Latest / Embodied AI 101 / Gemini Robotics 2: How General Is Its Whole-Body Robot Control?
Transcript
- Gemini Robotics 2: How General Is Its Whole-Body Robot Control?. Gemini Robotics 2: Safety Evaluations • Gemini Robotics Team • Google DeepMind • Technical report and accompanying model release • 2026. Can Gemini Robotics 2 turn impressive manipulation demonstrations into a useful general-purpose robot? My assessment is that it makes meaningful progress in the range of behaviors one system can support—but the public evidence does not establish human-level dexterity, universal hardware transfer, or unattended deployment. The interesting result is broader physical capability. The unresolved issue is dependable execution across unfamiliar conditions. For this episode of Embodied AI 101, we are examining the public record available on October 15, 2026. Google DeepMind announced Gemini Robotics 2 on July 30, 2026. Its accompanying paper, dated July 29, is specifically titled Gemini Robotics 2: Safety Evaluations. That distinction matters: we have a model release, quantitative capability reports, model cards, and a safety paper—not a fully disclosed flagship VLA training paper. The supplied X profile is therefore a starting pointer, rather than our experimental source. We will separate what the robots demonstrably do, what the reported comparisons establish, and what remains an inference about the underlying learning system. What the Paper Did. First, separate the three models in the release. Gemini Robotics 2 is the flagship vision-language-action model. Gemini Robotics ER 2 is the reasoning and orchestration model. Gemini Robotics On-Device 2 is a separate local action model. Treating these as interchangeable would incorrectly combine their capabilities, deployment requirements, and evaluation results. The flagship’s central physical result is a shared checkpoint controlling three configurations: Apptronik’s Apollo 2 with Inspire hands, Apollo 2 with SharpaWave hands, and a Franka Duo with Robotiq grippers. The demonstrated repertoire extends from stationary manipulation to coordinated whole-body movement. Sharing a checkpoint is valuable. It means the system is not merely a collection of separately named, independently trained specialists. But it does not, by itself, establish zero-shot control of an unseen robot. A model trained jointly on several bodies can share parameters while still depending heavily on demonstrations from every evaluated body. The reasoning model has a different contract. Its model card identifies Gemini 3.5 Flash as its foundation, with additional embodied-reasoning training. Its output is text, rather than motor commands. The action model or robot API remains responsible for execution. In the developer’s orchestration setup, low-level capabilities are exposed as tools. ER 2 observes the evolving scene, selects actions, monitors progress, and decides what should happen next. Its streaming interface is intended to let reasoning continue while the robot acts, rather than forcing an entirely serial observe-think-move cycle. Consider an illustrative instruction: clear a workbench and organize the loose tools. The planner needs to identify the relevant objects and destinations. The action policy needs to execute each movement. A progress monitor needs to notice whether a tool actually entered the tray. Those are different responsibilities, and an error in any one can invalidate the overall task. The local model is different again. On-Device 2 combines technology from Gemini Robotics 1.5 with on-device Gemma models. Its documented inputs include images, language, and numerical proprioception; its outputs are numerical robot actions. That description does not establish architectural equivalence with the flagship. There is already an end-to-end result worth noticing: in the reported real-VLA orchestration condition, ER 2 achieves 60.0% task success versus 48.6% for ER 1.6—an observed improvement of 11.4 percentage points. That is more relevant to robot operation than a language-only planning score, although it is not yet enough information to isolate the cause of the improvement. Much of the conceptual architecture predates this release. The Gemini Robotics 1.5 report already described an orchestrator paired with an action model, shared control across embodiments, and a Motion Transfer training mechanism. Version 2 should therefore not receive credit for inventing hierarchical reasoning plus action, or for first introducing multi-embodiment training within this family. Nor is whole-body learned control new to the field. Figure’s January 27, 2026 Helix 02 announcement described a hierarchy combining semantic reasoning, a full-body visuomotor policy, and a learned lower-level controller for balance and execution. That is relevant architectural context, not a matched performance comparison. The distinction is important because “whole-body control” describes a capability, not necessarily a complete control topology. Without the flagship’s action representation, update rates, tracking interfaces, and training recipe, we should not infer that one transformer directly replaces every feedback controller. The public materials reviewed do not resolve those implementation questions. For a practitioner, those missing interfaces determine whether a policy can be integrated safely and predictably—not just whether its demonstrations look coordinated. The Physical Results: Broad Capability, Uneven Reliability. The physical performance charts are considerably more informative than the promotional