TLDR: Uppaal Coshy is a new tool that automatically creates “shields” (safety strategies) for complex hybrid systems with continuous state spaces. It works by partitioning the system’s state into a grid and using simulations to determine safe actions. A key innovation is the Caap algorithm, which significantly compacts these shields into decision trees, making them efficient for practical deployment, as demonstrated with examples like a bouncing ball.
In the realm of automated systems, ensuring safety is paramount. From self-driving cars to industrial robots, these systems often operate in complex environments with continuous changes and hybrid dynamics—meaning they combine both continuous (like speed or temperature) and discrete (like on/off states) behaviors. Developing robust safety strategies, often called ‘shields,’ for such systems has traditionally been a monumental challenge due to the infinite number of possible states and the intricate interactions involved.
A new research paper, “Uppaal Coshy: Automatic Synthesis of Compact Shields for Hybrid Systems,” introduces a groundbreaking tool designed to tackle this very problem. Developed by a team of researchers including Asger Horn Brorholt, Andreas Holck Høeg-Petersen, Peter Gjøl Jensen, Kim Guldstrand Larsen, Marius Mikučionis, Christian Schilling from Aalborg University, and Andrzej Wąsowski from IT University of Copenhagen, Uppaal Coshy offers an automatic solution for synthesizing these crucial safety strategies.
Understanding the Challenge
Imagine a system like a bouncing ball that a player needs to keep in the air. The ball’s position and velocity are continuous, but the player’s decision to ‘hit’ or ‘not hit’ is discrete. Ensuring the ball never stops, regardless of the player’s actions or environmental randomness, requires a sophisticated safety strategy. Traditional methods struggle with the sheer complexity of such ‘hybrid systems’ and their continuous state spaces, where every tiny change in position or velocity creates a new state to consider.
Uppaal Coshy’s Approach to Safety
Uppaal Coshy addresses this by employing a clever methodology. First, it simplifies the infinite state space by partitioning it into a finite grid of ‘cells.’ Think of it like drawing a grid over a map; instead of tracking every single point, you track which square you’re in. Once the state space is gridded, the tool then solves a ‘two-player safety game.’ This involves approximating complex reachability problems (determining if a system can reach an unsafe state) through extensive simulations.
The tool is fully automatic and seamlessly integrated into the Uppaal modeling framework, which is widely used for verifying real-time and hybrid systems. This integration means it can handle a rich variety of models, including those with stochastic (random) elements and non-periodic control, where actions aren’t taken at fixed intervals.
The Bouncing Ball in Action
The researchers illustrate Uppaal Coshy’s capabilities with the bouncing ball example. The goal is to synthesize a shield that prevents the ball from ever reaching a ‘Stop’ location. The tool analyzes the system, determines safe actions for different ball positions and velocities, and then generates a shield. This shield acts as a guardian, only allowing actions that guarantee the ball’s safety, even if a separate ‘efficient’ strategy might otherwise lead to an unsafe outcome.
Making Shields Practical: The Caap Algorithm
While Uppaal Coshy can synthesize effective shields, the initial representation can be massive, especially when using fine grids for precision. This is where a second major contribution comes in: the Caap (Coarsify Axis-Aligned Partitionings) algorithm. Caap efficiently computes a compact representation of the shield, transforming it into a decision tree. This decision tree is much smaller and more efficient to store and query, making the shields practical for deployment on devices with limited memory, such as embedded systems.
The Caap algorithm works by identifying ‘regions’—clusters of neighboring cells that allow the same set of actions—and merging them. It ensures that these merged regions remain rectangular and don’t violate the original safety properties. This process significantly reduces the shield’s size without compromising its effectiveness.
Also Read:
- Autonomous Robots Navigate Complex Industrial Spaces with Hybrid AI Control
- AgentScope 1.0: Empowering Developers to Build Advanced AI Agent Applications
Real-World Impact and Future Directions
The paper demonstrates the effectiveness of Uppaal Coshy and Caap on several models, including the bouncing ball, a boost converter (a real-world electrical circuit), a random walk, and a water tank. In the bouncing ball example, Caap reduced the shield’s representation from 1.43 million cells to just 2,972 regions, a dramatic reduction that highlights its practical value.
This work has significant implications for safe reinforcement learning, where an AI agent can learn to perform tasks efficiently while being constrained by a safety shield. The ability to automatically synthesize and compact these shields opens new avenues for developing reliable and autonomous systems. The researchers also outline future enhancements, such as improving how random dynamics are handled and further integrating Caap directly into the Uppaal user interface for even greater accessibility.
For more technical details, you can refer to the full research paper: Uppaal Coshy: Automatic Synthesis of Compact Shields for Hybrid Systems.


