L EARNING S AFE M ULTI -A GENT C ONTROL WITH D ECENTRALIZED N EURAL B ARRIER C ERTIFICATES
Anonymous authors
Paper under double-blind review
A BSTRACT
We study the multi-agent safe control problem where agents should avoid collisions to static obstacles and collisions with each other while reaching their goals.
Our core idea is to learn the multi-agent control policy jointly with learning the control barrier functions as safety certiﬁcates .
We propose a novel joint-learning framework that can be implemented in a decentralized fashion, with generalization guarantees for certain function classes.
Such a decentralized framework can adapt to an arbitrarily large number of agents.
Building upon this framework, we further improve the scalability by incorporating neural network architectures that are invariant to the quantity and permutation of neighboring agents.
In addition, we propose a new spontaneous policy reﬁnement method to further enforce the certiﬁcate condition during testing.
We provide extensive experiments to demonstrate that our method signiﬁcantly outperforms other leading multi-agent control approaches in terms of maintaining safety and completing original tasks.
Our approach also shows exceptional generalization capability in that the control policy can be trained with 8 agents in one scenario, while being used on other scenarios with up to 1024 agents in complex multi-agent environments and dynamics.
I NTRODUCTION
Machine learning (ML) has created unprecedented opportunities for achieving full autonomy.
However, learning-based methods in autonomous systems (AS) can and do fail due to the lack of formal guarantees and limited generalization capability, which poses signiﬁcant challenges for developing safety-critical AS, especially large-scale multi-agent AS, that are provably dependable.
On the other side, safety certiﬁcates (Chang et al.
; Jin et al.
; Choi et al.
(2020)), which widely exist in control theory and formal methods, serve as proofs for the satisfaction of the desired properties of a system, under certain control policies.
For example, once found, a Control Barrier
Function (CBF) ensures that the closed-loop system always stays inside some safe set (Wieland &
Allg¨ower, 2007; Ames et al., 2014) with a CBF Quadratic Programming (QP) supervisory controller.
However, it is extremely difﬁcult to synthesize CBF by hand for complex dynamic systems, which stems a growing interest in learning-based CBF (Saveriano & Lee, 2020; Srinivasan et al., 2020; Jin et al., 2020; Bofﬁ et al., 2020;
Taylor et al., 2020;
Robey et al., 2020).
However, all of these studies only concern single-agent systems.
How to develop learning-based approaches for safe multi-agent control that are both provably dependable and scalable remains open.
In multi-agent control, there is a constant dilemma: centralized control strategies can hardly scale to a large number of agents, while decentralized control without coordination often misses safety and performance guarantees.
In this work, we propose a novel learning framework that jointly designs multi-agent control policies and safety certiﬁcate from data, which can be implemented in a decentralized fashion and scalable to an arbitrary number of agents.
Speciﬁcally, we ﬁrst introduce the notion of decentralized CBF as safety certiﬁcates, then propose the framework of learning decentralized CBF, with generalization error guarantees.
The decentralized CBF can be seen as a contract among agents, which allows agents to learn a mutual agreement with each other on how to avoid collisions.
Once such a controller is achieved through the joint-learning framework, it can be applied on an arbitrarily number of agents and in scenarios that are different from the training scenarios, which resolves the fundamental scalability issue in multi-agent control.
We also propose several effective techniques in Section 4 to make such a learning process even more scalable and practical, which are then validated extensively in Section 5.
Experimental results are indeed promising.
We study both 2D and 3D safe multi-agent control problems, each with several distinct environments and complex nonholonomic dynamics.
Our jointlearning framework performs exceptionally well: our control policies trained on scenarios withagents can be used on up to 1024 agents while maintaining low collision rates, which has notably pushed the boundary of learning-based safe multi-agent control.
Speaking of which, 1024 is not the limit of our approach but rather due to the limited computational capability of our laptop used for the experiments.
We also compare our approach with both leading learning-based methods (Lowe et al., 2017; Zhang & Bastani, 2019; Liu et al., 2020) and traditional planning methods (Ma et al., 2019;
Fan et al., 2020).
Our approach outperforms all the other approaches in terms of both completing the tasks and maintaining safety.
Contributions.
Our main contributions are three-fold: 1)
We propose the ﬁrst framework to jointly learning safe multi-agent control policies and CBF certiﬁcates, in a decentralized fashion.
We present several techniques that make the learning framework more effective and scalable for practical multi-agent systems, including the use of quantity-permutation invariant neural network architectures in learning to handle the permutation of neighbouring agents.
3) We demonstrate via extensive experiments that our method signiﬁcantly outperforms other leading methods, and has exceptional generalization capability to unseen scenarios and an arbitrary number of agents, even in quite complex multi-agent environments such as ground robots and drones.
The video that demonstrates the outstanding performance of our method can be found in the supplementary material.
Related Work.
Learning-Based Safe Control via CBF.