shorthand. For whole-body pickup categories on Apollo with Inspire hands, reported success is 68.4% from a table, 45.7% from the floor, and 76.3% from a shelf. The multifinger results are more uneven: 92% for unscrewing a bulb, but 36% for screwing one in, 44% for tying a trash bag, 32% for the dustpan task, and 40% for the ziplock task. The Franka Duo gripper results are stronger: 74.2% for general pick-and-place, 78.9% for diverse tool kitting, and 89.6% for precise insertion tasks. These are meaningful capabilities, but they are results on different task collections—not evidence that grippers intrinsically outperform hands. The bulb asymmetry is especially useful for interpretation. One plausible explanation is that removal begins with a mechanically constrained object, while insertion requires establishing the right alignment and contact before rotation helps. But that is an engineering hypothesis, not a failure analysis supplied by the release. Differences in training coverage, fixtures, initial conditions, and success criteria could also contribute. This is why “the robot can manipulate a light bulb” is too coarse a capability description. A useful skill specification needs the initial state, permitted variation, completion criterion, and recovery behavior. Otherwise, two tasks with similar language can hide very different control problems. Likewise, the whole-body categories should not be treated as an ablation. A lower floor-pickup score does not isolate a balance problem. It could involve perception, reachability, approach selection, grasp formation, or some combination. To localize the bottleneck, I would want failure labels and comparisons that change one condition at a time. The release plots include error bars, but the reviewed manipulation materials do not supply enough trial-count and error-bar methodology to independently assess statistical confidence. They also do not provide a matched external VLA comparison on these exact physical suites. These charts establish a capability profile more clearly than they establish an algorithmic performance advantage. That does not make the results uninteresting. A robot that sometimes completes a difficult, contact-rich skill can be a valuable starting point for specialist adaptation. The research question is whether the successes reveal reusable competence. The deployment question is whether failures are detectable, recoverable, and cheap. Those questions require different measurements. For intuition, imagine ten required steps, each independently succeeding 90% of the time, with no retries. The probability of completing all ten is only about 35%. Raising each step to 99% brings the sequence to roughly 90%. This is an illustrative calculation, not an estimate of Gemini Robotics performance. Real failures are not independent, and recovery can change the outcome dramatically. That is precisely why we should measure complete workflows rather than multiply isolated success rates and call the result a forecast. A dropped object might be easy to recover. A mistaken insertion might damage a part. An unnoticed partial closure might produce a failure only after the robot has moved on. The same nominal completion percentage can therefore correspond to very different operating costs. My reading is that the physical results justify attention to the system’s breadth. They do not justify replacing reliability analysis with the phrase “human-level dexterity,” which appears on the VLA product page without a matched human evaluation in the presented results. Why Temporal Reasoning Matters More Than a Fluent Plan. The reasoning layer may be the most immediately reusable part of this release—not because it produces elaborate plans, but because it addresses the question of when to change plans. Consider an imagined packing sequence. The robot puts an item into a bag, the item slips out, and the planner proceeds to closing the bag. The original plan was perfectly reasonable. The failure was an incorrect belief about the current state. That example suggests a more useful evaluation target than plan plausibility: can the system maintain a sufficiently accurate account of what has actually happened?. Google evaluates progress classification by assigning video frames to five completion bands, each covering twenty percentage points. ER 2 reaches 57.4% accuracy, compared with ER 1.6’s 42.7%. The observed gain is 14.7 percentage points. That is substantial enough to investigate, but “progress accuracy” needs careful interpretation. Confusing an almost-finished task with a completed task could be much more consequential than confusing two intermediate stages. An overall accuracy number does not reveal that distinction. I would therefore ask for the confusion matrix, performance near completion boundaries, and the rate of premature task switching. I would also avoid comparing the score to a nominal twenty-percent chance baseline unless the evaluation’s class distribution supports that comparison. The moment-finding result is different again: ER 2 reports 91.3% accuracy and a mean absolute temporal distance of 0.96 seconds. Those are event-localization measurements, not a complete sensor-to-actuator latency measurement. A model can locate an event accurately in a video while still being unsuitable for a particular real-time feedback loop. Conversely, a fast response can be consistently wrong about the event. We need both timing and decision quality, with tolerances chosen for the physical task. For example, an event detector used to summarize a completed run can