| UI or UX | UI + UX - Final destructive commit review | UI + UX - Consequential alert decision | UX - Post-action recovery behavior | UI + UX - Severe-consequence warning copy before an action |
| UI guidance | Render a destructive confirmation after the user invokes a destructive command, with a title and final action button that repeat the destructive verb and target, such as Delete workspace or Cancel subscription. | Render an alert-style modal decision with a specific title, consequence description, safe cancellation, and a destructive action label that names the object or scope. | Show a named recovery affordance after the completed action, such as Undo delete for a specific task, near the result or in a consistent status region. | Render warning text as a short high-emphasis statement with a warning icon, visible or hidden warning label, and explicit consequence copy placed before the relevant action, declaration, or instruction. |
| UX guidance | Use destructive action confirmation to create one informed stop before permanent or externally visible loss, not to slow every routine cleanup action. | Interrupt users only when the action has a meaningful consequence that cannot be safely recovered afterward. | Let users move quickly through frequent reversible actions, then recover from mistakes after seeing the result. | Use warning text when users must understand a serious consequence before acting or failing to act, such as a fine, loss of access, permanent deletion, eligibility impact, or legal responsibility. |
| Good UI | Delete Payments project? lists 4 dashboards, 12 saved views, 3 webhooks, and 8 shared links, offers Keep project, and labels the danger action Delete Payments project. | Delete Research archive? explains that 14 notes and shared links will be permanently removed, offers Keep archive, and labels the danger action Delete archive. | Deleting Quarterly report removes it from the list and shows a recovery panel saying Quarterly report deleted with an Undo task button. | Before Submit declaration, a warning with an exclamation icon says the user may be fined if they provide false information. |
| Bad UI | A modal says Are you sure? with OK and Cancel after the user clicks Delete, without naming the project or what disappears. | A popup says Are you sure? with OK and Cancel but does not name the project, notes, or irreversible outcome. | A tiny x removes an item with no object-specific recovery label. | A red sentence says Important below the submit button after the user has already acted. |
| Good UX | A user opens Delete workspace, reviews the object count and webhooks, cancels, and returns to the same workspace with nothing changed. | Cancel, Escape, and Keep archive leave the archive unchanged and return focus to Delete archive. | Undo restores the deleted task to the list and reports Quarterly report restored. | Users see the fine or eligibility consequence before checking the declaration and can pause to verify their answer. |
| Bad UX | A user confirms deletion because OK looks like the primary next step, then discovers shared links and child reports were lost. | Every archive, filter, and dismiss action opens the same confirmation until users click through automatically. | A second delete overwrites the first recoverable item without explaining which action Undo affects. | A benefit-loss warning appears only after submission, so users cannot change the decision it warns about. |
| Best fit | A user has initiated a destructive command that can permanently remove, revoke, reset, deactivate, or cancel something valuable. | The action is destructive, irreversible, costly, security-sensitive, privacy-affecting, or externally visible. | The action is common and mistakes are likely. | A user must understand a serious consequence before taking or skipping an action. |
| Avoid when | The action is a routine reversible archive, hide, dismiss, move, reorder, or trash move. | The action is routine and easily reversible. | The action has external side effects that cannot be recalled. | The message is a dynamic task status that must be announced when it appears. |
| Required state | Idle state where the destructive command is visible but not committed. | Pre-action state with an explicit consequential trigger. | Normal state before the user action. | No-warning state where the action has no severe consequence. |
| Accessibility burden | Use alertdialog semantics or platform equivalent when the destructive decision requires an immediate response. | Use alertdialog semantics or platform equivalent when the decision is urgent and requires a response. | Make the undo control keyboard reachable and programmatically identifiable. | Do not rely on color alone; include visible or programmatic warning wording and a non-color cue such as an icon. |
| Common misuse | Using a vague Are you sure prompt that does not name the object, count, or consequence. | Asking users to confirm every routine action until they stop reading. | Offering undo for an action that cannot actually be reversed. | Using warning text for routine hints, explanations, or mild reminders. |