Mode Confusion Error

The system failure where an operator takes the correct action for the wrong system state, producing catastrophic results. The pattern requires a system with multiple operational modes (states, configurations) where the correct action differs by mode. The mechanism: (1) the system has multiple modes that look similar to the operator, (2) the operator loses track of which mode is active, (3) the operator takes an action correct for the assumed mode but incorrect for the actual mode, (4) the system responds unexpectedly, (5) the operator is confused by the response, potentially compounding the error. The Airbus A320 crash at Strasbourg (1992) occurred because pilots confused descent rate mode (setting feet per minute) with flight path angle mode (setting degrees)—entering '3.3' meaning 3.3 degrees resulted in -3,300 feet per minute. In everyday life: sending a private message to a public channel, driving with the car in the wrong gear, editing the production database while thinking you're in test. Mode confusion is the human equivalent of a system in an undefined state.

When to use it

When designing systems with multiple operational modes. When investigating errors where the operator 'should have known' the system state. When building interfaces that switch between environments (test/production, public/private). When an action would be catastrophic in the wrong context.

How it can help

Provides specific design principles for mode-confusion prevention. (1) Make modes perceptually distinct: different colors, layouts, or physical configurations for different modes. (2) Provide constant, unambiguous mode indication: the operator should always be able to see current mode without checking. (3) Require explicit confirmation for mode changes: 'You are about to switch to [mode]. Confirm?' (4) Design actions to be mode-independent where possible—reduce the number of modes that require different behaviors. (5) During handoffs and interruptions, make mode verification the first step. The key: mode confusion is a design failure, not a human error.