tolerate errors that would be unacceptable if the same detector determined when to stop a continuously evolving manipulation. I would not transfer a video benchmark’s accuracy directly into a safety claim. The orchestration evaluation helpfully separates real-VLA, simulated-VLA, and human-teleoperation conditions. In the human-control condition, ER 2 reaches 74.0% success versus 63.6% for ER 1.6. That tests a useful part of the system, but it is not autonomous motor execution. Keeping those conditions separate prevents two common mistakes. First, a human executor may compensate for ambiguous or imperfect instructions in ways an action policy cannot. Second, a difference between simulated and real scores is not automatically a sim-to-real gap unless the tasks and conditions are appropriately matched. For the real-VLA improvement reported earlier, I would want to know whether execution policies, prompts, retry budgets, and termination rules were held fixed. Without that information, the result supports a better reported system configuration more strongly than it identifies a particular reasoning innovation. Multi-robot collaboration raises the same issue at another level. The release demonstrates coordination between different robot types, but the public description does not establish fleet-scale scheduling performance or a quantified throughput advantage. For a two-robot workflow, I would compare against a simple centralized scheduler using the same skills. Does the learned orchestrator reduce idle time? Does it recover from delayed handoffs? Can one robot revise its plan without invalidating the other’s assumptions?. Those are the measurements that would turn a compelling collaboration demonstration into an operational argument. Does It Generalize—and What Does the Data Actually Buy?. The strongest adaptation evidence belongs to On-Device 2, rather than automatically transferring to every model in the family. Google reports adaptation to new bi-arm embodiments in a few hours, typically using fewer than 200 examples. This is post-training adaptation of an already pretrained model, not learning robotic competence from two hundred demonstrations in total. The distinction changes the economics. A small adaptation dataset can be an excellent product feature while depending on an expensive, inaccessible pretraining corpus. It tells us something about the downstream user’s data burden, but not the total data required to create the capability. The On-Device model card includes a particularly clear comparison on SO101: at the largest plotted data budget, version 2 completes 16 of 30 trials, versus 2 of 30 for version 1. That is an observed improvement of approximately 46.7 percentage points. This is not a marginal one- or two-trial fluctuation. Nevertheless, it remains a small evaluation, and the improved system still fails nearly half of those trials. Task clustering, training-run variation, and the breadth of the held-out conditions matter before extrapolating that gain. There is also a concrete reporting issue worth flagging. The Dexmate chart pairs 75.6% with a count of 34 out of 43; that fraction would be approximately 79.1%. I would request corrected counts before calculating confidence intervals from that endpoint. The appropriate response is not to discard the entire adaptation result. It is to distinguish a visible, large improvement from an exact estimate whose annotation needs clarification. The same model card explicitly notes limitations on out-of-distribution tasks and high-degree-of-freedom robots. That qualification matters when interpreting the flagship’s dexterous humanoid demonstrations: the local model should not simply inherit their capability claims. Now consider the broader claim about rich spatial and environmental data. In the authors’ launch interview, the team describes collecting teleoperation demonstrations for dexterous manipulation and emphasizes richer interaction data. They also distinguish robot demonstrations from human video, where the action and force information needed for control is not directly observed. That supports a data-centric interpretation, but not a demonstrated scaling law. The reviewed model cards give broad data categories rather than a reproducible accounting of trajectories, task coverage, embodiment balance, or the contribution of each source. My interpretation is that “richer data” should be unpacked into several different hypotheses. Perhaps additional objects improve visual coverage. Perhaps more body configurations improve transfer. Perhaps failed attempts and recoveries teach the policy how to operate outside expert trajectories. Those interventions could have very different returns on collection effort. Imagine two candidate datasets. One adds thousands of successful executions from nearly identical starting states. The other adds fewer trajectories but covers slipped grasps, displaced objects, partial completion, and recovery. Which is more valuable depends on the deployment failure modes—not just the number of recorded frames. The predecessor provides some controlled evidence. Gemini Robotics 1.5 compared single-embodiment training, mixed-embodiment training without Motion Transfer, and mixed training with it. It also explicitly warned that comparisons with older On-Device checkpoints were not apples-to-apples because those checkpoints had less training data. That is the right distinction between an ablation and a product-generation comparison. It does not, however, identify which combination of data, architecture, and optimization