Barrier certiﬁcates (Prajna et al., 2007) and CBF (Wieland & Allg ¨ ower, 2007) is a well-known effective tool for guaranteeing the safety of nonlinear dynamic systems.
However, the existing methods for constructing CBFs either rely on speciﬁc problem structures (Chen et al., 2017b) or do not scale well (Mitchell et al., 2005).
Recently, there has been an increasing interest in learning-based and data-driven safe control via CBFs, which primarily consist of two categories: learning CBFs from data (Saveriano & Lee, 2020; Srinivasan et al., 2020; Jin et al., 2020;
Bofﬁ et al., 2020), and CBF-based approach for controlling unknown systems (Wang et al., 2017; 2018; Cheng et al., 2019; Taylor et al., 2020).
Our work is more pertinent to the former and is complementary to the latter, which usually assumes that the CBF is provided.
None of these learning-enabled approaches, however, has addressed the multi-agent setting.
Multi-Agent Safety Certiﬁcates and Collision Avoidance.
Restricted to holonomic systems, guaranteeing safety in multi-agent systems has been approached by limiting the velocities of the agents (Van den Berg et al., 2008; Alonso-Mora et al., 2013).
Later, Borrmann et al.
Wang et al.
(2017) have proposed the framework of multi-agent CBF to generate collision-free controllers, with either perfectly known system dynamics (Borrmann et al., 2015), or with worst-case uncertainty bounds (Wang et al., 2017).
Recently, Chen et al.
(2020) has proposed a decentralized controller synthesized approach under this CBF framework, which is scalable to an arbitrary number of agents.
However, in Chen et al.
the CBF controller relies on online integration of the dynamics under the backup strategy, which can be computationally challenging for complex systems.
Due to space limit, we omit other non-learning multi-agent control methods but acknowledge their importance.
Safe Multi-Agent (Reinforcement) Learning (MARL).
Safety concerns have drawn increasing attention in MARL, especially with the applications to safety-critical multi-agent systems (Zhang &
Bastani, 2019; Qie et al., 2019; Shalev-Shwartz et al., 2016).
Under the CBF framework, Cheng et al.
(2020) considered the setting with unknown system dynamics, and proposed to design robust multiagent CBFs based on the learned dynamics.
This mirrors the second category mentioned above in single-agent learning-based safe control, which is perpendicular to our focus.
RL approaches have also been applied for multi-agent collision avoidance (Chen et al., 2017a; Lowe et al., 2017; Everett et al., 2018; Zhang et al., 2018).
Nonetheless, no formal guarantees of safety were established in these works.
One exception is Zhang & Bastani (2019), which proposed a multi-agent model predictive shielding algorithm that provably guarantees safety for any policy learned from MARL, which differs from our multi-agent CBF-based approach.
More importantly, none of these MARLbased approaches scale to a massive number of, e.g., thousands of agents, as our approach does.
The most scalable MARL platform, to the best of our knowledge, is Zheng et al.
(2017), which may handle a comparable scale of agents as ours, but with discrete state-action spaces.
This is in contrast to our continuous-space models that can model practical control systems such as robots and drones.
P RELIMINARIES 2. C ONTROL B ARRIER F UNCTIONS AS S AFETY C ERTIFICATES
One common approach for (single-agent) safety certiﬁcate is via control barrier functions (Ames et al., 2014), which can enforce the states of dynamic systems to stay in the safe set.
Speciﬁcally, let
S ⊂ R n be the state space, S d ⊂ S is the dangerous set,
S s = S\S d is the safe set, which contains the set of initial conditions S 0 ⊂ S s .
Also deﬁne the space of control actions as U ⊂ R m .
For a dynamic system ˙ s ( t ) =
f ( s ( t ) , u ( t )) , a control barrier function h : R n (cid:55)→ R satisﬁes:
[Equation]
(1) where α ( · ) is a class- K function, i.e., α ( · ) is strictly increasing and satisﬁes α (0)
= 0 .
For a control policy π : S → U and CBF h , it is proved in Ames et al.
that if s (0) ∈ { s | h ( s ) ≥ 0 } and the three conditions in (1) are satisﬁed with u
= π ( x ) , then s ( t ) ∈
{ s | h ( s ) ≥ 0 } for ∀ t ∈ [0 , ∞ ) , which means the state would never enter the dangerous set S d under π .
2. S AFETY OF M ULTI - AGENT D YNAMIC S YSTEMS
Consider a multi-agent system with N agents, the joint state of which at time t is denoted by s ( t )
= { s 1 ( t ) , s 2 ( t ) , · · · , s N ( t ) } where s i ( t ) ∈ S i ⊂ R n denotes the state of agent i at time t .
The dynamics of agent i is ˙
s i ( t ) =
f i ( s i ( t ) , u i ( t )) where u i ( t ) ∈
U i
⊂ R m is the control action of agent i .
