Tensions in Practice: Mistake prevention in tension with interface flexibility¶
Equipment interfaces · one known mismatch
Suppose two connectors can be confused at a workbench. A warning can tell the operator that the wrong one is being offered while leaving the existing interface usable. A shaped key can instead make that specific wrong connection physically impossible. The second arrangement removes dependence on noticing the warning, but requires changing the interface and restricts which parts fit.
Preserve a usable, adaptable interface
Avoid redesign and physical constraints when a warning is an adequate response.
Prevent the known mismatch
Keep one foreseeable wrong connection from being completed despite distraction or missed signals.
Why these aims pull against each other
A warning communicates a problem without removing the action. Physical incompatibility removes the selected action but costs redesign and constrains future compatibility.
Choose an arrangement to see what changes and what remains difficult.
Qualitative paths and conditions, not measured costs, timings or performance guarantees.
What this choice protects
What it costs
When it fits
Compare the arrangements
Warn the operator
Signal the mismatch but leave the physical interface unchanged.
- What it protects
- The interface remains flexible and avoids the cost of redesigning a keyed connection.
- What it costs
- The operator can miss or ignore the signal and still make the wrong connection.
- When it fits
- The known mistake has tolerable consequences, users can respond reliably enough, and physical redesign is not justified.
Illustration note: The connector is a hypothetical non-safety-critical illustration of detection. It is not an endorsement of warnings where a missed warning would be unacceptable.
Exclude the mismatch
Give the connector and socket complementary shapes that exclude the selected mismatch.
- What it protects
- For that mismatch, correction no longer depends on noticing and obeying a warning.
- What it costs
- The interface must be redesigned and made compatible with the intended parts; the constraint can make legitimate changes inconvenient.
- When it fits
- The mistake is important enough to justify redesign and the permitted connector set is sufficiently stable.
Illustration note: The schematic assumes the physical key works as designed and is not bypassed. It excludes one known mismatch, not every error involving the equipment.
What this illustration does—and does not—establish
Error Proofing (Poka-Yoke): Prevention versus acceptability supplies warning versus physical prevention; its limitations bound the covered error. The diagrams separate a notification path from a removed connection.
- A matching shape does not establish correct voltage, signal, assembly sequence, or overall system safety.
- This comparison concerns an operator mistake, not a component-failure response.
- There are no measured cost or risk scores and no claim of zero defects.
Source entries
Error Proofing (Poka-Yoke)
Error Proofing (Poka-Yoke): Prevention versus acceptability supplies the conflict examined here.
Prevention versus acceptability
- T1: Prevention versus acceptability. Absolute prevention (making a mistake physically impossible) is often expensive or inconvenient. A fuel door that physically blocks the wrong fuel type is prevention; a warning light saying "You are using wrong fuel" is detection. Prevention is more reliable but may require design changes and cost. A common failure is confusing "prevention" with "impossible to design," leading to acceptance of preventable errors that detection-based systems miss.
What It Is Not
- Not a guarantee of zero defects. Error proofing prevents known error modes; novel errors outside the scope of the analysis can still occur. A checklist prevents omitting known steps but does not prevent steps done incorrectly if the correctness condition is not observable.