At first glance, a forcing function feels like a limitation. It prevents the user from doing something they think they want to do. But in the philosophy of safety engineering, the is not a constraint—it is a liberation. It liberates the operator from the burden of perfect vigilance. It liberates the system from latent defects. And it liberates the organization from the specter of preventable failure.
Before we dissect VL-022, we must anchor ourselves in the basic theory. A forcing function is a design feature or constraint that physically prevents an action from being performed incorrectly or out of sequence. Unlike a warning label or a pop-up dialog box, a forcing function does not rely on memory, vigilance, or goodwill. VL-022 - Forcing Function
In VL-022, the Interlock can be released automatically if the Sentinel detects a return to safe parameters, or it can be latching (requiring manual reset). The specification provides clear taxonomy for both. At first glance, a forcing function feels like a limitation