggests that the bounds computed during CCM synthesis are not overly conservative, which confirms the numerical results presented in Section 6.2.4. Close-up of quad passing near the box obstacle and experiencing complex (unmodeled) aerodynamic disturbances due to the downwash interaction.
Finally, we stress that the purpose of this experiment was to illustrate the feasibility of converting the rich theoretical analysis into a practical tool capable of running on modern hardware, and obtain true validation of the complete planning methodology. Further performance improvements may be obtained through incorporating richer dynamic models and leveraging higher rate dedicated controllers.
8. Conclusions and future work
We presented a framework for robust motion planning for robots with nonlinear dynamics subject to bounded disturbances, input constraints, and online state constraints. Our approach allows one to generate certifiably safe trajectories online when faced with a priori unknown environment. We leveraged recent advances in contraction theory in the form of CCMs to synthesize a tracking feedback controller and an optimized invariant tube, valid for any dynamically feasible trajectory. Such an invariant tube is consequently used as a robustness margin during online trajectory generation. Importantly, our approach is modular in the sense that we do not put any constraints on the planner itself; indeed we demonstrated our approach using a variety of planning techniques such as pseudospectral discretization with nonlinear programming and sampling-based planning with polynomial spline smoothing. The two relevant components of the approach are the tracking feedback controller and the invariant tube—both of which can be interfaced with the vast majority of planning techniques. We validated our approach in simulation and on a quadrotor hardware testbed, and extensively tested the limits of performance of the synthesized controller to study potential failure modes. This work introduces several promising future directions, discussed next.
A second limitation of the approach is that the invariant tubes are computed based on a worst-case disturbance bound assumption. A less conservative solution may be achieved by decomposing the disturbance term into an unknown constant (or slowly-varying) mean, estimated online, plus zero-mean stochastic noise. In this way, one may leverage modern adaptive and disturbance estimation techniques to counteract the constant disturbance term, and a stochastic modification of CCM theory to obtain probabilistic invariance guarantees, for example, based on super-martingale analysis (Steinhardt and Tedrake, 2012).
We believe that the modular approach presented herein for automatically synthesizing feedback controllers that are optimized for robust performance, and accompanied by guarantees readily integrable into existing planning algorithms, serves as a valuable tool for a practitioner to systematically balance performance and safety.
Footnotes
Declaration of conflicting interests
The author(s) declared no potential conflicts of interest with respect to the research, authorship, and/or publication of this article.
Funding
The author(s) disclosed receipt of the following financial support for the research, authorship, and/or publication of this article: This work was supported by the Office of Naval Research (Grant no. N00014-15-1-2673).
