PS-INP-156 · r1
INPUT
OBSERVED
ENGAGED · ONGOING
SAFEGUARD WINDOW COST
Every step added to prevent the wrong action is taken out of the time in which the right one still works.
01 DEFINITION
Condition in which the deliberate steps that stop an irreversible action from being taken by accident are drawn from the same interval in which taking it deliberately still has effect, so guarding against one failure spends the margin against the other.
02 CONDITIONS
UNCERTAINTY
CONFLICTING
Two failure modes point in opposite directions and neither can be reduced without funding the other.
TIME PRESSURE
HIGH
The interval in which the action still has effect is the interval the safeguard consumes.
ERROR ASYMMETRY
ASYMMETRIC
Acting wrongly and failing to act in time do not cost the same, and which one costs more changes with the situation.
OPERATOR STATE
DEDICATED
The operator is on this and nothing else, which is why added steps are felt as delay rather than as load.
03 WHERE IT APPEARS
MEDICALA step added so that an irreversible instruction cannot be issued in error is spent from the interval in which issuing it still changes the outcome.
ENERGYIsolation and interruption sequences are built to resist a slip and are performed when the reason to perform them is already advancing.
FINANCEConfirmation on a large irreversible instruction guards against the mistaken one and is drawn from the window in which the intended one still executes at the price it was decided at.
INDUSTRIALThe interlock that prevents an unintended stop is released under the conditions that make stopping urgent.
DEFENSEA release sequence must resist the accidental and complete inside a closing window, and the two requirements draw on the same seconds.
04 WHAT AEON WORKED THROUGH HERE
The brief asked for both: a sequence that could not be completed by accident, and one that could be completed in time. Adding steps satisfied the first and quietly emptied the second. The work went into which single step carries the guard, rather than into how many steps there are.
What stays unresolved is how a sequence can signal that it is nearly complete without becoming something the hand finishes on its own — the operator who most needs the last step to be quick is the one under the most pressure to skip it.