The overall state space and input space are denoted as S .
=
N ⊗ i
=1 S i , U .
=
N ⊗ i
=1 U i .
For each agent i , we deﬁne N i ( t ) as the set of its neighborhood agents at time t .
Let o i ( t ) ∈ R n ×|N i ( t ) | be the local observation of agent i , which is the states of |N
i ( t ) | neighborhood agents.
Notice that the dimension of o i ( t ) is not ﬁxed and depends on the quantity of neighboring agents.
We assume that the safety of agent i is jointly determined by s i and o i .
Let O i be the set of all possible observations and
X i := S i
×
O i be the state-observation space that contains the safe set
X i,s , dangerous set
X i,d and initial conditions X i, 0 ⊂
X i,s .
Let d : X i
→ R describe the minimum distance from agent i to other agents that it observes, d ( s i , o i ) <
κ s implies collision.
Then X i,s = { ( s i , o i )
| d ( s i , o i ) ≥ κ s } and
X i,d = { ( s i , o i ) | d ( s i , o i ) < κ s } .
Let ¯ d i : S → R be the lifting of d from X i to S , which is welldeﬁned since there is a surjection from S to X i .
Then deﬁne S s .
= { s ∈ S|∀ i = 1 , ..., N, ¯ d i ( s ) ≥ κ s } .
The safety of a multi-agent system can be formally deﬁned as follows:
Deﬁnition 1 (Safety of Multi-Agent Systems) .
If the state-observation satisﬁes d ( s i , o i ) ≥ κ s for agent i and time t , then agent i is safe at time t .
If for ∀ i , agent i is safe at time t , then the multi-agent system is safe at time t , and s ∈ S s .
A main objective of this paper is to learn the control policy π i
( s i ( t ) , o i ( t )) for ∀
i such that the multi-agent system is safe.
The control policy is decentralized (i.e., each agent has its own control policy and there does not exist a central controller to coordinate all the agents).
In this way, our decentralized approach has the hope to scale to very a large number of agents.
L EARNING F RAMEWORK FOR M ULTI -A GENT D ECENTRALIZED CBF 3. D ECENTRALIZED C ONTROL B ARRIER F UNCTIONS
For a multi-agent dynamic system, the most na¨ıve CBF would be a centralized function taking into account the cross production of all agents’ states, which leads to an exponential blow-up in the state space and difﬁculties in modeling systems with an arbitrary number of agents.
Instead, we consider a decentralized control barrier function
h
i : X i (cid:55)→ R :
[Equation]
where ˙
o i ( t ) is the time derivative of the observation, which depends on the behavior of other agents.
Although there is no explicit expression of this term, it can be evaluated and incorporated in the learning process.
Note that the CBF h i ( s i , o i ) is local in the sense that it only depends on the local state s i and observation o i .
We refer to the three conditions in (2) as decentralized CBF conditions .
The following proposition shows that satisfying (2) guarantees the safety of the multi-agent system.
Proposition 1 (Multi-Agent Safety Certiﬁcates with Decentralized CBF) .
If for ∀ i , the initial stateobservation ( s i (0) , o i (0)) ∈ { ( s i , o i ) | h
i ( s i , o i ) ≥ 0 } and the decentralized CBF conditions in (2) are satisﬁed, then ∀ i and ∀ t , ( s i ( t ) , o i ( t ))
∈ { ( s i , o i )
| h
i ( s i , o i ) ≥ 0 } , which implies the state would never enter X i,d for any agent i .
Thus, by Deﬁnition 1, the multi-agent system is safe.
The proof of Proposition 1 is provided in the supplementary material.
The key insight of Proposition 1 is that for the whole multi-agent system, the CBFs can be applied in a decentralized fashion for each agent.
Since h i ( s i , o i ) ≥ 0 is invariant, by deﬁnition of h i ,
h i ( s i , o i ) >
= ⇒ ¯
d i ( s ) ≥ κ s , which means agent i never gets closer than κ s to all its neighborhood agents.
Therefore, ∀ i, h
i ( s i , o i ) ≥ 0 implies that ∀ i, ¯ d i ( s ) ≥ κ s , which by deﬁnition also means s ∈ S s , and the multi-agent system is safe as deﬁned in Deﬁnition 1.
Notice that an agent only needs to care about its local information, and if all agents respect the same form of contract (i.e., the decentralized CBF conditions), the whole multi-agent system will be safe.
The fact that global safety can be guaranteed by decentralized CBF is of great importance since it reveals that a centralized controller that coordinates all agents is not necessary to achieve safety.
A centralized control policy has to deal with the dimension explosion when the number of agents grow, while a decentralized design can signiﬁcantly improve the scalability to an arbitrarily large number of agents.
