Contents
  1. Part I — Directing uncertain behavior
    1. The interface is a control contract
      1. Five questions every task surface should answer
    2. Expose the intent the task requires
      1. What interaction forms expose
    3. Match the interaction pattern to the work
      1. Pattern selection
  2. Part II — Shared-control traditions
    1. How initiative became shared
      1. Must-know developments
  3. Part III — Making behavior legible
    1. Separate receipt, progress, and outcome
    2. Communicate uncertainty for the decision
      1. Cause and interface response
    3. Layer explanation, evidence, and diagnostics
      1. Three disclosure depths
  4. Part IV — Control while work continues
    1. Define interruption and cancellation honestly
    2. Keep persistent delegation inspectable
      1. Persistent-control responsibilities
  5. Part V — Review, correction, and recovery
    1. Review before consequential commitment
      1. Choose review granularity
    2. Repair the smallest affected boundary
  6. Part VI — From design claim to working interface
    1. Prototype the uncertain interaction
      1. What prototypes can establish
    2. Implement explicit task states
      1. A reducer rejects stale state before rendering it
  7. Part VII — Testing the human workflow
    1. Evaluate use, reliance, and recovery
      1. Claims and evidence
    2. Accessibility is interaction behavior
      1. The same task across access modes
  8. Part VIII — Choosing controls
    1. Choose controls for the actual task
      1. A practical design review
      2. One task, conflicting constraints
  9. Check understanding
  10. Open questions
  11. Selected talks
  12. References
  13. Talk library
← All topics

Design Engineering and AI Interfaces: Giving People Control Over AI That Acts

An AI interface is how a person gives direction, understands what the system is doing and changes course. As AI moves from suggesting answers to taking actions, design must make scope, progress, review and intervention understandable. Good interaction design connects flexible model behavior to controls people can predict and use. This chapter follows the experience from expressing intent through inspecting results, correcting mistakes and deciding how much work to delegate.

Part I — Directing uncertain behavior

The interface is a control contract

A conventional function call suggests a compact contract: supply arguments, receive a result, and handle an error. An AI product usually contains more boundaries. The person expresses an intended outcome; the application assembles inputs; a model interprets them; the system may propose an artifact or action; some actor authorizes an effect; and a separate check may establish what happened. The interface must preserve these distinctions because success at one boundary does not establish success at the next.

Feedback is information returned in response to an action. Useful feedback tells the person what the system received, inferred, changed, or could not establish. User control is the practical ability to direct, inspect, interrupt, correct, or limit that work. Neither is satisfied by a polished completion message. A coding agent can say it is finished while an independent check still fails; similarly, a generated email is only a draft until an authorized send occurs, and a send response is not necessarily proof of delivery.

Five questions every task surface should answer

  • IntentWhat outcome does the person want, and which constraints matter?
  • InterpretationWhat did the system understand from the request and available context?
  • ProposalWhat artifact, decision, or action is being suggested?
  • AuthorityWho may commit which effects, against which exact proposal?
  • OutcomeWhat authoritative evidence shows that the useful work was completed?

From intent to verified outcome

A proposal, an authorized effect, and evidence of completion are different objects.

Generation produces a proposal. Authorization permits an attempted effect; authoritative observation establishes the outcome.
Read the diagram as text
  • Expressed intent. Goal, constraints, source material, output form, and requested authority.
  • System interpretation. The application’s current understanding of the request.
  • Proposal. A draft artifact or description of a prospective action.
  • Authorization. A control decision bound to the inspected proposal.
  • External effect. A state change outside the generated proposal.
  • Outcome evidence. Authoritative state used to establish the result.
  • Expressed intentSystem interpretation: input data.
  • System interpretationProposal: generated proposal.
  • ProposalAuthorization: review data.
  • AuthorizationExternal effect: permission to attempt.
  • External effectOutcome evidence: authoritative observation.

The relevant unit of quality is therefore the complete human-and-software system, including its effects and recovery path—not the model response alone. What an evaluation establishes develops that evidence boundary.

Expose the intent the task requires

Intent is rarely one undivided sentence. It includes a goal, constraints, source material, desired output form, and authority to act. An interface should make the consequential parts explicit while leaving language available for nuance. A travel assistant might accept an open-ended goal in conversation, constrain dates and budget with fields, let the person select an itinerary directly, and require separate authorization before purchase.

An affordance is an action possible for a particular actor; a signifier is a perceivable cue that helps the actor discover or interpret that possibility. A visible “Apply changes” button is a signifier. Whether the current user actually has permission to apply them is part of the affordance. Good AI interfaces do not let a cue imply authority or reversibility that the underlying system lacks.

What interaction forms expose

FormMakes explicitOften leaves implicitBest use
Blank conversationGoal in the user’s own languageValid values, selected objects, action authorityExploration and underspecified work
Structured formFields, ranges, required choicesNuance outside the schemaRepeated operations with known parameters
Inline editorTarget object and local changeBroader downstream consequencesBounded rewriting or code modification
Direct manipulationSelected objects and visible effectsUnseen dependencies and permissionsSpatial or precisely editable state

The Excalidraw integration described by Christopher Chedeau illustrates the difference between output and editable product state. A model generated a constrained diagram description, deterministic software translated it into native Excalidraw objects, and users could then move, recolor, and revise those objects. The structured intermediate representation reduced rendering ambiguity; native editability let the person correct the result without restating the whole request.

Match the interaction pattern to the work

Choose an interaction pattern from the work, not from the presence of a model. Conversation is strong when the goal is exploratory and the next useful question depends on the answer. It is weak as the only interface for repeated structured operations, spatial editing, comparison, monitoring, or bulk review. Those tasks benefit from persistent objects, stable controls, and state that does not scroll out of view.

Pattern selection

Task propertyUseful patternMaterial tradeoff
High ambiguityConversation with targeted clarificationFlexible, but important constraints can remain hidden
Frequent, structured operationCommand or formFast and predictable, but limited to anticipated parameters
Local optional assistanceInline suggestionLow context switching, but rejected suggestions still impose verification cost
Evolving document, code, or designPersistent workspace beside conversationKeeps the artifact inspectable, but requires conflict and version handling
Spatial or precisely editable stateDirect manipulationVisible incremental correction, but representations can imply unavailable actions
Bounded recurring workBackground automation with review and exception routesReduces routine interaction, but makes status and intervention design essential

Patterns can be combined across stages. A research assistant may begin in conversation, maintain sources and a draft in a persistent workspace, use direct selection for bounded edits, and run document preparation in the background. The design question is not “chat or no chat?” It is which surface best supports each decision, object, and commitment.

Part II — Shared-control traditions

How initiative became shared

Generative interfaces recombine older approaches to human-computer interaction. Their history is useful because each tradition addressed a different coordination problem; none universally replaced the others.

Must-know developments

DateDevelopmentContribution
1983Direct manipulationBen Shneiderman described continuously visible objects and rapid, incremental, reversible operations with visible effects. He also warned that graphical representations can mislead or consume excessive space.
1985Percent-done indicatorsBrad Myers distinguished measurable completion against an estimated whole from activity displays that only show continued processing.
1986Execution and evaluation gulfsDon Norman separated the difficulty of translating goals into available actions from the difficulty of interpreting system state against those goals.
1999Mixed-initiative interfacesEric Horvitz combined automated assistance with direct invocation, termination, clarification, and manual completion under uncertainty and interruption cost.
2010sInteractive machine learningResearchers emphasized incremental cycles in which people supply input, inspect changed behavior, and direct corrections.
2024Side-by-side artifactsAnthropic described a workspace beside conversation for inspecting generated documents, code, graphics, and previews as persistent work products.

