Protect agency and model responsibility
Every path supports exit and recovery; every risky feature has minimum-data, misuse, safeguard, and removal decisions.
実践ガイダンス
Scale preview and confirmation to consequence, preserve undo where possible, and do not ship when foreseeable harm cannot be bounded.
推奨
- Design decline, cancel, undo, and recovery
- Document data need, misuse cases, safeguards, and do-not-build threshold
非推奨
- Coerce consent or make consequential changes silently
検証契約
manual threat, consent, consequence, and recovery review
根拠リファレンス
ref.apple.hig-accessibility— Apple HIG Accessibilityref.apple.hig— Apple Human Interface Guidelines