3. L EARNING F RAMEWORK AND G ENERALIZATION G UARANTEE
From Proposition 1, we know that if we can jointly learn the control policy π i ( s i , o i ) and control barrier function
h
i ( s i , o i ) such that the decentralized CBF conditions in (2) are satisﬁed, then the multi-agent system is guaranteed to be safe.
Next we formulate the optimization objective for the joint learning of π i ( s i , o i ) and h i ( s i , o i ) . To answer how well the learned π i ( s i , o i ) and h i ( s i , o i ) can generalize to unseen scenarios, we will provide a generalization bound with probabilistic guarantees.
Let T ⊂ R + be the time interval and τ i
=
s i ( t ) , o i ( t ) } t ∈ T be a trajectory of state and observation of agent i .
Let T i be the set of all possible trajectories of agent i .
Let H i
and
V
i be the function classes of h i and π i .
Deﬁne the function y
i : T i × H
i × V i
(cid:55)→ R as:
[Equation]
The set X i,h :=
{ ( s i , o i )
| h
i ( s i , o i ) ≥ 0 } .
Notice that the third item on the right side of Equation (3) depends on both the control policy and CBF, since ˙ h i = ∇ s i h i · f i ( s i , u i ) + ∇ o i h i · ˙
o i ( t ) , u i =
π i ( s i , o i ) .
It is clear that if we can ﬁnd h i and π i ( s i , o i ) such that y i ( τ i , h
i , π i ) > 0 for ∀ τ i ∈ T i and ∀ i , then the conditions in (2) are satisﬁed.
For each agent i , assume that we are given z i i.i.d trajectories { τ 1 i , τ 2 i , · · · , τ z i i } drawn from distribution D i during training.
We solve the objective:
For all i, ﬁnd h i ∈ H
i and π i ∈ V i ,
[Equation]
where γ > 0 is a margin that allows us to derive probabilistic guarantees later.
We denote the solution to (4) as ˆ h i and ˆ π i .
Denote the Rademacher complexity of the function class of y i as R z i
( Y i ) , whose deﬁnition could be found in Appendix B.
Also we deﬁne (cid:15) i as the probability that the decentralized CBF conditions are violated for agent
i over randomly sampled trajectories (not necessarily the samples encountered in training).
Under such deﬁnition, (cid:15) i measures the generalization error and can be expressed as (cid:15)
i =
P τ i ∼D i (cid:104)
y
i ( τ i , ˆ h
i , ˆ u i ) ≤ 0 (cid:105) .
Then we have Proposition 2 that provides generalization guarantees for all the learned ˆ h i and ˆ π i .
Proposition 2 (Generalization Error Bound of Learning Decentralized CBF) .
Assume that | y | ≤ b and (4) is feasible.
Let ˆ h
i
and ˆ u i be the solutions to (4) and µ be a universal positive constant vector.
Recall that N is the number of agents.
Then, for any δ ∈ (0 , 1) the following statement holds:
[Equation]
The proof is provided in the supplementary material. The left side of Equation (6) is the probability that the generalization error (cid:15) i is upper bounded for all the N agents. Equation (6) claims that the generalization error is bounded for all agents with high probability 1 − δ .
Similar to the discussions
[Figure]
ሶ𝑠 𝑖 = 𝑓 𝑖 (𝑠 𝑖 , 𝑢 𝑖 )
ℎ 𝑖
(𝑠 𝑖 , 𝑜 𝑖 ) ∇ 𝑠 ℎ 𝑖
(𝑠 𝑖 , 𝑜 𝑖 ) ∇ 𝑠 ℎ 𝑖
∙ 𝑓 𝑖
[Figure]
𝑖
[Figure]
in Section 4 in Bofﬁ et al.
(2020), for speciﬁc function classes of H
i and V i , such as Lipschitz parametric function or Reproducing kernel Hilbert space function classes, the Rademacher complexity of the function classes can be further bounded, leading to vanishing generalization errors as the number of samples
z i increases.
Such derivations are standard, and are thus omitted as they are not the focus of the present paper.
Note that the Lipschitz function class includes some neural networks with differentiable activation functions, which will be used in our experiments in Section 4.
Although we have presented some generalization guarantee for learning decentralized CBF, there still exists a gap between the theory and practical implementation.
First, the theory does not provide a concrete way of designing loss functions to realize the optimization objectives in (4).
Second, in theory, there are still N pairs of functions ( h i , π i ) to be learned.
Unfortunately, the dimension of the input o i of the functions
h i , π i are different for each agent i , and will even change over time in practice, as the proximity of other agents is time-varying, leading to time-varying local observations.
To scale to an arbitrary number of agents, h i and π i should be invariant to the quantity and permutation of neighbourhood agents.
Third, the theory does not provide ways to deal with scenarios where the decentralized CBF conditions are not (strictly) satisﬁed, i.e., where problem (4) is not feasible, which may very likely occur when the system becomes too complex or the function classes are not rich enough.