The allocation of initiative changed, but the old requirements remained. A model may suggest a next action, yet visible objects still help people inspect its target. Background work may choose steps dynamically, yet progress still needs meaningful state. Conversation may express intent flexibly, yet reversible local controls remain cheaper than repeatedly regenerating an almost-correct artifact.

Part III — Making behavior legible

Separate receipt, progress, and outcome

After a person initiates work, the interface can truthfully make several different claims: the request was received; the system interpreted it in a stated way; work was accepted; a stage is running; a provisional artifact exists; validation passed; an external effect occurred; or the resulting resource is usable. Collapsing these into “Done” creates false confidence and weak recovery.

Determinate progress reports completed work relative to a meaningful total. If the total is unknown or changes as an agent explores, a percentage is not justified. Show honest indeterminate activity, named stages, completed artifacts, pending dependencies, or a range estimate instead. Alma’s nutrition workflow, for example, exposed a recognized food item before later database matching completed. That partial result made waiting more useful, provided the interface did not mislabel it as finalized nutrition data.

Progressive disclosure initially presents the important, frequently needed information and makes specialized detail available on request. It differs from staged disclosure, where every user proceeds through successive task steps. In an AI interface, the primary status might say “Waiting for approval,” while an expandable view contains tool logs and timing. Internal diagnostic telemetry belongs in Observability; user-facing progress should answer what the person can understand or do next.

Terminal states need equal precision. Verified completion differs from partial completion, blocked work, cancellation, failure, and an unknown external outcome. Decide whether to continue develops the corresponding execution dispositions.

Communicate uncertainty for the decision

Uncertainty communication should name the uncertain claim and the decision it affects. “I may have misunderstood which account you meant” calls for clarification. “Two sources disagree about the amount” calls for comparison. “This prediction is uncertain” may justify a calibrated probability or range. “The external system did not confirm the write” calls for an unknown-outcome state, not a confident retry.

Cause and interface response

Source of uncertaintyUseful responseDo not substitute
Ambiguous intentAsk a targeted question or show candidate interpretationsGeneric warning text
Missing informationName the gap and request or retrieve the needed inputInvented completion
Conflicting sourcesShow the conflicting claims and provenanceCitation count
Predictive uncertaintyShow a calibrated probability, range, or task-relevant review cue when validatedRaw generation probability
Unacceptable residual riskDefer, abstain, or require qualified reviewCautious tone alone
Unverified effectKeep the outcome unknown and inspect authoritative stateAutomatic retry that may duplicate the effect

Presentation changes reliance but does not guarantee good judgment. In one medical-information experiment, first-person uncertainty wording reduced agreement with deliberately fallible answers and improved participant accuracy, but also reduced willingness to use the system. Another experiment found that calibrated-frequency displays changed confidence adjustments in some cases yet did not prevent incorrect reliance. The design must therefore evaluate the decision people make, not merely whether uncertainty is visible. Interpret probability forecasts covers calibration; Evaluate deferral as a policy covers abstention, coverage, and selective risk.

Layer explanation, evidence, and diagnostics

Four supporting objects serve different purposes. An explanation describes general system behavior or a particular output. Evidence supports a claim. Provenance records origins and transformations. Diagnostics expose execution details useful for investigation. A generated rationale can help a reviewer find a bad criterion, but it is not independent proof that a score is correct or that the rationale faithfully reveals hidden computation.

Three disclosure depths

  • DecisionShow the affected values, material qualification, and action choices needed now.
  • VerificationReveal sources, assumptions, alternatives, and derivation history needed to inspect the claim.
  • DiagnosisReveal model, tool, timing, trace, and error detail needed to investigate execution.

More disclosure is not automatically better. Research on AI-assisted decisions found that tested explanations did not significantly outperform a simpler confidence-only condition, and explanations could increase agreement when the AI was wrong. Citations can likewise raise reported trust even when they are irrelevant. The primary surface should therefore expose what the current decision requires, while deeper material remains reachable and inspectable.

Part IV — Control while work continues

Define interruption and cancellation honestly

Interruption changes the current interaction. Steering supplies new direction. Pause retains state intended for later resumption. Cancellation requests that remaining work stop. A cancellation acknowledgment confirms that the runtime handled the request; quiescence means no covered work remains active. None of these terms implies that completed effects were reversed.

Cancellation is asynchronous. A client may immediately display “Canceling,” but a tool can complete or emit another update before the runtime returns a canceled outcome. Agent Client Protocol guidance explicitly permits updates during that interval. Cloud Speech-to-Text similarly documents cancellation as best-effort and requires clients to inspect the eventual operation state. A provisional label is useful feedback; it is not execution proof.

Cancellation is a protocol

A cancellation request can race with late updates and already completed effects.

The user asks the client to cancel. The runtime receives the request while a tool may already have produced an external effect or late update. Only the final acknowledgment establishes the covered execution’s terminal disposition; it does not undo the effect.
Read the diagram as text
  • User.
  • Client UI. Shows a provisional canceling state.
  • Agent runtime. Coordinates model and tool work.
  • In-flight tool. May not stop synchronously.
  • External system. May already contain a committed effect.
  • Runtime resolves the race. Accounts for the tool result, late updates, and any effect already committed.
  • Client shows canceled outcome. Acknowledged terminal disposition for covered work.
  • UserClient UI: control: cancel.
  • Client UIAgent runtime: cancel request.
  • Agent runtimeIn-flight tool: abort request.
  • In-flight toolExternal system: possible prior effect.
  • In-flight toolRuntime resolves the race: abort result or late update.
  • External systemRuntime resolves the race: effect evidence.
  • Runtime resolves the raceClient shows canceled outcome: canceled acknowledgment.

Late data must also be attached to the right request and version. If a person corrects an artifact while an older generation remains in flight, the old response must not overwrite the correction. Ignoring stale presentation data is distinct from aborting server work, just as cancellation is distinct from undo. Preserve useful partial artifacts according to an explicit policy, and describe stronger checkpoint or resume guarantees as properties of the chosen runtime rather than universal interface semantics.

Keep persistent delegation inspectable

Persistent assistance changes a one-turn request into an ongoing relationship. The interface should keep visible the represented subject, accountable owner, delegated capabilities, current tasks, notification policy, checkpoints, expiry or renewal rule, and revocation path. A ticket or prompt can describe the delegation context, but it should not replace the identity of the person or service on whose behalf the agent acts.

Persistent-control responsibilities

MomentPerson needs to seeSystem responsibility
GrantScope, subject, resources, duration, confirmation rulesBind authority outside model-controlled text
OperationActive tasks, status, pending decisionsSurface artifacts and consolidate attention requests
CheckpointCompleted effects and proposed next scopeRenew consent when risk or scope materially changes
RevocationWhat will stop and what already happenedStop remaining authorized work and preserve an inspectable record

Notifications should re-enter the person only when attention is useful, not require continuous monitoring. Proactive suggestions should remain optional and reversible where possible. Because no universal interruption frequency or delegation duration fits every task, products must state these policies explicitly and test them in use. Personal Agents develops memory, preferences, privacy, and long-term usefulness.

Part V — Review, correction, and recovery

Review before consequential commitment

A review boundary belongs before an action whose consequences, irreversibility, uncertainty, or delegated authority justify the interruption. Human intervention can supply missing intent, permission to act, or responsibility for work the system cannot complete; these are different requests and should be presented differently. Request the right human decision develops that distinction.

Authorization must be bound to the proposal the person inspected. Show the affected object, concrete values, relevant evidence, and expected effect. If the proposal changes, invalidate the approval or restart review. n8n’s demonstrated email and calendar gates follow the important structural pattern: the agent invokes the ordinary tool, while an execution-layer interceptor blocks it until review. The calendar example also shows why raw parameters need readable presentation; an opaque timestamp weakens the decision even when technically complete.

