The actor triggers something and the system needs to be sure they mean it. Inline confirmation keeps the question where the intent was expressed: the triggering control transforms in place into a confirm/cancel pair, and only a second, deliberate activation completes the act. Because the confirm affordance appears where the actor is already looking and clicking, the friction added is one decision, not a context switch — enough to interrupt autopilot, not enough to interrupt work.
Behaviours
- Timeout reversion. If the actor doesn’t confirm within a few seconds, the control reverts to its resting state — an abandoned near-miss should leave no armed control behind.
- Explicit cancel. Offer a cancel affordance alongside confirm rather than relying on the timeout alone; changing your mind should not require waiting.
- Distinct confirm state. The confirming control must look visibly armed (colour, icon fill) so the actor can tell a loaded control from an idle one.
Choosing against the alternatives
Inline confirmation sits between two cheaper and one heavier option. When the act reverses cleanly, skip confirmation entirely and offer undo with transient feedback — recovery after beats interrogation before. When consequences are severe or affect others, escalate to a dialog that can spell them out. Inline confirmation covers the middle ground.
Consequences
- the second commitment happened where the first one did, so the actor was interrupted without being relocated — one decision of friction rather than a change of place
- an armed control is a state the interface has to manage: it reverts on its own after a moment, and it has to look different enough from resting that the actor can tell a loaded control from an idle one
- confirming is not reversing — the actor consented before the act and has nothing to undo after it, so anything that might still need taking back needs its own route
Related patterns
Alternatives
- Undo — moves the safety net after the act instead of before it; prefer undo when the action reverses cleanly
Related
- Action consequences — the framework that places this move — moderate recovery effort, clear intent, context worth keeping; one rung above undo-only, one below modal
- Approval gate — the single-action rung of the same ladder; an approval gate reviews delegated work, often in batches
- Deletion — the action it most commonly guards; deletion's decision tree recommends it for items that take minutes, not seconds, to recreate
Preceded by
- Open request — a plan exists and the agent is about to act on the actor's behalf; where a step can't be taken back, the actor's explicit go-ahead has to come before it, not after