To this end, we propose effective approaches to solving these issues, facilitating the scalable learning of safe multi-agent control in practice, as to be introduced next.
S CALABLE L EARNING OF D ECENTRALIZED CBF IN P RACTICE
Following the theory in Section 3, we consider the practical learning of safe multi-agent control with neural barrier certiﬁcates, i.e., using neural networks for H and V .
We will present the formulation of loss functions in Section 4.1, which corresponds to the objective in (4).
Section 4.2 presents the neural network architecture of h i and π i , which are invariant to the quantity and permutation of neighboring agents.
Section 4.3 demonstrates a spontaneous policy reﬁnement method that enables the control policy to satisfy the decentralized CBF conditions as possible as it could during testing.
4. L OSS F UNCTIONS OF J OINTLY L EARNING C ONTROLLERS AND B ARRIER C ERTIFICATES
Based on Section 3.2.
the main idea is to jointly learn the control policies and control barrier func- tions in multi-agent systems.
During training, the CBFs regulate the control policies to satisfy the decentralized CBF conditions (2) so that the learned policies are safe.
All agents are put into a single environment to generate experiences, which are combined to minimize the empirical loss function
L c = Σ i L ci , where L ci is the loss function for agent i formulated as:
[Equation]
where γ is the margin deﬁned in Section 3.2.
We choose γ = 10 − 2 in implementation.
θ i and ω
i are neural network parameters.
On the right side of Equation (7), the three items enforce the three CBF conditions respectively.
Directly computing the third term could be challenging since we need to evaluate ˙
o i , which is the time derivative of the observation.
Instead, we approximate ˙
h
( s i , o i ) = ∇ s i h
θ i i ·
f i ( s i , π ω i i
( s i , o i ))
+ ∇ o i
h
θ i i · ˙ o i numerically by ˙
h
( s i , o i ) =
[ h ( s i ( t +∆ t ) , o i ( t + ∆ t )) − h
( s i ( t ) , o i ( t ))] / ∆ t .
For the class- K function α ( · ) , we simply choose a linear function α ( h )
= λh .
Note that L c mainly considers safety instead of goal reaching.
To train a safe control policy π i ( s i , o i ) that can drive the agent to the goal state, we also minimize the distance between u i and u g i , where u g i is the reference control input computed by classical approaches (e.g., LQR and [Figure]
PID controllers) to reach the goal.
The goal reaching loss L g = Σ i L gi , where L gi is formulated as
L
[Equation]
|| 2 .
The ﬁnal loss function L =
L c + η L g , where η is a balance weight that is set to 0 .
1 in our experiments.
We present the computational graph in Figureto help understand the information ﬂow.
In training, all agents are put into the speciﬁc environment, which is not necessarily the same as the testing environment, to collect state-observation pairs ( s i , o i ) under their current policies with probability 1 − ι and random policies with probability ι , where ι is set to be 0 .
05 in our experiment.
The collected ( s i , o i ) are stored as a temporary dataset and in every step of policy update,( s i , o i ) are randomly sampled from the temporary dataset to calculate the total loss L .
We minimize
L by applying stochastic gradient descent with learning rate 10 − 3 and weight decay 10 − 6 to θ i and ω i , which are the parameters of the CBF and control policies.
Note that the gradients are computed by back-propagation rather than policy gradients because L is differentiable w.r.t.
θ i and ω i .
4. Q UANTITY -P ERMUTATION I NVARIANT O BSERVATION E NCODER
Recall that in Section 3.1, we deﬁne o i as the local observation of agent i .
o i contains the states of neighboring agents and its dimension can change dynamically.
In order to scale to an arbitrary number of agents, there are two pivotal principles of designing the neural network architectures of h
i ( s i , o i ) and π i ( s i , o i ) .
First, the architecture should be able to dynamically adapt to the changing quantity of observed agents that affects the dimension of o i .
Second, the architecture should be invariant to the permutation of observed agents, which should not affect the output of h i or π i .
All these challenges arise from encoding the local observation o i .
Inspired by PointNet (Qi et al., 2017), we leverage the max pooling layer to build the quantity-permutation invariant observation encoder.
Let us start with a simple example with input observation
o i ( t ) ∈ R n ×|N i ( t ) | , where n is the dimension of state and N i ( t ) is the set of the neighboring agents at time t .
n is ﬁxed while N i ( t ) can change from time to time.
The permutation of the columns of o i is also dynamic.
Denote the weight matrix as W ∈ R p × n and the element-wise ReLU activation function as σ ( · ) .
Deﬁne the row-wise max pooling operation as RowMax( · ) , which takes a matrix as input and outputs the maximum value of each row.
Consider the following mapping ρ : R n ×|N i ( t ) | (cid:55)→ R p formulated as
[Equation]
where ρ maps a matrix o i whose column has dynamic dimension and permutation to a ﬁxed length feature vector ρ
( o i ) ∈ R p .
