Lipschitz-Controlled Flow Matching for Robust Image Restoration

Sedjro Salomon Hotegni, Konstantin Sonntag, Paul-Christian Bürkner, Sebastian Peitz

Paderborn University · TU Dortmund University

Published November 10, 2026 · on the feed November 11, 2026 · ▲ 2 · arXiv 2611.13995

Image generation & editingSafety, alignment & securityModel architecture No code arXiv ↗Hugging Face ↗

The abstract

Flow-matching models can produce high-quality image restorations, but their learned dynamics may amplify small input perturbations and make reconstructions unstable. We introduce LipsFlower to reduce this amplification. We derive stability bounds for Flow-from-Y, which initializes the ordinary differential equation from a noise-perturbed observation, as well as for observation-conditioned posterior sampling, which conditions the velocity field on the observation throughout integration. Based on this analysis, we develop LipHDiT, a Lipschitz-aware hourglass diffusion transformer that serves as the vector-field architecture of LipsFlower. LipHDiT incorporates stabilized approximate spectral normalization, bounded modulation, and convex residual mixing. We also use adversarial finite-radius gain regularization at sampled interpolation states to penalize excessive sensitivity to the state and, for conditional sampling, the observation. We test both formulations on blind face restoration, measuring adversarial robustness and the perceptual quality of the reconstructions. LipsFlower reduces perturbation amplification while keeping restoration quality competitive with the evaluated baselines. These results suggest that Lipschitz-aware flow matching can improve the stability of generative image restoration.

The Brief

2:08

A short podcast summary of the paper. Written and voiced by AI.

Transcript

Lipschitz-Controlled Flow Matching for Robust Image Restoration. By Sedjro Salomon Hotegni and three others, from Paderborn University and TU Dortmund University. Published on the tenth of November.

Flow-matching models can produce high-quality image restorations. The concern the authors raise is about what the learned dynamics do to small perturbations of the input: those dynamics may amplify them. A small disturbance enters the observation and comes out the far end of the integration larger than it went in. A reconstruction that moves a lot when its input barely moves is an unstable one, however good it looks on a clean input.

LipsFlower is their answer, aimed squarely at reducing that amplification. The analysis comes first. They derive stability bounds for two formulations. One is Flow-from-Y, which initializes the ordinary differential equation from a noise-perturbed observation. The other is observation-conditioned posterior sampling, which keeps conditioning the velocity field on the observation throughout integration. Two different ways of letting the observation into the process, each with its own bound on how much amplification it permits. The bounds from that analysis are what the design is then built on, rather than the design coming first and the theory being fitted around it afterwards.

The vector field inside LipsFlower is a Lipschitz-aware hourglass diffusion transformer called LipHDiT. It incorporates stabilized approximate spectral normalization, bounded modulation, and convex residual mixing. On top of the architecture there is a training term: adversarial finite-radius gain regularization, applied at sampled interpolation states, which penalizes excessive sensitivity to the state. For conditional sampling it penalizes excessive sensitivity to the observation as well.

Both formulations are tested on blind face restoration, and the measurement has two sides: adversarial robustness, and the perceptual quality of the reconstructions. LipsFlower reduces perturbation amplification while keeping restoration quality competitive with the baselines evaluated.

Robustness and fidelity are easy to trade against each other, and this result reads as a claim that they need not be traded hard. Bound how much the dynamics can amplify, and the authors suggest the stability of generative image restoration improves without the restorations themselves getting worse.

More with an account

Listen to every day’s papers

Daily playlists, deep dives, quests for the papers, and quizzes on their key terms.

Join free
KipQuest: the day’s AI research, as podcasts and quests. All papers Android app Privacy Contact Episodes are written and voiced by AI from each paper. Summaries can contain mistakes: the paper is the source.