The cost of surprise rises with consequence severity
Aliases: surprise cost · consequence severity · risk grading
What it is
The cost of one unmet expectation differs radically by consequence. Misclicking a reversible display option may cause brief confusion; wrongly believing an operation will not publish, charge, delete, or affect another person can cause loss, privacy exposure, broken trust, or safety risk. Consequence-sensitive surprise means deciding where expectation, feedforward, confirmation, and recovery must be strongest by potential impact, not interface element alone.
Why it happens
People normally act quickly from habit and do not deeply inspect every low-risk step. As behavioral consequence rises, the time, scope, and irreversibility of recovering from a wrong prediction rise too. If a system still uses cues as weak as ordinary action, people transfer a low-risk strategy into a high-risk setting. Risk-proportionate prompts, state, and confirmation give people a chance to shift to more careful judgment before commitment.
Studying it
Create an impact classification for key actions: object scope, effect on others, reversibility, time pressure, financial, privacy, and safety consequence. Test prediction accuracy before each level, notice of impact, misoperation, recovery success, and trust change. Do not test ordinary success paths alone; simulate wrong object, batch scope, network duplication, permission change, and exceptional state—conditions most likely to magnify surprise.
Where it stops holding
High risk does not mean every step should produce a strong warning. Excessive interruption creates confirmation fatigue that makes people ignore what matters. Risk also does not depend only on internal system categories: impact may differ by user, region, and task. Focus attention on information that actually changes a decision, with verifiable object and scope, rather than vague red color or severe tone that merely creates tension.
Applying it
- Allocate feedforward, confirmation, feedback, and recovery strength by consequence rather than control type; high-impact action should state object, scope, external effect, and reversibility.
- Make high-risk paths visually, procedurally, and behaviorally distinct from low-risk paths so skilled motion does not transfer accidentally.
- Calibrate risk levels continuously with misoperation, retraction, support, and impact events, prioritizing weak cues that cause major surprises.
Related
- Same group: B2.14.1 Behavior should match what naming and appearance imply · B2.14.3 Clever but unexpected behavior is a net liability
- Nearby: B2.12.2 Irreversible actions must be explicitly marked · B2.06.3 Feedback intensity should match action importance
- Search terms:
surprise cost·consequence severity·risk-aware design