Version-bound review before execution

Example

Approval must authorize the exact proposal inspected, not a moving summary.

A readable, versioned proposal can be clarified, edited, denied, escalated, or approved. Approval passes through a final version check; a mismatch exits to re-review instead of executing changed parameters.
Read the diagram as text
  • Proposal v3. Affected object, concrete values, evidence, and expected effect.
  • Human review. The reviewer inspects the proposed action.
  • Clarify or edit. Intent or values require change.
  • Denied. Execution is not authorized.
  • Escalated. Responsibility moves to a qualified decision-maker.
  • Final version check. Confirms that execution still targets proposal v3.
  • Execute action. The authorized external effect is attempted.
  • Re-review required. Proposal data changed after inspection.
  • Proposal v3Human review: review data.
  • Human reviewClarify or edit: missing or wrong intent.
  • Human reviewDenied: permission denied.
  • Human reviewEscalated: responsibility transfer.
  • Human reviewFinal version check: approved v3.
  • Final version checkExecute action: if version matches.
  • Final version checkRe-review required: if version changed.

A dialog alone does not guarantee attention. Repeated confirmations can produce habituation, and a human gate can amplify automation bias. In the When Machines Mislead studies, fabricated copy-typing alerts were inserted into legitimate historical exam sessions. Proctors initially rejected only half of those fabricated alerts. Revised instructions required independent video evidence before upholding a flag; model-estimated rejection rose to 71%, though the studies used different sessions and periods rather than simultaneous randomized assignment.

Choose review granularity

  • Per itemAppropriate when each effect can differ materially; expensive for frequent routine work.
  • BatchEfficient when comparable items can be inspected together; risks hiding local differences.
  • Exception onlyReduces burden when the exception detector is validated and ordinary effects remain bounded.
  • Explicit confirmationFits rare commitments whose exact parameters must be acknowledged; repetition can weaken inspection.

Repair the smallest affected boundary

Correction mechanisms should match where the error entered. Edit a proposal when its content is wrong but no effect occurred. Correct a source fact when the proposal faithfully reflects bad input. Regenerate a bounded region when only one portion needs another attempt. Reject a candidate when an alternative is better. Undo an applied change only when the application retains a supported prior state. Compensation is different: it performs a new domain-specific action to address an effect that already happened.

A compensation may fail, conflict with concurrent work, or leave residual consequences. Canceling a booked flight may incur a fee; retracting a sent message cannot guarantee that nobody read it. The recovery record should preserve the source version, AI proposal, user correction, committed effect, compensation attempt, and current disposition rather than rewriting history to imply the error never occurred.

Correction preserves history

Example

Undo and compensation change state in different ways; neither should erase provenance.

1 / 4 · Proposal created

The source and derived proposal remain separately addressable.

In this example, compensation K1 is a new action addressing E1 and may leave residual consequences. Other cases may support undo or require escalation; the source, proposal, correction, and committed effect remain separate records.
Read the diagram as text
  • Source S1. Versioned source material.
  • Proposal P1. Derived from source S1.
  • Correction C1. A user-authored bounded change.
  • External effect E1. Committed downstream state.
  • Disputed. The committed effect is later challenged.
  • Compensation K1. A new action addressing E1; it may not restore the original state.
  • Resolved with residue. Current disposition records remaining consequences.
  • Source S1Proposal P1: supports.
  • Proposal P1Correction C1: is corrected by.
  • Correction C1External effect E1: authorizes committed value.
  • External effect E1Disputed: has status.
  • External effect E1Compensation K1: addressed by.
  • Compensation K1Resolved with residue: produces disposition.
  1. Proposal created. The source and derived proposal remain separately addressable. Active: Source S1, Proposal P1. New: Source S1, Proposal P1.
  2. Bounded correction. The correction is added without replacing source or proposal history. Active: Source S1, Proposal P1, Correction C1. New: Correction C1.
  3. Effect committed and disputed. The external effect persists as a stable record with a disputed status. Active: Source S1, Proposal P1, Correction C1, External effect E1, Disputed. New: External effect E1, Disputed.
  4. Compensating recovery. A new corrective action and honest residual disposition are recorded. Active: Source S1, Proposal P1, Correction C1, External effect E1, Compensation K1, Resolved with residue. New: Compensation K1, Resolved with residue.

Source-linked review makes the disputed boundary concrete. In Recover incomplete and disputed results, a useful record includes the source version, page and region, surrounding context, candidate values, and referral reason. An editable field linked to its source location lets the reviewer correct the extraction without reconstructing the whole document. Conditional version checks can then prevent an accepted correction from silently overwriting newer work.

Part VI — From design claim to working interface

Prototype the uncertain interaction

Prototype the riskiest interaction claim, not the most photogenic screen. Role concerns whether the product is useful in the workflow; look and feel concerns the experience of interacting; implementation concerns how it works. Model behavior, integration, latency, consequences, and accessibility add independent fidelity dimensions. A prototype can be realistic on one dimension and entirely simulated on another.

What prototypes can establish

PrototypeUseful forCannot establish alone
Static mockupHierarchy, copy, layout, task framingTiming, model variability, cancellation, real effects
Scripted interactionKnown state changes, errors, review, recoveryUnscripted model behavior
Wizard of OzInteraction with a human simulating missing automationDeployed accuracy, latency, reliability, or scale
Model-backed prototypeReal output variability and prompt behaviorProduction integrations or operational safety
Production-shaped working sliceOne narrow task through real boundaries and observable outcomeCoverage of the broader workload

Include delayed responses, malformed output, interruption, denial, correction, stale updates, and accessible operation. A controlled delayed-error fixture can keep transient states visible for inspection. A working slice should be narrow but complete through integration, operator interaction, and observable result; Testing a complete working slice develops that method.

Implement explicit task states

A state model turns asynchronous behavior into enforceable rules. A state records the current condition relevant to permitted behavior. An event reports something that happened. A transition moves to another state when an event matches and any guard condition holds. These ideas do not make the model deterministic; they make the application’s response to model and tool events explicit.

Give each task, attempt, proposal, artifact, and external effect a stable identity. Keep durable task state separate from ephemeral streamed presentation. An incoming event should carry the request or version it concerns; otherwise, an old response can overwrite a newer correction. Repeated cancel, approve, or retry actions also need defined semantics. Idempotency can make repetition safe for a specific operation, but it is a contract, not a property inferred from the button label.

Guarded transitions for one task attempt

Example

Identity and version guards keep obsolete events from becoming current state, while verified completion requires authoritative outcome evidence.

One identified attempt follows the central path. Unrelated or stale events are rejected without changing current state; cancellation becomes terminal only after acknowledgment; a changed proposal requires a new review; and an unconfirmed external effect remains unknown rather than becoming a false success.
Read the diagram as text
  • Identity guards. Task T-42, attempt A-3, proposal P-9, and effect E-1 identify the state and events they concern.
  • Accepted. Attempt A-3 is registered for task T-42.
  • Running. Work is active for this attempt.
  • Provisional artifact P-9. An inspectable artifact exists but no external effect is verified.
  • Awaiting review of P-9. Authorization must remain bound to this proposal version.
  • Executing effect E-1. The authorized external operation is in flight.
  • Verified complete. Authoritative evidence establishes the required postcondition.
  • Event rejected. An unrelated task ID or older version cannot mutate the current attempt.
  • Canceling. A cancellation request is pending while covered work settles.
  • Canceled. The runtime acknowledged that remaining covered work stopped.
  • Re-review required. Proposal data changed after inspection, invalidating prior authorization.
  • New attempt A-4. A retry receives a new attempt identity instead of silently looping A-3.
  • External outcome unknown. The response cannot establish whether effect E-1 occurred.
  • Identity guardsAccepted: matching task and attempt.
  • AcceptedRunning: start event.
  • RunningProvisional artifact P-9: artifact P-9 emitted.
  • Provisional artifact P-9Awaiting review of P-9: review required.
  • Awaiting review of P-9Executing effect E-1: P-9 approved and unchanged.
  • Executing effect E-1Verified complete: postcondition verified.
  • Identity guardsEvent rejected: unrelated or stale event.
  • RunningCanceling: cancel requested.
  • CancelingCanceled: cancellation acknowledged.
  • Awaiting review of P-9Re-review required: proposal version changed.
  • Re-review requiredNew attempt A-4: new attempt created.
  • Executing effect E-1External outcome unknown: outcome evidence unavailable.