produced version 2’s gains. Simulation deserves similar care. The 1.5 report said more than 90% of development evaluation episodes occurred in simulation, while its reported robot comparisons used interleaved real-world testing. That was a statement about the evaluation workflow—not proof that its training was predominantly simulated, and not a measured version 2 transfer gap. For version 2, I would want paired simulated and physical conditions before estimating transfer quality. Real-robot demonstrations establish that the system can operate outside simulation. They do not establish robustness to untested contact dynamics, camera changes, payloads, or environmental conditions. Safety Is a Planning Problem—and Still a Control Problem. The safety paper asks a useful question: before the robot acts, should its agent delegate to the action model, ask a human, or stop? Its contribution is primarily an evaluation of that reasoning and orchestration layer, rather than a validation of the complete functional-safety system. The released ASIMOV-Agentic materials cover physical constraints, safety-related tool calls, feasibility judgments, uncertainty resolution, instrument readability, and human-proximity monitoring. They include data and evaluation scripts, making this part of the release more inspectable than the flagship action policy. One of the most actionable findings is an ablation on information supplied to the planner. ER 2’s feasibility-classification accuracy rises from 62.0% to 95.8% as its instructions contain more detailed descriptions of the action model’s capabilities. The engineering implication is straightforward: do not expect a planner to infer a controller’s operating envelope from its name. Give it a usable description of supported skills, preconditions, limitations, and reasons to escalate. For example, an illustrative skill contract might distinguish placing a rigid object into an open container from manipulating the container’s closure. A planner that treats both as generic “packing” may generate a linguistically sensible request that its executor cannot reliably perform. That is not merely a prompting trick. It is a question of interface design: what does the high-level system know about the tool it is invoking, and how is that knowledge kept consistent with the deployed policy?. The multi-turn feasibility evaluation has an important boundary. It uses a Gemini-based VLA confidence emulator tied to recorded transitions. Compliance with that feedback is not the same as demonstrating calibrated failure probabilities for a physical controller. A confidence-aware planner can still be unsafe if the confidence source is confidently wrong. I would therefore test the estimator and the planner separately, then test their composition under distribution shift. The human-monitoring results reinforce that point. In the agentic proximity plot, ER 2 is approximately at an eleven-percent false-negative rate and a twenty-percent false-positive rate. A separate garage experiment reports 99% human-detection accuracy and 96% reliability in transitioning to a safe pose. These are different evaluation conditions, not interchangeable reliability estimates. Neither averaging those numbers nor selecting the most favorable one would answer a deployment question. The relevant quantity depends on the exact hazard, sensing arrangement, stopping behavior, and operating conditions. There is another easily missed detail: the released human-monitoring harness defaults to evaluating at five-second timestamp intervals. That is an offline evaluation sampling choice, not evidence of the robot’s runtime control frequency or emergency-response latency. For a real system, I would require separate measurement of detection delay, decision delay, command delivery, and physical stopping behavior. A correct textual instruction to stop is only one event in that chain. The ER 2 model card also explicitly tells users not to use the robotics models for safety-critical applications. That is stronger than a suggestion to be cautious when replacing an existing safety controller. My assessment is that the safety work is valuable because it makes planning failures measurable and exposes uncertainty-management problems. It should be treated as research on an additional reasoning layer—not permission to weaken independent physical safeguards. Reproducibility and the Adaptation Path. Reproducibility here has several levels. A team can inspect the released ASIMOV-Agentic harness and evaluate supported models on its tasks. But reproducibility requires freezing the model version, prompts, thresholds, and evaluator configuration. The examples default to a small sample limit and an ER 1.6 model identifier, so an unchanged quick-start invocation is not automatically a reproduction of the ER 2 report. Google also publishes orchestration examples, including a Spot demonstration that connects ER 2 to existing navigation and manipulation APIs. That is useful integration material, but it is not an open implementation of the flagship VLA’s training pipeline. Access is similarly differentiated: ER 2 is offered through hosted interfaces, while the flagship is in private preview and On-Device 2 is limited to trusted testers. The reviewed materials do not provide a public package sufficient to reconstruct the trained flagship checkpoint. Reporting a software framework or accelerator family does not close that gap. A reproducible training recipe would also need the architecture, data preparation, sampling mixture, action representation, optimization