The dimension of ρ ( o i ) remains the same even if the number of columns of o i ( t ) , which is |N i ( t ) | , change over time.
The network architecture of the control policy is shown in Figure 2, which uses the RowMax( · ) operation.
The network of the control barrier function is similar except that the output is a scalar instead of a vector.
4. S PONTANEOUS O NLINE P OLICY R EFINEMENT
We propose a spontaneous online policy reﬁnement approach that produces even safer control policies in testing than the neural network has actually learned during training.
When the model dynamics or environment settings are too complex and exceed the capability of the control policy, the decentralized CBF conditions can be violated at some points along the trajectories.
Thanks to the control barrier function jointly learned with the control policy, we are able to reﬁne the control input u i online by minimizing the violation of the decentralized CBF conditions.
That is, the learned CBF [Figure] can serve as a guidance on generating updated u
i in unseen scenarios to guarantee safety.
This is also a standard technique used in (non-learning) CBF control where the CBF h is usually computed ﬁrst using optimization methods like Sum-of-Squares, then the control inputs u are computed online using h by solving quadratic programming problems (Xu et al., 2017; Ames et al., 2017).
In the experiments, we also study the effects of such an online policy reﬁnement step.
Given the state s i , local observation o i , and action u i computed by the control policy, consider the scenario where the third CBF condition is violated, which means ∇ s i h i · f i ( s i , u i ) + ∇ o i h i · ˙
o i + α ( h i ) <
when h i ≥ 0 . Let e i ∈
R m be an increment of the action u i .
Deﬁne φ ( e i ) : R m (cid:55)→ R as φ
[Equation]
e i [Equation] [Equation] If the ﬁrst term on the right side of Equation (9) is 0, then the third CBF condition is satisﬁed.
We can enforce the satisfaction in every timestep of testing (after u i is computed by the neural network controller) by ﬁnding an e i that minimizes φ ( e i ) .
µ is a regularization factor that punishes large e i .
We set µ = 1 in implementation and observed that in our experiment, a ﬁxed µ is sufﬁcient to make sure the || u i + e i || do not exceed the constraint on control input bound. When evaluating on new scenarios and the constraints is violated, one can dynamically increase µ to strengthen the penalty.
For every timestep during testing, we initialize e i to zero and check the value of φ ( e i ) .
φ ( e i ) >indicates that the control policy is not good enough to satisfy the decentralized CBF conditions.
Then we iteratively reﬁne e i by e i
= e i − ∇ e φ ( e i ) until φ ( e i ) − µ ||
e i
|| {+22 = 
+}
or the maximum allowed iteration is exceeded.
The ﬁnal control input is u i =
u
i + e i .
Such a reﬁnement can ﬂexibly reﬁne the control input to satisfy the decentralized CBF conditions as much as possible.
E XPERIMENTAL R ESULTS
Baseline Approaches.
The baseline approaches we compare with include: MAMPS (Zhang &
Bastani, 2019), PIC (Liu et al., 2020) and MADDPG (Lowe et al., 2017).
For the drone tasks, we also compare with model-based planning method MAFACTEST (Ma et al., 2019; Fan et al.,
A brief description of each method is as follows.
MAMPS leverages the model dynamics to iteratively switch to safe control policies when the learned policies are unsafe.
PIC proposes the permutation-invariant critic to enhance the performance of multi-agent RL.
We incorporate the safety reward to its reward function and denote this safe version of PIC as PIC-Safe.
The safety reward is -1 when the agent enters the dangerous set.
MADDPG is a pioneering work on multiagent RL, and MADDPG-Safe is obtained by adding the safety reward to the reward function that is similar to PIC-Safe.
MAFACTEST is a multi-agent version of the model-based planning method
FACTEST (Fan et al., 2020) combined with priority-based search (PBS) (Ma et al., 2019).
When directly planning all agents fails, the approach evenly divides the agent group to smaller partitions for replanning until paths that are collision-free for each partition are found.
The agents then follow the generated paths using PID or LQR controllers.
For each task, the environment model is the same for all the methods.
The exact model dynamics are visible to model-based methods including MAMPS, MAFACTEST and our methods, and invisible to the model-free MADDPG and PIC.
Since the model-free methods do not have access to model dynamics but instead the simulators, they are more data-demanding.
The number of state-observation pairs to train MADDPG and PIC is 10 3 times more than that of model-based learning methods to make sure they converge to their best performance.
When training the RL-based methods, the control action computed by LQR for goal-reaching is also fed to the agent as one of the inputs to the actor network.
So the RL agents can learn to use LQR as a reference for goal-reaching.
Evaluation Criteria.
Since the primal focus of this paper is the safety of multi-agent systems, we use the safety rate as a criteria when evaluating the methods.