A reducer rejects stale state before rendering it

Illustrative pseudocode

Python-like pseudocode
def reduce(state, event):
    if event.task_id != state.task_id:
        return state  # unrelated task

    if event.version < state.version:
        return state  # stale update

    if event.type == "cancel_requested" and state.can_cancel:
        return state.with_status("canceling")

    if event.type == "external_effect_confirmed":
        return state.record_effect(event.effect_id)

    if event.type == "canceled_ack":
        return state.with_status("canceled")

    return apply_permitted_transition(state, event)

The user-facing projection should remain concise: “Waiting for approval” is usually more useful than a stream of internal span names. Keep traces and metrics available for diagnosis through Observability, while the task surface presents state, evidence, and permitted next actions.

Part VII — Testing the human workflow

Evaluate use, reliance, and recovery

Evaluate representative people performing representative tasks against a credible prior or non-AI workflow. The outcome is useful completed work, including review, correction, waiting, exceptions, and downstream repair. Component accuracy and model quality remain inputs, but they do not measure whether the interface improved the job.

Claims and evidence

Design claimObserveMeasureComparison
People complete the taskAttempts through the entire workflowCorrect completed outcomes and unresolved casesPrior or non-AI workflow
Status is understoodInterpretations and next actions at key statesComprehension errors and recovery choicesAlternative status presentation
Review improves decisionsAcceptance and rejection of correct and seeded erroneous adviceAppropriate reliance, review time, downstream correctionImmediate advice or independent-first judgment
Correction is usableAttempts to repair realistic errorsTime, interactions, residual error, abandoned repairsRestart or manual workflow
Interruptions are proportionateTask activity around suggestions and approvalsVerification cost, delay, dismissal, missed interventionsDifferent trigger or review policy

Use moderated task testing to observe what participants understand and expect; use heuristic inspection as a separate method for expert analysis against established principles. Neither substitutes for the other. Seeded-error studies are especially useful for oversight because counting approvals alone cannot show whether reviewers resist wrong assistance.

Production signals are selectively observed. An accepted suggestion may later be corrected; silence may mean success, unnoticed failure, or abandonment; only escalated cases may receive expert labels. Account for incomplete feedback explains this measurement problem, while Making everyday use workable covers checking time, exception routes, confidence, and responsibility in sustained use.

Accessibility is interaction behavior

Accessibility means designing and developing technologies so people with disabilities can perceive, understand, navigate, interact, and contribute. For AI products, that obligation covers the complete process: entering intent, reading generated content, tracking progress, handling interruptions, reviewing proposals, correcting errors, and recognizing completion.

The same task across access modes

RequirementVisual and pointerKeyboard or switchScreen readerReduced motion and reflow
IntentLabeled controls and selected objectsLogical focus order and non-drag alternativesNames, roles, states, instructionsControls remain visible and usable when enlarged
Streaming statusVisible contextual updateFocus stays on the current controlGrouped polite live-region announcementNo motion-only cue; layout does not jump
ProgressText plus visual indicatorOperable details disclosureContext such as “3 of 5 files processed”Non-color meaning and stable reflow
Review and correctionVisible source and changed valuesEvery action reachable without precise pointingSource, proposal, and error relationships announcedNo two-dimensional scrolling unless meaning requires it
Cancellation and completionDistinct canceling and canceled statesCancel remains reachable and focus is restored logicallyCompletion or failure announced without stealing focusReduced animation and adjustable timing

Generated content also needs semantic headings, lists, tables, labels, reading order, accessible code and math, text alternatives for meaningful images, and operable embedded controls. Token-by-token announcements can overwhelm assistive technology; ARIA live regions and aria-busy support batching changes into meaningful updates rather than treating every fragment as urgent.

Automated tools assist accessibility evaluation but cannot establish conformance or usability alone. Combine standards inspection with task testing involving disabled participants, while stating participant characteristics and limits of generalization. A few users can reveal severe barriers without representing every disability or assistive-technology configuration.

Part VIII — Choosing controls

Choose controls for the actual task

The final design is a set of connected decisions, not a generic checklist score. Begin with useful completed work and permitted authority. Choose interaction patterns from task structure. Expose interpretation, state, and decision-relevant uncertainty. Define interruption and terminal semantics. Place version-bound review before consequential commitment. Preserve bounded correction and honest recovery. Implement explicit states, then test the complete accessible workflow.

A practical design review

  • WorkWhat observable result makes the task useful, including checking and correction?
  • IntentWhich goals, constraints, sources, output form, and authority must be explicit?
  • PatternWhich stages need conversation, structure, persistent artifacts, direct manipulation, or automation?
  • LegibilityWhat interpretation, progress, uncertainty, and evidence does the next decision require?
  • ControlWhat do pause, cancel, deny, retry, and revoke mean operationally?
  • CommitmentWhich effects require version-bound review or independent verification?
  • RecoveryWhat can be edited, undone, compensated, or only escalated?
  • AccessCan every important action and state be perceived and operated through supported access modes?
  • EvidenceWhich task outcomes, burdens, failures, and unresolved cases will establish whether the design helps?

One task, conflicting constraints

Consider a frequent background workflow that prepares outbound notices. Frequency favors automation and low interruption; ambiguous recipients favor targeted clarification; ordinary drafts favor direct editing; irreversible sending favors readable, version-bound authorization; delayed delivery confirmation requires a distinct pending outcome; screen-reader users need grouped contextual announcements; and a failed send may permit retry while an already delivered mistake requires a corrective follow-up. Convenience in one stage can therefore require stronger boundaries elsewhere.

The governing principle is simple: give people enough structure to express intent, enough visibility to understand state, and enough authority to intervene before uncertainty becomes an irreversible effect. The exact controls remain task-specific because ambiguity, latency, review cost, accessibility, consequence, and reversibility interact.

Open questions

  1. How can interfaces communicate calibrated uncertainty without increasing inappropriate reliance, especially when task-relevant uncertainty differs from model probability? Progress would include replicated studies on real workflows that measure comprehension, correct acceptance and rejection, review time, and downstream outcomes across expertise levels.

  2. What portable pause-and-resume contract can preserve partial artifacts while invalidating stale assumptions, in-flight effects, and obsolete checkpoints? Progress would look like explicit cross-runtime semantics for safe points, version compatibility, retained state, cancellation races, and user-visible recovery.

  3. How should persistent delegation expire, renew, and request fresh consent as tasks and applications change? The hard part is balancing useful continuity against silent authority expansion. Progress would include enforceable scope records, understandable renewal interfaces, tested notification policies, and clear revocation outcomes.

  4. How can teams measure correction burden and irreversible-effect rates consistently enough to guide interface choices? Progress would require task-specific denominators, longitudinal links between proposals and later repairs, and comparisons with credible prior workflows rather than universal benchmark numbers.

  5. How should streamed AI interaction behave across screen readers, switch access, keyboard-only use, reduced motion, zoom, and narrow reflow? Progress would combine standards-conformant implementations with controlled task studies involving disabled participants, including interruption, review, correction, and error recovery rather than final-answer reading alone.

