Irreversible actions must use touch-up activation

What it is

Delete, send, payment, and other irreversible or high-consequence actions must use touch-up activation, letting people see the target while held and exit to cancel. Touch-down commit turns one landing error directly into unrecoverable harm.

Why it happens

Touch-up preserves a candidate state and cancellation path before commit; hold can highlight the target, show risk, or switch to cancellation feedback. The real value of this small extra moment is not just "one more chance" — it is that this protection rides for free on a motion already underway. The person is already holding their finger down; sliding off to cancel is simply redirecting a trajectory already in motion, with no new tap required. A touch-down-commit-plus-after-the-fact-dialog design, by contrast, inserts a completely separate confirmation step after the original action has already finished, interrupting a flow that was already complete — that cost is "paid extra," not "carried along for free." This difference is exactly why touch-up plus slide-to-cancel usually protects normal use from interruption better than touch-down plus a follow-up dialog, while still catching mistaken taps just as effectively.

Studying it

Use high-risk mis-tap, exit-cancel, and hesitation-recovery tasks, measuring erroneous commit, cancellation success, understanding, and time. Check that visual, haptic, and keyboard paths also provide cancellable confirmation. A concrete comparison implements the same high-risk action two ways — "touch-up plus slide-to-cancel" and "touch-down commit plus after-the-fact confirmation dialog" — and measures both versions' mis-action interception rate and their total time cost or interruption count during normal use; if interception rates are comparable, the version with the shorter total time cost is the better protection.

Where it stops holding

Irreversibility depends on actual recovery: reliable undo can lower risk, but people must discover and complete it. Touch-up is not the only protection—separation, confirmation, and delayed execution can layer—but an after-the-fact dialog cannot replace precommit cancellation.

Applying it

• Use a held candidate, exit-cancel, lift-commit state machine for high-consequence commands.
• While held, show object and risk clearly without executing early.
• How to check: for the same high-risk action, measure the mis-action interception rate and the total time cost of normal use under both "touch-up plus slide-to-cancel" and "touch-down commit plus after-the-fact dialog," and choose the version with comparable interception but fewer interruptions.

Related

• Same group: C2.07.1 Touch-up activation allows changing one’s mind mid-action · C2.07.2 Touch-down activation responds faster but cannot be cancelled · C2.07.4 A combination of preview on touch-down and commit on touch-up
• Nearby: C2.08 Touch cancellation gestures · E1 Interface elements and controls
• Search terms: irreversible action · touch up · error prevention