The safety rate is calculated as
E t ∈ T (cid:104) (cid:81) Ni =
I (( s i ( t ) , o i ( t ))
∈
X s ) (cid:105) where I ( · ) is the indicator function that is 1 when its argument is true or 0 otherwise.
The observation o i contains the states of other agents within the observation radius, which is 10 times the safe distance.
The safe distance is set to be the diagonal length of the bounding box of the agent.
In addition to the safety rate, we also calculate the average reward that considers how good the task is accomplished.
The agent is given a +10 reward if it reaches the goal and a -1 reward if it enters the dangerous set.
Note that the agent might enter the dangerous set for many times before reaching the goal.
The upper-bound of the total reward for an agent is +10, which is attained when the agent successfully reaches the goal and always stays in the safe set.
Ground Robots.
We consider three tasks illustrated in Figure 3.
In the Navigation task, each agent starts from a random location and aims to reach a random goal.
In the Predator-Prey task, the preys aim to gather the food while avoid being caught by the predators chasing the preys.
We only consider the safety of preys but not predators.
In the Nested-Rings task, the agents aim to follow the reference trajectories while avoid collision.
In order for the RL-based agents to follow the rings trajectory, we also give the agents a negative reward proportional to the distance to the nearest point on the rings.
When adding more agents to an environment, we will also enlarge the area of the environment to ensure the overall density of agents remains similar.
Figure 4 demonstrates that when the number of agents grows (e.g., 32 agents), our approach (MDBC) can still maintain a high safety rate and average reward, while other methods have much worse performance.
However, our method still cannot guarantee that the agents are 100% safe.
The failure is mainly because we cannot make sure the decentralized CBF conditions are satisﬁed for every state-observation pair in testing even if they are satisﬁed on all training samples, due to the generalization error identiﬁed in Proposition 2.
We also show the generalization capability of
MDBC with up to 1024 in the appendix and also visualization results in the supplementary materials.
Drones.
We experiment with 3D drones whose dynamics are even more complex.
Figure 5 demonstrates the environments and the results of each approach.
Similar to the results of ground robots, when there are a large number of agents (e.g., 32 agents), our method can still maintain a high reward and safety rate, while other methods have worse performance.
Figure 6 shows the generalization capability of our method across different environments and number of agents.
For each experiment, we train 8 agents during training, but test with up toagents.
The extra agents are added by copying the neural network parameters of the trained 8 agents.
Results show that our method has remarkable generalization capability to diverse scenarios.
Another related work Chen et al.
(2020) can also handle the safe multi-drone control problem via CBF, but their CBF is handcrafted and based on quadratic programming to solve the u i .
Their paper only reported the results on two agents, and for 32 agents it would take more than 70 hours for a single run of evaluation (7000 steps and 36 seconds per step).
By contrast, our method only takes ∼ 200 s for a single run of evaluation with 32 agents, showing a signiﬁcant advantage in computational efﬁciency.
For both the ground robot and drone experiments, we provide video demonstrations in the supplementary material.
C ONCLUSION
This paper presents a novel approach of learning safe multi-agent control via jointly learning the decentralized control barrier functions as safety certiﬁcates.
We provide the theoretical generalization bound, as well as the effective techniques to realize the learning framework in practice.
Experiments show that our method signiﬁcantly outperforms previous methods by being able to scale to an arbitrary number of agents, and demonstrates remarkable generalization capabilities to unseen and complex multi-agent environments.
A P ROOF OF P ROPOSITION
Since ˙ h i = ∇ s i h i · f i ( s i , u i ) + ∇ o
i h i · ˙
o i ( t ) , the satisfaction of (2) implies:
[Equation]
The initial condition ( s i (0) , o i (0)) ∈ { ( s i , o i ) | h
i ( s i , o i ) ≥ 0 } means that h i ≥ 0 at time t = 0 .
Since ˙ h i + α ( h i ) ≥ 0 , h i will stay non-negative, which is proved in Section 2 of Ames et al.
This means that ( s i ( t ) , o i ( t )) /
∈ X i,d for ∀ t > 0 .
Thus for ∀ i and ∀ t > 0 , agent i would not enter the dangerous set, and the whole multi-agent system is safe by Deﬁnition 1.
Global CBF from decentralized CBFs. In addition to Proposition 1, another way to prove the global safety of the multi-agent system under the decentralized CBFs is to construct the global CBF h g : S (cid:55)→ R from individual CBFs by taking the minimum, as is in:
[Equation] where s ↓ s i is the projection of the global state onto the state of agent i and s ↓
o i is the projection of the global state to the observation of agent i .
Then the following proposition guarantees the global safety of the multi-agent system.
Proposition 3.
If (10) is satisﬁed for every agent i , then the global CBF h g ( s ) {+satisﬁes: [Equation] where S 
 = { s ∈ S|∀ i, ( s ↓ s i , s ↓ o i ) ∈+}
X i, 0 } and S d = { s ∈ S|∃ i, ( s ↓ s i , s ↓ o i )
∈
X i,d } .
