State ambiguity can lead to hazardous approach
Aliases: unsafe approach · ambiguous stop state · unexpected restart
What it is
Hazardous state ambiguity occurs when someone cannot distinguish safe cessation from a pause that may resume, then enters swept space, touches a load, or begins maintenance. Harm arises from an action incompatible with the actual control state, not merely from unattractive information display.
Why it happens
People infer absence of danger from absence of motion, especially after a long uneventful wait. Automatic pause, network loss, or occluded sensing may resume when conditions recover. Without an explicit resumption gate, stillness becomes false safety evidence. Vague labels also let roles supply inconsistent meanings.
Studying it
Pause, completion, emergency stop, disconnection, and pending auto-resume can be presented while participants decide whether to approach, retrieve, or service. Choice, confidence, entry timing, and resumption conflict are relevant. Simulation or motion-limited rigs prevent real harm. Long waits matter because short clips underestimate the safety illusion of stillness.
Where it stops holding
Clear display does not replace physical isolation, lockout, or protective monitoring. Experts still face stale display and handoff error, while bystanders need a coarse do-not-enter state. An undifferentiated failure cue may prevent entry but also obstruct necessary rescue.
Applying it
- Mark every auto-resumable pause as controlled and capable of motion, requiring renewed confirmation when a person is near.
- Distinguish completion, pause, protective stop, and power isolation; maintenance must independently verify energy isolation.
- Test approach decisions with prolonged stillness and sudden resumption, tracking unsafe entry, confident error, and handoff omission.