Follow the curated reading path through the speakers and demonstrations behind this entry.

Explore more talks

The rest of the library, beyond the curated path. Cited talks support this entry; reviewed transcripts were processed in full. Metadata candidates have not been reviewed as sources or verified as topic members.

49 matching talks

TalkSpeakerEventYear
Greg BensonAI Engineer World's Fair 20252025
Codex, Behind the Harness

Transcript reviewed

Dominik KundelAI Engineer World's Fair 20262026
Jeremy Silva, Chris HernandezAI Engineer World's Fair 20252025
Michael HablichAI Engineer Europe 20262026
Sarah Sachs, Carlos Esteban, Doug GuthrieAI Engineer World's Fair 20252025
Anita KirkovskaAI Engineer Summit 20252025
Arthur ObjartelAI Engineer Summit 20252025
How to Kill the Code Review

Transcript reviewed

Ankit JainAI Engineer World's Fair 20262026
Eno ReyesAI Engineer World's Fair 20252025
Rami AlhamadAI Engineer World's Fair 20252025
Rafal Wilinski, Vitor BaloccoAI Engineer World's Fair 20252025
Ahmad AwaisAI Engineer Code 20252025
Michal CichraAI Engineer Europe 20262026
Sumaiya ShrabonyAI Engineer World's Fair 20262026
Beyang LiuAI Engineer World's Fair 20252025
Jun Yu TanAI Engineer World's Fair 20252025
Peter WielanderAI Engineer Code 20252025
KP Sawhney, Ian BallantyneAI Engineer Europe 20262026
OpenLLMetry is all you need

Transcript reviewed

Nir GazitAI Engineer Summit 20252025
Mike ChristensenAI Engineer Europe 20262026
Bennet FennerAI Engineer Europe 20262026
Chintan Agrawal, Daniel WirjoAI Engineer World's Fair 20262026
Vinoth GovindarajanAI Engineer World's Fair 20262026
Harald KirschnerAI Engineer World's Fair 20252025
Sandipan BhaumikAI Engineer Europe 20262026
John PhamAI Engineer World's Fair 20252025
Shafik Quoraishee, Joanne SongAI Engineer World's Fair 20262026
Omar KhattabAI Engineer World's Fair 20252025
Alex LissAI Engineer World's Fair 20252025
Maximillian PirasAI Engineer World's Fair 20252025
Defying Gravity

Cited in this entry

Kevin HouAI Engineer Code 20252025
Adam TerlsonAI Engineer Summit 20252025
Matt PocockAI Engineer Europe 20262026
Jerry LiuAI Engineer World's Fair 20252025
Kwindla Kramer, Shrestha Basu MallickAI Engineer World's Fair 20252025
Talha SheikhAI Engineer Europe 20262026
Akele Reed, Dave Revere, Doug KellerAI Engineer World's Fair 20262026
Evaling Video Slop

Transcript reviewed

Maor BrilAI Engineer World's Fair 20262026
Vinoo GaneshAI Engineer World's Fair 20262026
Daniel ChalefAI Engineer World's Fair 20262026
Carlos Esteban, DougAI Engineer World's Fair 20252025
Kam LasaterAI Engineer Summit 20252025
Aditya BhargavaAI Engineer World's Fair 20262026
Corey CooperAI Engineer World's Fair 20252025
Jared JoselowitzAI Engineer World's Fair 20262026
Sarthak AggarwalAI Engineer World's Fair 20262026
Nishant GuptaAI Engineer World's Fair 20262026
Why MLX

Transcript reviewed

AI Engineer Europe 20262026
Travis FrisingerAI Engineer World's Fair 20252025

References

Coverage and source review
Processed transcripts
54 processed in full · 5 in the curated path
Automated source review
Passed
Metadata candidates
0 unreviewed; not verified topic membership
Corpus version
1bd8e407b26a07b33815594e1b2db5f41827119a2b3cb6fbf240f9fc571fc767

Automated review checks source support; it is not publication approval.

A synthesis of selected conference talks and technical references. Citations link to the source material; they do not imply that every talk on this subject is included.

  1. NIST Handbook 161: Usability Handbook for Public Safety Communications

    The handbook separates interaction design—what the system communicates and when—from interface design—how it communicates. Its fingerprint-device example distinguishes capture, submission, returned results, and errors, asking what feedback lets the operator understand each stage and continue after a problem. It recommends documenting these exchanges in an interaction specification and iterating designs with users before implementation becomes difficult to change.

  2. Cognitive Engineering

    Norman distinguishes translating a person's goal into available actions from interpreting the resulting system state against that goal. The gulf of execution concerns the first difficulty; the gulf of evaluation concerns the second. Designers can reduce both by matching controls and displays to users' intentions. His faucet example separates the desired variables—temperature and total flow—from controls that independently regulate hot and cold water. Delayed feedback can make evaluation harder because the person may no longer remember the relevant action.

  3. Your coding agent doesn't always follow your rules

    The speaker recommends treating instructions and verification as separate responsibilities, even with strong specifications, MCP servers, sub-agents, and context.

  4. Building Multi-agent Systems with Finite State Machines

    Place an explicit approval state between the model's proposed tool call and the application's next action.

  5. Guidelines for Human-AI Interaction

    The guidelines recommend communicating capabilities and likely mistakes, showing task-relevant information, and making assistance easy to invoke, dismiss, and correct. Under ambiguous goals, the system should clarify or reduce its scope. Correction includes editing, refining, and recovering rather than requiring another complete attempt. Other recommendations preserve recent interaction context, limit disruptive adaptation, support granular feedback and global controls, and explain how user actions affect future behavior. Table 1 illustrates correction with an editable reminder and uncertainty handling with selectable autocomplete alternatives.

  6. Principles of Mixed-Initiative User Interfaces

    Horvitz combines automation with direct manipulation: users can invoke, terminate, and refine automated assistance. The proposed principles account for uncertainty about intent, interruption costs, and the consequences of incorrect action; clarification should resolve important uncertainty without needlessly bothering users. LookOut provides a concrete example: it extracts appointment details from email, displays editable guesses, and lets the person save the result. When it cannot identify an exact appointment, it can show a relevant calendar period for manual completion.

  7. Signifiers, not affordances

    An affordance concerns actions possible for a particular actor in an environment; it need not be visible or known. A signifier is a perceivable cue that communicates meaningful information, including possible actions or current conditions. Norman distinguishes the available action from the evidence that helps someone discover or interpret it. Signifiers can be deliberately designed or incidental, and their interpretation can be unreliable.

  8. Direct Manipulation: A Step Beyond Programming Languages

    Shneiderman's August 1983 paper describes direct manipulation through continuously visible objects, actions or labeled controls instead of complex command syntax, and rapid, incremental, reversible operations with visible effects. This lets users inspect whether an action advances their goal and change direction. The paper also warns that graphics can confuse: icons require learning, representations can imply unavailable operations, and visual layouts can consume excessive space.

  9. Figma: Rewrite, translate, and shorten text with AI

    Figma's documented writing tools begin with selecting a text layer. Rewriting adds a prompt to describe the desired change; shortening uses a named action; translation uses a language selection. These provide concrete examples of supplying the target through object selection and the operation through contextual controls, without requiring a separate conversation to identify both. The documented uses include fitting interface copy into limited space and previewing another language.

  10. AI and Human Whiteboarding Partnership

    Have the LLM generate a constrained domain-specific language, then deterministically translate that representation into native product objects.

  11. AI and Human Whiteboarding Partnership

    AI output is more useful when it becomes ordinary editable product state rather than a flattened image or terminal answer.

  12. The era of unbounded products: Designing for Multimodal I/O

    Keep evolving task UI outside the scrolling conversation when users need to return to it or act on it.

  13. Collaborate with Claude on Projects

    Anthropic's June 25, 2024 announcement describes Artifacts as a dedicated workspace beside the conversation for generated documents, code, graphics, diagrams, and website designs. Larger code views and frontend previews let people inspect the work product alongside their conversation. This supplies a concrete example of combining conversational direction with a separate artifact surface.

  14. When to Show a Suggestion? Integrating Human Feedback in AI-Assisted Programming

    Mozannar, Bansal, Fourney and Horvitz model an inline suggestion's value as the writing time it may save minus verification, editing and latency costs. Their retrospective analysis uses telemetry from 535 programmers to predict acceptance and selectively withhold likely rejected suggestions. The paper emphasizes that observable acceptance is incomplete: programmers may accept merely to reveal later code, and similar telemetry can arise from different unobserved activities such as thinking, debugging or waiting. It therefore supplies a concrete inline-assistance pattern while warning that acceptance events alone do not establish suggestion quality or user benefit.

  15. Building AI Agents that actually automate Knowledge Work

    The speaker associates background automation with more constrained control flow and an explicit review boundary before downstream actions.

  16. Magentic-UI, an experimental human-centered web agent

    The prototype combines a visible browser with editable plans and conversation. Before execution, users can revise a plan directly or through textual feedback. During execution, they can pause, take control of the browser, demonstrate a correction, and return control. Action guards request approval for actions deemed consequential, with an option to request approval for every action. Saved plans have a separate gallery where users can inspect and modify them.

  17. The Importance of Percent-Done Progress Indicators for Computer-Human Interfaces

    Brad Myers's April 1985 paper distinguishes percent-done indicators from activity displays. A percent-done indicator reports completed work relative to an estimated whole; changing activity without a known total can only indicate that processing continues. In the reported database-query experiment, participants significantly preferred versions with progress indicators, but hypotheses about preferences for constant versus variable response times were not supported. The paper also notes that non-linear or initially unknown work makes percentages difficult to calculate and proposes pass-level, task-level, heuristic, or indeterminate displays instead.

  18. Power to the People: The Role of Humans in Interactive Machine Learning

    Amershi, Cakmak, Knox and Kulesza describe interactive machine learning as rapid, focused and incremental cycles in which people provide input, inspect updated behavior and adapt subsequent input. Their reviewed cases show why the complete interaction must be studied: users may supply richer guidance than a label interface permits, repeated system questions can frustrate users and weaken their understanding, and immediate localized output can help users direct corrections at visible errors. They argue that new interaction techniques need evaluation with intended users because the person and learning system influence one another.

  19. AIP-151: Long-running operations

    The API pattern returns an operation that clients can use to check progress and retrieve the eventual result instead of treating the initial response as the result. Metadata can describe progress and partial failures. Errors preventing an operation from starting are distinguished from failures during execution. A resource being created or deleted can appear in listings while its state indicates that it is not yet usable. Concurrent operations may be queued, rejected, or superseded under explicitly defined rules.

  20. Vercel AI SDK: useChat reference source

    The useChat reference distinguishes submitted, streaming, ready, and error states; ready means idle. Its finish callback includes separate indicators for client abort, disconnection, and streaming error, plus an optional model finish reason. Messages have identifiers, and regeneration can target a specific message. Local message-state updates can occur without an API call. These distinctions support separating displayed content, transport lifecycle, and confirmed task outcomes.

  21. HTML Standard: The progress element

    The HTML progress element represents task completion. Determinate progress expresses completed work relative to a total; indeterminate progress indicates ongoing work when the amount remaining is unknown. The value attribute supplies completed work and max supplies the total. Omitting value represents indeterminate progress. The standard's example updates the element from application-supplied progress, making the display dependent on information provided by the application.

  22. My AI Thinks I'm Eating My Feelings (and Other Nutritional Insights)

    Split a broad LLM workflow into constrained steps and expose useful partial results before all processing finishes.

  23. Progressive Disclosure

    Progressive disclosure initially presents important, frequently needed options and makes specialized options available on request. The split must preserve useful primary functionality, and the route to additional detail needs an obvious control with an informative label. Nielsen distinguishes this from staged disclosure, where people proceed through successive parts of a task that may be equally important.

  24. Understanding Success Criterion 4.1.3: Status Messages

    Status announcements need enough context to be meaningful: announcing a changed number alone can obscure what changed. W3C illustrates intermittent progress announcements and complete contextual messages. Removing a visible busy message can communicate availability to sighted users while leaving screen-reader users uninformed; an explicit available-state announcement can supply the missing information. A dialog that receives focus is a context change rather than a status message under this criterion.

  25. People + AI Guidebook: Explainability + Trust

    The guide distinguishes explanations of general system behavior from explanations attached to a particular output. It recommends concentrating on information relevant to understanding and decisions rather than attempting to explain everything. Confidence displays require early testing because people differ in their understanding of probabilities. Error responses should provide a way forward, including addressing the current problem and, for high-risk outcomes, moving to manual control.

  26. Citations and Trust in LLM Generated Answers

    Participants asked their own questions and received answers with zero, one, or five citations. Displayed citations either came from search results or were randomly selected from previous participants' questions. Citations increased self-reported trust even when randomly selected, although random citations received lower trust than search-derived citations. Checking citations was associated with lower trust. The experiment distinguishes a citation's persuasive appearance from whether it supplies relevant support.

  27. Designing for Appropriate Reliance: The Roles of AI Uncertainty Presentation, Initial User Decision, and User Demographics in AI-Assisted Decision-Making

    Cao, Liu and Huang compared no uncertainty display, raw probability, calibrated probability and calibrated-frequency presentations in a skin-lesion classification experiment. Frequency wording described expected outcomes among 100 similar samples. The calibrated-frequency condition changed how participants adjusted confidence in some agreement and disagreement cases, but none of the uncertainty presentations prevented switching to incorrect AI advice; over-reliance occurred in every condition. Participants also did not report better understanding from the frequency display. Thus calibrated uncertainty and its presentation are separate requirements, and neither alone guarantees an appropriate decision.

  28. Generation Probabilities Are Not Enough: Uncertainty Highlighting in AI Code Completions

    Vasconcelos and colleagues compared plain code completions, highlighting tokens with low generation probability, and highlighting tokens predicted likely to be edited. In a mixed-methods study with 30 programmers, edit-likelihood highlighting produced faster completion and more targeted edits and was preferred by participants; low-generation-probability highlighting did not improve the measured outcomes over no highlighting. The study demonstrates that an uncertainty display should identify the user decision it supports: model probability can be a poor proxy for where review effort is useful.

  29. “I'm Not Sure, But…”: Examining the Impact of Large Language Models' Uncertainty Expression on User Reliance and Trust

    In a September 2023 experiment, 404 retained participants answered eight medical information questions; supplied AI answers were correct on half. First-person uncertainty wording reduced agreement with the system and increased model-estimated participant accuracy from 63.9% to 72.8% relative to responses without uncertainty wording. It also reduced desire to use the system. General uncertainty wording did not produce the same statistically significant accuracy improvement. Between the AI conditions, source-use differences were not significant.

  30. Cloud Speech-to-Text: operations.cancel

    Cancellation starts asynchronously and is best effort. Clients must inspect the operation to determine whether cancellation succeeded or the operation completed despite the request. Successful cancellation leaves an operation record carrying a cancelled error status. An unsupported cancellation method can return UNIMPLEMENTED. The empty response to the cancellation request therefore does not establish terminated execution.

  31. [Evals Workshop] Mastering AI Evaluation: From Playground to Production

    Expose the judge's rationale alongside its numeric score so reviewers can inspect why it chose the grade and tune the evaluator when its reasoning or calibration is poor.

