MICHELLE PENNEYDESIGN
START A PROJECT
FIELD NOTE / PRACTICE

Govern the system after launch

A visual system remains coherent when teams know who may change it, how exceptions are evaluated, and which checks protect meaning and access.

Govern the system after launch

01. Define the protected layer

Identify tokens and patterns whose consistency carries meaning: status colors, type hierarchy, spacing, chart conventions, and interaction behavior.

In practice, document one concrete example and one counterexample. Ask the team to identify the actor, source of truth, time boundary, and recovery path. Then test the wording or pattern with realistic information rather than ideal placeholder content. This reveals ambiguity, overflow, missing states, and operational promises before they become expensive.

A useful review question is: what would a person reasonably believe after seeing this? Compare that belief with what the service can actually deliver. If they differ, change the language, interface, or operation—not merely the presentation. Record the decision so future contributors understand why the pattern exists and which evidence would justify changing it.

02. Allow controlled variation

A system that denies real contexts will be bypassed. Document extension points, required evidence, and how a successful exception becomes a supported pattern.

In practice, document one concrete example and one counterexample. Ask the team to identify the actor, source of truth, time boundary, and recovery path. Then test the wording or pattern with realistic information rather than ideal placeholder content. This reveals ambiguity, overflow, missing states, and operational promises before they become expensive.

A useful review question is: what would a person reasonably believe after seeing this? Compare that belief with what the service can actually deliver. If they differ, change the language, interface, or operation—not merely the presentation. Record the decision so future contributors understand why the pattern exists and which evidence would justify changing it.

03. Assign decision rights

Name maintainers, contributors, reviewers, and approvers. Separate brand preference from accessibility, product behavior, and data-integrity decisions.

In practice, document one concrete example and one counterexample. Ask the team to identify the actor, source of truth, time boundary, and recovery path. Then test the wording or pattern with realistic information rather than ideal placeholder content. This reveals ambiguity, overflow, missing states, and operational promises before they become expensive.

A useful review question is: what would a person reasonably believe after seeing this? Compare that belief with what the service can actually deliver. If they differ, change the language, interface, or operation—not merely the presentation. Record the decision so future contributors understand why the pattern exists and which evidence would justify changing it.

04. Keep components and guidance together

A component without usage guidance invites misuse. Guidance without production code drifts. Version both and link examples to the current release.

In practice, document one concrete example and one counterexample. Ask the team to identify the actor, source of truth, time boundary, and recovery path. Then test the wording or pattern with realistic information rather than ideal placeholder content. This reveals ambiguity, overflow, missing states, and operational promises before they become expensive.

A useful review question is: what would a person reasonably believe after seeing this? Compare that belief with what the service can actually deliver. If they differ, change the language, interface, or operation—not merely the presentation. Record the decision so future contributors understand why the pattern exists and which evidence would justify changing it.

05. Test releases

Automate contrast, semantics, tokens, and visual regression where practical. Add human checks for hierarchy, language, keyboard sequence, and assistive-technology behavior.

In practice, document one concrete example and one counterexample. Ask the team to identify the actor, source of truth, time boundary, and recovery path. Then test the wording or pattern with realistic information rather than ideal placeholder content. This reveals ambiguity, overflow, missing states, and operational promises before they become expensive.

A useful review question is: what would a person reasonably believe after seeing this? Compare that belief with what the service can actually deliver. If they differ, change the language, interface, or operation—not merely the presentation. Record the decision so future contributors understand why the pattern exists and which evidence would justify changing it.

06. Track adoption

Measure supported-component use, unresolved exceptions, duplicate patterns, and time to implement. Adoption is evidence about usability of the system itself.

In practice, document one concrete example and one counterexample. Ask the team to identify the actor, source of truth, time boundary, and recovery path. Then test the wording or pattern with realistic information rather than ideal placeholder content. This reveals ambiguity, overflow, missing states, and operational promises before they become expensive.

A useful review question is: what would a person reasonably believe after seeing this? Compare that belief with what the service can actually deliver. If they differ, change the language, interface, or operation—not merely the presentation. Record the decision so future contributors understand why the pattern exists and which evidence would justify changing it.

07. Retire deliberately

Deprecation needs a replacement, migration path, and date. Silent removal breaks products; permanent support turns the library into an archive.

In practice, document one concrete example and one counterexample. Ask the team to identify the actor, source of truth, time boundary, and recovery path. Then test the wording or pattern with realistic information rather than ideal placeholder content. This reveals ambiguity, overflow, missing states, and operational promises before they become expensive.

A useful review question is: what would a person reasonably believe after seeing this? Compare that belief with what the service can actually deliver. If they differ, change the language, interface, or operation—not merely the presentation. Record the decision so future contributors understand why the pattern exists and which evidence would justify changing it.

08. Fund maintenance

Governance is ongoing product work. Reserve capacity for issue triage, documentation, releases, training, and research rather than relying on volunteer attention.

In practice, document one concrete example and one counterexample. Ask the team to identify the actor, source of truth, time boundary, and recovery path. Then test the wording or pattern with realistic information rather than ideal placeholder content. This reveals ambiguity, overflow, missing states, and operational promises before they become expensive.

A useful review question is: what would a person reasonably believe after seeing this? Compare that belief with what the service can actually deliver. If they differ, change the language, interface, or operation—not merely the presentation. Record the decision so future contributors understand why the pattern exists and which evidence would justify changing it.

Run a review with real material

A pattern is not ready because it works with a short name, a perfect connection, and a cooperative default path. Review it with long organization names, translated strings, missing values, duplicate records, interrupted sessions, stale status, and information that arrives out of order. Include people using a keyboard, zoom, reduced motion, and assistive technology. The point is not to create an exhaustive laboratory; it is to expose assumptions that the polished example concealed.

During review, ask participants to narrate what they believe has happened and what they expect next. