Physical Keying or Interlock¶
Physical constraint — instantiates Misuse-Resistant Affordance Design
Uses shape, keying, or interlock so the wrong physical action is mechanically impossible while the correct connection still fits.
Physical keying or interlock shapes matter so that the wrong action cannot be completed with it — the wrong plug will not seat, the wrong two states cannot exist at once, the guard must be closed before the machine will run. Its defining idea is that the constraint lives in geometry and mechanism, not in software validation or human judgment: correctness is enforced by the physics of fit and sequence, so it holds even when every warning label is ignored, every operator is exhausted, and no computer is involved. Where a software constraint restricts what value can be entered, keying restricts what can be physically done — the misuse path is closed in the world, not in the interface.
Example¶
An anesthesia machine draws several medical gases — oxygen, nitrous oxide, air — through hoses to the wall. The catastrophic misuse is connecting the nitrous-oxide line to the oxygen inlet, delivering a suffocating mixture to an unconscious patient. No label or training fully prevents this under pressure, so the fix is mechanical: each gas uses a Pin Index Safety System[n1] with a unique pin-and-hole geometry, and the hose fittings are non-interchangeable by shape. The oxygen yoke has one pin pattern; the nitrous yoke another. The nitrous hose physically will not seat in the oxygen inlet — the pins collide before the connection can be made.
Setup to outcome: an exhausted technician at 3 a.m. reaches for the wrong hose, tries to connect it, and it simply will not go — the geometry refuses. The correct hose seats with a satisfying click. The lethal misconnection is not flagged, warned against, or logged; it is impossible to complete, because the objects were shaped so that only the right pairing fits.
How it works¶
- Inventory the physical misconnections. Enumerate the specific wrong pairings, wrong sequences, and wrong states that must never occur — concrete physical actions, not moral categories.
- Make right-fits-only the geometry. Shape connectors, slots, and keys so the correct pairing seats easily and every wrong pairing is mechanically blocked before it can complete.
- Interlock incompatible states. Where two conditions are dangerous together (door open and power on), tie them mechanically or electrically so one forces the other into a safe state.
- Fail toward safe. Design the mechanism so that wear, breakage, or loss of power leaves it in the blocking (safe) position, not the permissive one.
Tuning parameters¶
- Keying distinctness — how different the correct and incorrect geometries are. Highly distinct shapes make wrong pairings impossible but multiply part variety and cost.
- Fit tolerance — how much slack the correct connection allows. Tight tolerance resists forced or partial misconnection but can jam under dirt, wear, or cold hands.
- Interlock strictness — whether the block is absolute or has a documented override for repair and calibration. Absolute is safest; an override is sometimes unavoidable for maintenance.
- Reversibility of forcing — how much brute force can defeat the key. A robust key resists a determined shortcut; a fragile one invites a hammer.
- Standardization scope — whether the keying is proprietary or an industry standard. Standards ease interoperability but let a wrong-but-common part fit.
When it helps, and when it misleads¶
Its strength is the strongest guarantee in the archetype: a correctly keyed connection eliminates an entire class of catastrophic physical error unconditionally, independent of attention, training, language, or power — the canonical poka-yoke.[1] Where the harm is severe and the action physical, nothing else is this reliable.
Its failure mode is the workaround born of a legitimate need the key did not anticipate: if the correct part is unavailable and the job is urgent, someone will file down the pin, jam the interlock, or fashion an adapter — reintroducing the very misconnection the geometry forbade, now invisibly. The classic misuse is defeating an interlock "just for maintenance" and never restoring it, so the guard that made the machine safe sits permanently bypassed. The guarding discipline is to design the override as a governed, obvious, self-reverting action rather than leaving people to improvise one, and to make legitimate parts and access easy enough that no one is ever tempted to defeat the key to get the real work done.
How it implements the components¶
misuse_friction_or_impossibility_rule— it realizes the impossibility end of the rule in the strongest form: the wrong pairing or state is mechanically prevented from completing, not merely resisted.asymmetric_affordance_map— the geometry makes the correct connection the only one that seats, so the right action is easy and every wrong action is physically unavailable — an asymmetry built into shape.misuse_path_inventory— the design begins from an explicit catalog of the specific physical misconnections and unsafe state-combinations to be foreclosed, and keys each one out.
It does not restrict values in a symbolic input space or tune a friction_budget and legitimate_path_preservation_criterion there — that is Constrained Input Control, its nearest twin; keying closes the misuse path in physical geometry, whereas constrained input closes it in the data a field will accept.
Related¶
- Instantiates: Misuse-Resistant Affordance Design — it forecloses catastrophic physical misuse in the geometry of the objects themselves.
- Sibling mechanisms: Constrained Input Control · Exception Review Queue · Misuse Monitoring Dashboard · Permission-Scoped Default · Point-of-Action Confirmation · Progressive Disclosure of Risky Options · Rate Limit or Cooling Hold · Safe Default Setting
Editorial Notes¶
Form Classification¶
Form family: Structure, Architecture & Configuration
Rationale: Physical Keying or Interlock operates as a configured physical, technical, or logical arrangement whose structure creates the effect because it uses shape, keying, or interlock so the wrong physical action is mechanically impossible while the correct connection still fits.
Independent corroboration: The frozen evidence defines Physical Keying or Interlock as 'Uses shape, keying, or interlock so the wrong physical action is mechanically impossible while the correct connection still fits', so its operative form is Structure, Architecture & Configuration.
Review outcome: Independent reviewer agreement; high confidence.
Origin Attribution¶
Primary origin: Engineering & Design
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Multi-domain
Rationale: Physical Keying or Interlock is rooted in engineering and design: Mechanical safety engineering keys connectors and interlocks so incompatible actions cannot complete.
Related originating lineages:
- Human-Computer Interaction — Affordance and forcing-function design supplied the human-error interpretation.
- Medicine & Healthcare — Medicine and healthcare materially shaped Physical Keying or Interlock through clinical trials, care coordination, diagnosis, and therapeutic control.
Review resolution: Both blind reviewers agree that engineering design and systems assurance is the primary origin. Reconciliation resolves alternate_origin_disagreement, origin_mode_disagreement, domain_reach_disagreement. Formative alternate lineages are retained as medicine_healthcare, human_computer_interaction; later breadth of use is recorded separately as domain_reach=multi_domain, while origin_mode=cross_disciplinary_synthesis describes the relationship among origin lineages.
Review outcome: Reconciled after independent review; high confidence.
Notes¶
[n1] The Pin Index Safety System is a real medical-gas standard in which each gas cylinder yoke carries a unique pattern of pins and holes, so a regulator can only mate with the correct gas — a mechanical guarantee against lethal misconnection. ↩
References¶
[1] Shingo, Shigeo. Zero Quality Control: Source Inspection and the Poka-Yoke System. Productivity Press (1986). Presents physical mistake-proofing constraints as poka-yoke devices that prevent wrong positioning or assembly. registry ↩