  32. Progressive Disclosure: Designing for Effective Transparency

    Springer and Whittaker's 2018 paper reports two studies comparing global and incremental transparency. Participants initially expected the more incrementally transparent system to perform better, then revised that judgment after use. Qualitative findings indicated that continuous incremental feedback could distract users and interfere with simple working heuristics. The authors use these results to motivate progressive disclosure: begin with simplified feedback needed to operate the system and reveal additional detail as users need it, rather than presenting every internal update at once.

  33. How Kepler Built Verifiable AI for Financial Services

    Source attribution alone does not establish source quality or extraction correctness.

  34. How Kepler Built Verifiable AI for Financial Services

    Derived numbers need replayable derivation histories spanning source values, calculations, and internal information, not just links to filings.

  35. Does the Whole Exceed its Parts? The Effect of AI Explanations on Complementary Team Performance

    Bansal and colleagues evaluated human-AI decisions across three datasets with 1,626 participants and AI performance chosen to leave room for human-machine complementarity. Every human-AI condition exceeded the compared solo performance, but none of the explanation conditions significantly exceeded the simpler confidence-only condition. Explanations tended to help when the AI recommendation was correct and hurt when it was wrong. The paper distinguishes perceived explanation usefulness and proxy tasks from end-to-end decision accuracy, showing that an explanation can influence agreement without independently supporting the recommendation.

  36. Agent Client Protocol: Prompt Turn

    ACP permits a client to request cancellation while a prompt turn is running. The client must answer pending permission requests with a cancelled outcome. The agent should stop model requests and tool invocations promptly, then return a cancelled stop reason after ongoing operations have been aborted and pending updates sent. Updates may still arrive between the cancellation request and that response, and clients should accept them. The specification also recommends immediately marking unfinished tool calls cancelled on the client.

  37. UX Design Principles for (Semi) Autonomous Multi-Agent Systems

    Interruptibility should include pausing, checkpointing, rollback, and resumption so users can intervene before mistakes or unwanted resource use compound.

  38. React: Synchronizing with Effects

    The documentation's fetching example uses cleanup to ignore results from an obsolete request when the selected input changes. A response for an earlier selection can arrive after a later response; ignoring it prevents stale data from replacing the current display. The documentation distinguishes aborting a fetch from ignoring its result.

  39. OpenRefine User Manual: Running OpenRefine

    OpenRefine saves project change history with the data, allowing users to revisit and undo earlier changes after restarting. Selecting an earlier history entry reverses all subsequent changes; making a new edit from that point erases the later redo history. View state has a separate contract: closing a project loses its current filters and facets, while a permalink preserves that view information in the URL. Data recovery and returning to the same working view are therefore distinct capabilities in this implementation.

  40. IT Admin for the AI Workforce — Sarthak Aggarwal, Decawork

    Represent the agent actor, accountable owner, represented subject, and delegation context separately.

  41. Defying Gravity

    Centralize permission requests and open questions in an inbox, notify the user only when attention is required, and expose progress through task artifacts.

  42. IT Admin for the AI Workforce — Sarthak Aggarwal, Decawork

    Agents with authority and side effects need an operational lifecycle beyond model behavior testing.

  43. Don't just slap on a chatbot: building AI that works before you ask

    Proactive AI should supplement agency, keep recommendations optional, and make its changes easy to reverse.

  44. OWASP Transaction Authorization Cheat Sheet

    Users should identify and acknowledge significant transaction details before authorizing execution. The authorization sequence must not be skipped or reordered, and execution needs a final authorization check. Changing transaction data during authorization should invalidate previous authorization or restart the process. Applied to AI proposals, approval should authorize the inspected scope and values rather than an independently changing proposal.

  45. Building Your Own Secure AI Workflows: Human-in-the-Loop Automation with n8n

    Place approval in the execution path so the agent cannot bypass it by choosing to call the underlying tool directly.

  46. Building Your Own Secure AI Workflows: Human-in-the-Loop Automation with n8n

    Show the proposed action's concrete parameters in readable form, rather than only its tool name.

  47. Harder to Ignore? Revisiting Pop-Up Fatigue and Approaches to Prevent It

    Researchers varied repeated exposure to dialogs before changing a field to contain an actionable instruction. Repetition reduced responses to that change in the ordinary dialog. Requiring interaction with the relevant field through swiping or typing resisted habituation better than some attention-grabbing animations and delays. Typing imposed the greatest interaction burden. The study supports testing whether people still inspect consequential details after repeated confirmations, rather than treating the presence of a dialog as evidence of attention.

  48. When Machines Mislead: Human Review of Erroneous AI Cheating Signals

    The researchers introduced fabricated copy-typing alerts into previously certified test sessions and examined proctor decisions in two studies. Revised instructions explicitly required independent suspicious behavior before upholding an alert. Model-estimated rejection of fabricated alerts increased from 50% to 71%; rejection of genuine operational alerts also increased. The study demonstrates a way to investigate whether reviewers challenge erroneous assistance instead of measuring approval alone.

  49. Build AI Systems for Discernment, Not Approval - Angel Ortmann Lee, Duolingo

    The When Machines Mislead case study inserted fake copy-typing alerts into legitimate historical exam sessions and found that skilled proctors accepted half of those alerts.

  50. Compensating Transaction pattern

    Compensation performs application-specific actions to address effects of already completed work. Restoring an old snapshot can overwrite concurrent changes, and compensation need not restore the original state. Compensation can itself fail and require resumable progress or manual intervention. The travel example distinguishes offering another hotel from cancelling successfully booked flights; cancellation may not provide a full refund. Irreversible steps need explicit recognition.

  51. From Chaos to Choreography: Multi-Agent Orchestration Patterns That Actually Work — Sandipan Bhaumik

    The compensation pattern, also called the Saga pattern, pairs execution with explicit undo operations and invokes them in reverse completion order.

  52. RFC 9110: HTTP Semantics

    HTTP conditional requests can prevent one client from overwriting another client's concurrent work. If-Match compares supplied entity tags with the target representation before applying a change. When the condition fails, the server must not perform the requested method and may return 412 Precondition Failed. The standard separately permits reporting success when the requested change already appears to have occurred. Version checking therefore provides a concrete implementation boundary between editing an inspected version and silently replacing newer work.

  53. What Do Prototypes Prototype?

    Houde and Hill organize prototyping around questions about an artifact's role, look and feel, and implementation. Role concerns its usefulness in a person's life; look and feel concerns the experience of interacting; implementation concerns how it works. The unresolved question should determine the prototype. Visual polish and the tools used do not establish completeness or technical feasibility, and teams must explain which aspects represent the eventual system and which do not.

  54. Storybook: Mocking network requests

    Storybook documents using Mock Service Worker to intercept network requests and return controlled responses. Its document-screen example exposes loading, success, and error states. Separate stories provide successful data and a delayed HTTP 403 response. This is a published fixture for making otherwise brief or difficult-to-reproduce interface states available for inspection.

  55. Wizard of Oz Experimentation for Language Technology Applications: Challenges and Tools

    A Wizard-of-Oz prototype has a human simulate some or all system functions, allowing researchers to explore interactions before engineering the complete capability. The paper develops and evaluates WebWOZ tooling and identifies consistency of wizard performance as a methodological concern. Such prototypes can investigate a proposed user experience while leaving actual automated capability unimplemented.

  56. Full Walkthrough: Workflow for AI Coding — Matt Pocock

    Check whether the first proposed slice produces observable behavior; an instruction to use vertical slices does not guarantee that the generated tasks actually do so.

  57. State Chart XML: State Machine Notation for Control Abstraction

    A basic state machine identifies its active state and the transitions that state permits in response to events. A matching transition selects a target state; conditions can further restrict when it is taken. Events may originate inside or outside the system. SCXML also distinguishes actions performed when leaving a state, during a transition, and when entering the next state. This supplies precise vocabulary for connecting visible states, user actions, and execution acknowledgments.

