Being seen and being fixed are different states that one acknowledge click shouldn't conflate
Aliases: separate acknowledgement from treatment · acknowledge versus resolve
What it is
"Acknowledged" in an alarm workflow means someone has received the message and accepted responsibility for assessing it; "treated" means a specific corrective action has actually been carried out and there is evidence it took effect. If both meanings share one button, the team can no longer tell from that button alone whether the risk is still present, who is currently working it, or whether someone simply silenced the tone. This leaf is about whether these two concepts should ever be merged into one state; when an alarm should escalate, who is authorized to acknowledge, and how timestamps should be recorded belong to the other three leaves in this group.
Why it happens
Acknowledgement closes a communication-level loop, proving the message reached a specific person; treatment closes a control- or field-level loop, usually requiring the process itself to show a response before it can genuinely be considered complete — the two require entirely different kinds of evidence. Only by modeling them as separate states can a manager calculate where a real response delay actually occurred — no one accepted it, someone accepted but never acted, or someone acted but the process recovered slowly — and only then can an abandoned alarm, acknowledged and never followed up, be detected, while the next shift can see clearly who actually owns what happens next.
Where it stops holding
For a purely informational event that needs no separate treatment, acknowledgement can legitimately be the final action, and forcing a separate "treated" state adds nothing; for a condition that recovers automatically, treatment may need no manual closing command at all. But these categories must be defined in advance, during alarm rationalization, and written into configuration — never left for the operator to judge on the spot, which produces inconsistent treatment of the same alarm class across shifts and individuals.
Applying it
Split the state machine into four explicit stages — accepted/acknowledged, under treatment, condition recovered, verified closed — and record the acting person's identity and a timestamp on every transition each role is authorized to make. Validate with two scenarios built specifically for this: a trigger condition that persists without ever being treated, and someone marking the alarm closed before the process has actually recovered. Check whether the team can still see from the interface that the risk remains open in both cases, rather than being misled by one generic "acknowledged" state.
Related
Cards in the same group
- Y2.07.2An alarm nobody accepts within its window should escalate to someone else, not ring forever
- Y2.07.3Acknowledging an alarm on someone else's behalf breaks the link between accepting and acting on it
- Y2.07.4Timestamping each step from trigger to closure is what makes a later incident review possible