Then ∀ t > 0 , h g ( s ( t )) ≥ 0 and s (cid:54)∈ S d , which means the multi-agent system is globally safe.
Proof.
Let us ﬁrst prove that the satisfaction of (10) implies the satisfaction of (12).
By deﬁnition of S 0 , when s ∈ S 0 , we have ∀ i, ( s ↓ s i , s ↓ o i ) ∈
X i, 0 , which means ∀ i, h i ( s ↓ s i , s ↓ o i ) ≥ 0 .
Thus h g ( s ) = min i { h i ( s ↓ s i , s ↓ o i ) } ≥ 0 .
When s ∈ S d , we have ∃ i, ( s ↓ s i , s ↓ o i )
∈
X i,d , which means ∃ i, h i ( s ↓ s i , s ↓ o i ) < 0 .
Thus h g ( s ) =
min i { h i ( s ↓ s i , s ↓ o i ) } < 0 .
When s ∈ { s | h g ( s ) ≥ 0 } , we have ∀ i, ( s ↓ s i , s ↓ o i ) ∈ { ( s ↓ s i , s ↓ o i )
| h
i ( s ↓ s i , s ↓ o i ) ≥ 0 } .
So ∀ i, ˙
h i + α ( h i ) ≥ 0 .
Let i ∗ =
arg min i { h i ( s ↓ s i , s ↓ o i ) } .
Then h g ( s ) =
h i ∗ ( s ↓ s i ∗ , s ↓
o i ∗ ) and ˙
h g + α
( h g )
= ˙
h i ∗ + α
( h i ∗ ) ≥ 0 .
Hence the satisfaction of (10) implies the satisfaction of (12).
Then based on Section 2 of Ames et al.
(2014), we have h g ( s ( t )) ≥ 0 , ∀ t > 0 .
This means s ( t ) (cid:54)∈ S d , ∀ t > 0 , and the multi-agent system is globally safe.
B P ROOF OF P ROPOSITION
Note that (cid:15) i
=
P τ i ∼D i (cid:104)
y
i ( τ i , ˆ h
i , ˆ u i ) ≤ 0 (cid:105) =
E τ i ∼D i (cid:104) I (cid:16) y
i ( τ i , ˆ h
i , ˆ u i ) ≤ 0 (cid:17)(cid:105) .
Under zero empirical loss, using the Theorem 5 in Srebro et al.
(2010), for any δN > 0 , the following statement holds with probability at least 1 − δN :
[Equation]
where µ i > 0 is some universal constant.
By taking the union bound over all N agents, the following statement holds with probability at least (1 − δN ) N :
[Equation]
Since (1 − δN ) N > 1 − δ for δ ∈ (0 , 1) , we have:
[Equation]
which completes the proof.
The Rademacher complexity R z i ( Y i ) is deﬁned as:
[Equation]
where ξ ∈ R z i is a random vector and ξ j denotes its j th element.
R z i
( Y i ) characterizes the richness of function class Y i .
C M ODEL D YNAMICS
In the experiment section of our main paper, we used the 2D ground robots and 3D drones.
The model dynamics of the ground robot is adopted from Rodr ´ ıguez-Seda et al.
For drones, we use the following dynamics:
[Equation]
ω y,i a z,i (cid:35) .
D S UPPLEMENTARY E XPERIMENT
For 3D drones we have shown the generalization capability to 1024 agents even when our method is trained with 8 agents (Figure 6).
For 2D ground robots we have similar results that were omitted in the main paper due to space limitations.
We present the results in Figure 8 as below.
Our method demonstrates the exceptional generalization capability to testing scenarios where the number of agents is signiﬁcantly greater than that in training.
The safety rate and average reward remain high even when the number of agents grow exponentially.
Ablation Study on Online Policy Reﬁnement.
In Section 4.3, we introduced a test-time policy reﬁnement method.
Here we study the effect of this method on our performance and present the results in Table 1.
It is shown that even without the OPR, the safety rate is still promising.
The
[Table]
OPR further improved the safety rate.
The steps requiring OPR in testing only accounts for a small proportion ( < 17% ) of the total steps.
The proportion gradually becomes saturated and does not signiﬁcantly increase as the number of agents grow.
Visualization of the Learned CBF.
To have a better understanding of the learned decentralized
CBF, we provide a visualization in Figure 9.
The CBF is learned in the Maze environment with two agents, in order to simplify the interpretation.
The relative distance is deﬁned in the 3D Euclidean space.
The relative velocity is the negative time derivative of the relative distance.
When the relative velocity is positive, the two agents are getting close to each other.
From Figure 9, we know that the learned CBF is negative on the dangerous states (the red area) and the potentially dangerous states (the top-right area), where the agents are moving towards each other.
The CBF is positive only when the states are sufﬁciently safe (the bottom-right area).