  58. Building Multi-agent Systems with Finite State Machines

    Use actors for communication and encapsulated execution, statecharts for behavioral structure, and LLMs for context-dependent reasoning.

  59. Your Agent Didn’t Fail. Your Harness Did.

    Fluent output does not establish that the harness assembled a complete or current working set.

  60. GOV.UK Service Manual: Using moderated usability testing

    Moderated usability testing observes actual or likely users attempting specific tasks. Think-aloud requests help reveal what participants understand and expect. Tasks should present believable goals without revealing the intended solution. Teams should agree research questions and target users, observe with neutral instructions, and ask follow-up questions about unclear behavior. Assistive-technology users often benefit from using their own configured devices. Dummy data can be useful but may reveal fewer contextual issues than appropriately protected real data.

  61. Production Evals For Agentic AI Systems

    Apply an SRE or production-engineering lens: assess delivered value, operational reliability, human burden, risk, user experience, scalability, and resilience.

  62. Psychological Factors Influencing Appropriate Reliance on AI-enabled Clinical Decision Support Systems: Experimental Web-Based Study Among Dermatologists

    In this web experiment, 223 dermatologists classified 24 cases before and after seeing AI advice; five recommendations were deliberately incorrect. The analysis distinguished accepting useful advice, rejecting incorrect advice, and changing a previously correct answer into an incorrect answer. Some initially correct judgments became wrong after erroneous advice, while correct advice was also frequently rejected. This provides a concrete way to test oversight behavior rather than counting approvals alone.

  63. The Theory Behind Heuristic Evaluations

    Heuristic evaluation has evaluators inspect an interface against recognized usability principles and explain the problems they identify. Evaluators inspect independently before combining findings because different people discover different problems. Nielsen distinguishes this from user testing: in a user test, researchers interpret participants' attempts to perform tasks; in heuristic inspection, the evaluator directly analyzes the design. Inspectors may receive domain explanations that would obscure a discoverability problem if supplied to a usability-test participant.

  64. Build AI Systems for Discernment, Not Approval - Angel Ortmann Lee, Duolingo

    The human-AI interaction loop is cyclical: interfaces that encourage rubber-stamping can turn model-influenced approvals into misleading evaluation and training labels.

  65. W3C WAI: Introduction to Web Accessibility

    Web accessibility means designing and developing websites, tools, and technologies so people with disabilities can perceive, understand, navigate, interact, and contribute. It includes auditory, cognitive, neurological, physical, speech, and visual disabilities. Accessibility therefore concerns participation in the interaction, not only the visibility of its final output.

  66. Web Content Accessibility Guidelines 2.2

    WCAG requires keyboard operation subject to its stated exception, ways out of keyboard focus traps, and adjustable time limits subject to specified exceptions. Controls need programmatically available names, roles, and states. Status messages must be available to assistive technology without taking focus. For specified consequential submissions, error prevention can be supplied through reversibility, checking with correction, or review and confirmation. Previously supplied information required again in the same process should be populated or selectable, with exceptions. Conformance covers full pages and complete processes.

  67. W3C WAI: What's New in WCAG 2.2

    WCAG 2.2's Level AA focus requirement says a component receiving keyboard focus must not be entirely hidden by author-created content, subject to the stated notes. Its Level AA dragging requirement calls for a single-pointer alternative that does not require dragging, unless dragging is essential or the unmodified user agent determines the functionality. W3C illustrates list reordering with clickable up and down controls. These requirements address different barriers: finding the focused control and operating a task without precise dragging.

  68. Accessible Rich Internet Applications 1.2

    Live regions expose changing content to assistive technologies. Polite updates normally wait for a suitable opportunity; assertive updates can interrupt and clear queued speech, so the specification discourages them unless interruption is imperative. aria-busy can mark a region while multiple changes are made, allowing assistive technology to defer them and process a completed update together. These mechanisms support grouping updates instead of treating every text fragment as an urgent announcement.

  69. WAI-ARIA Authoring Practices: Developing a Keyboard Interface

    Keyboard focus identifies the active interaction target and is distinct from selection. Focus should remain visible and move predictably. Removing a focused item or closing a dialog requires deliberate placement on a logical remaining control; otherwise focus can fall back to the document body. Automatically selecting content whenever focus moves can become particularly burdensome when each selection triggers a network request.

  70. Understanding Success Criterion 1.4.1: Use of Color

    Color must not be the only visual means of communicating information, an action, or a requested response. Text or another visible distinction can supplement it. W3C explicitly includes errors, required fields, and successful database updates among relevant examples. Supplying the meaning only to assistive technology is insufficient for sighted people who cannot distinguish the colors; they also need a visible alternative.

  71. Understanding Success Criterion 1.4.10: Reflow

    Reflow lets enlarged content fit the available viewport without losing information or functionality or requiring scrolling in two dimensions. For vertically scrolling content, the Level AA criterion specifies a width equivalent to 320 CSS pixels. Content requiring a two-dimensional layout, such as a data table, has an exception, but that exception does not automatically cover surrounding controls or the text inside individual cells. Repeated sideways scrolling to read lines increases effort and can make users lose their place.

  72. Evaluating Web Accessibility Overview

    Accessibility should be evaluated early and throughout development. Automated evaluation tools assist the work, but no tool alone can establish that a site meets accessibility standards; knowledgeable human evaluation is required.

  73. Involving Users in Evaluating Web Accessibility

    W3C recommends involving people with disabilities throughout development, including completing sample tasks on prototypes. Their participation reveals usability problems that conformance inspection alone can miss. User testing should be combined with standards evaluation; neither a few participants nor one disability group represents all accessibility needs. Reports should state methods, participant characteristics, and the scope of conclusions.

  74. NIST AI RMF Core

    NIST connects measurement to deciding whether a system achieves its intended purpose and whether development or deployment should proceed. Risk responses include mitigation, avoidance and acceptance; remaining risks should be documented. The framework includes considering viable non-AI alternatives and assigning responsibility for superseding, disengaging or deactivating systems whose outcomes conflict with intended use. It also calls for evaluating measurement processes themselves and maintaining post-deployment monitoring, feedback, incident response, recovery and change management.

  75. Citation Needed: Provenance for LLM-Built Knowledge Graphs

    Lineage must survive graph mutation: entity merges retain both source sets, and invalidation records the new evidence responsible for the change.

  76. Breaking the Chain: Agent Continuations for Resumable AI Workflows

    The speaker reports implementing suspension triggers based on elapsed time, turn count, and asynchronous requests, extending the continuation mechanism beyond approval gates.

  77. LangSmith: Feedback data format

    LangSmith stores feedback separately from execution records and associates it with a trace or intermediate run. Sources include application feedback, human annotation and offline or online evaluators. The documented record includes run identity, creation and modification timestamps, a criterion key, numerical or categorical judgment, comments, correction information and feedback-source details. Source metadata and user identity can accompany the judgment.

  78. The era of unbounded products: Designing for Multimodal I/O

    Highlight what matters, establish hierarchy, and reuse familiar interaction structures to make an unbounded product understandable.

  79. Build AI Systems for Discernment, Not Approval - Angel Ortmann Lee, Duolingo

    The speaker reports that revised proctoring guidelines improved rejection of fabricated alerts by explicitly requiring independent video evidence.

  80. UX Design Principles for (Semi) Autonomous Multi-Agent Systems

    User-facing observability should stream activity and application updates while exposing timing and token usage for debugging.

  81. UX Design Principles for (Semi) Autonomous Multi-Agent Systems

    Cost-aware delegation requires inspecting proposed actions and estimating their risk or cost before deciding whether human involvement is needed.