Physical or Digital Keying¶
Constraint / forcing function — instantiates Affordance Shaping
Shapes the environment so that only the correct action physically or logically fits, making the harmful move impossible rather than merely discouraged.
Physical or Digital Keying builds the constraint into the substrate itself: parts are shaped, sized, sequenced, or typed so that the wrong combination simply won't go together and the right one is the only one that fits. A plug that enters only one way, a connector that won't mate with the wrong tank, a form field that rejects an impossible date — each is a forcing function that removes the harmful action from the effective action space entirely, rather than making it merely harder or better-labelled. Its defining move, and what separates it from every friction- or signifier-based sibling, is that it does not rely on the agent noticing, understanding, or choosing correctly: the geometry does the enforcing. Its discipline is to constrain only the genuinely wrong action, leaving every legitimate one free.
Example¶
Diesel and petrol ruin each other's engines, yet a moment's inattention at the pump causes misfuelling every day. The durable fix is keying, not signage. A diesel nozzle is made deliberately wider than the filler neck on a petrol car, so a diesel nozzle physically will not enter a petrol tank — the harmful action is removed by geometry, no label required. (The reverse case — the narrower petrol nozzle sliding into a diesel car — is the gap the geometry doesn't close, which is exactly why that misfuel still happens: a lesson in keying being only as good as the asymmetry it builds in.)
Where signage asks the tired driver to read, remember, and comply, the keyed nozzle asks nothing — the wrong pairing is simply not among the actions available at the pump. The same logic runs in software: a typed field that will not accept letters where a number belongs makes the malformed entry impossible rather than merely flagged.
How it works¶
- Constrain by construction. Encode the boundary in the shape, size, sequence, or type of the parts, so the wrong action is physically or logically impossible — not discouraged, impossible.
- No perception required. Unlike signifiers or friction, keying works even on an inattentive, untrained, or non-reading agent, because it doesn't route through their judgement.
- Block the harmful, free the legitimate. Draw the boundary tightly around the genuinely wrong action so every valid variation still fits; over-keying is its own failure.
- Fail safe. When in doubt the geometry defaults to not connecting, so the error surfaces as an obvious non-fit rather than a silent wrong one.
Tuning parameters¶
- Tightness of the key — how narrowly the allowed set is defined; tighter blocks more misuse but risks forbidding legitimate edge cases (over-keying).
- Hard vs. soft key — an absolute physical impossibility versus an override-able interlock; hard is safest, soft preserves an escape hatch for the expert exception.
- Visibility of the constraint — whether the agent can see why the wrong action won't fit (a shaped asymmetry that also signifies) or only feels the block; visible keying teaches, invisible keying merely stops.
- Coverage of failure modes — how many wrong pairings the key actually forecloses; a key that blocks one direction but not its reverse leaves the gap open.
When it helps, and when it misleads¶
Its strength is that it is the only sibling that makes a harmful action impossible rather than merely unlikely, so it is the right tool where the cost of error is high and the agent can't be relied on to notice — safety-critical connections, irreversible operations. It is a forcing function[1] in the truest sense: correctness by construction, not by vigilance.
Its failure mode is brittleness at the boundary. Draw the key too tight and it forbids legitimate use, provoking exactly the dangerous workaround it meant to prevent — the taped-over interlock, the adapter that defeats the safety connector. Draw it too loose and it lends false assurance while the gap stays open. And because a forcing function removes choice, misused it becomes coercive lock-in dressed as safety — a constraint serving the designer's control rather than the agent's protection. The discipline is to key only what is genuinely and always wrong, to design the legitimate exception path deliberately rather than leaving users to improvise one, and to verify the key covers the failure modes it claims to.
How it implements the components¶
Physical or Digital Keying fills the hard-boundary side of the archetype — the components that make an action impossible rather than merely shaped:
misuse_and_trap_boundary— its core: it draws and enforces the boundary between the permitted and the impossible, foreclosing the harmful action by construction.agency_and_consent_guardrail— because a forcing function removes choice, keying operates this guardrail directly: its discipline is to constrain only the genuinely wrong action and preserve every legitimate one, keeping protective constraint from sliding into coercive lock-in.
It performs no measurement or inventory of the action space — that is Affordance Audit and Robot Action-Space Mapping — and it tunes no soft effort gradient; making an action merely costlier (rather than impossible) is Friction Adjustment, and pre-selecting a good option is Safe Default or Preselected Path.
Related¶
- Instantiates: Affordance Shaping — it is the hard constraint that removes the harmful action from the effective action space.
- Sibling mechanisms: Friction Adjustment · Affordance Audit · Safe Default or Preselected Path · Signifier Prototyping · Wayfinding Marker · Desire Path Observation · Contextual Inquiry or Walkthrough · Prototype A/B or Multivariate Test · Usability or Field Test · Task and Capability Analysis · Robot Action-Space Mapping
Editorial Notes¶
Form Classification¶
Form family: Structure, Architecture & Configuration
Rationale: Physical or Digital Keying operates as a configured physical, technical, or logical arrangement whose structure creates the effect because it shapes the environment so that only the correct action physically or logically fits, making the harmful move impossible rather than merely discouraged.
Independent corroboration: The frozen evidence defines Physical or Digital Keying as 'Shapes the environment so that only the correct action physically or logically fits, making the harmful move impossible rather than merely discouraged', so its operative form is Structure, Architecture & Configuration.
Review outcome: Independent reviewer agreement; high confidence.
Origin Attribution¶
Primary origin: Engineering & Design
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Multi-domain
Rationale: Physical or Digital Keying is rooted in engineering and design: Mistake-proof engineering generalizes keyed fit from physical parts to logically constrained interactions.
Related originating lineages:
- Computer Science & Software Engineering — Computer science and software engineering materially shaped Physical or Digital Keying through algorithms, software architecture, security, and distributed systems. Type systems, schemas, and logical capability checks supplied digital forms of keying.
- Human-Computer Interaction — Human-computer interaction materially shaped Physical or Digital Keying through affordances, usability, personas, and interaction design. Interface constraints and affordance shaping unified physical and logical fit around user action.
Review resolution: Both blind reviewers agree that engineering design and systems assurance is the primary origin. Reconciliation resolves encyclopedia_synthesis_disagreement. Formative alternate lineages are retained as computer_science, human_computer_interaction; later breadth of use is recorded separately as domain_reach=multi_domain, while origin_mode=cross_disciplinary_synthesis describes the relationship among origin lineages.
Encyclopedia synthesis: The exact catalogued form synthesizes established practice rather than reproducing a single standard historical label.
Review outcome: Reconciled after independent review; high confidence.
Notes¶
Keying and Friction Adjustment sit at two ends of one dial: friction makes the wrong action costlier, keying makes it impossible. Reach for keying only when the error is intolerable and the legitimate set is stable enough to encode; when either condition fails, a friction gradient that preserves the exception is the safer choice.
References¶
[1] Norman, D. The Design of Everyday Things, revised ed. Basic Books (2013). Norman defines forcing functions as strong physical constraints that prevent an inappropriate action from proceeding, exemplified by keyed authentication and interlocks. registry ↩