settings, and evaluation protocol. A closely related study offers a more concrete downstream path. The July 31, 2026 CLIFT paper, from researchers affiliated with Berkeley, Google DeepMind, and NVIDIA, adapts Gemini Robotics On-Device on a Unitree G1 through a managed supervised-fine-tuning interface. It scores deployment rollouts, labels action chunks, and feeds the relabeled data back into training without accessing gradients or weights. With two hours of demonstrations per task and two improvement cycles, it reports cup-insertion success rising from 70% to 98%, and bimanual plate handover from 53% to 96%, evaluated over one hundred trials. These are three specialist tasks, and the paper is not an independent evaluation of the Gemini Robotics 2 flagship. Its comparison with the open-weight π0.5 uses matched downstream data and rollout budgets, but cannot isolate differences in pretraining, architecture, and scale. The study also includes DeepMind coauthors. Those qualifications matter when interpreting the comparison. The practical lesson I draw is narrower and more useful than “closed models win.” Restricted model access does not necessarily prevent task-specific improvement if the adaptation interface accepts informative training data. But it changes the research workflow. You may be able to improve a deployment while remaining unable to inspect the mechanism, modify the loss, or independently reproduce the foundation model. That trade-off should be part of the project decision from the beginning. What This Means for Practitioners. I would approach Gemini Robotics 2 as a set of components to evaluate against a specific operating envelope, not as a single generality claim to accept or reject. For a team with reliable low-level skills, the first experiment I would run is an orchestration comparison. Keep the executor fixed. Give the old and new planners the same tools, observations, time budget, retry allowance, and task distribution. Then measure full-task completion and human intervention, not the eloquence of the generated plan. I would deliberately include partially completed states. Start after a misplaced object, an unsuccessful grasp, or an interrupted sequence. If the claimed advantage is temporal understanding and recovery, testing only clean starts leaves the most important mechanism largely unexamined. For a team considering action-model adaptation, I would establish a realistic specialist baseline. Use the same demonstration budget, the same hardware, and the same success criteria. Include tuning effort and data-collection time in the comparison. A strong pretrained model may save substantial work, but that saving should be measured rather than inferred from a small adaptation-example count. I would also distinguish adaptation time from integration time. Camera setup, synchronization, action normalization, controller tracking, logging, and failure handling belong in the engineering budget even when the fine-tuning job is short. A useful purchasing or research decision depends on the complete path to an operating system. Generalization testing should be factorized before it is combined. Change visual conditions while preserving geometry. Change instructions while preserving the intended action. Change object properties while preserving appearance. Change the robot configuration while holding the task constant. Then combine those changes. The factorized tests help identify the failure mechanism. The combined tests tell you whether the system remains useful when several assumptions fail together. I would reserve entire conditions for final evaluation rather than repeatedly tuning against every apparent “held-out” variation. For long-horizon work, my acceptance metrics would include completion time, interventions per task, recovery time, premature termination, and the consequences of failed actions. A policy that succeeds more often but requires much slower supervision may not improve the operation. Conversely, a somewhat lower raw success rate could still be useful if failure is reliably detected and inexpensive to recover. I would log the observation timestamp associated with each decision, not just when the command was issued. Otherwise, a system can appear responsive while acting on an outdated scene. Where reasoning and action run asynchronously, I would explicitly test interruption, cancellation, stale commands, and conflicting updates. Finally, I would require a versioned description of every executable skill: its preconditions, validated scope, expected duration, completion signal, and escalation conditions. That makes the planner’s assumptions inspectable and gives the team a way to distinguish a planning error from an execution error. The supported conclusion is that this release broadens demonstrated robot capability and reports worthwhile improvements in orchestration and adaptation. The uncertain part is how those improvements survive new environments, new failure distributions, and independent evaluation. The evidence cannot establish universal embodiment transfer or attribute the gains specifically to richer spatial data alone. My verdict is therefore favorable but bounded: Gemini Robotics 2 is a serious systems advance, with a more convincing case for broader competence than for deployment-grade reliability. For researchers, the opportunity is to study the interfaces between reasoning, action, and feedback. For working roboticists, the decision should turn on the failures the system can recognize and recover from—not only the successful behaviors it can demonstrate.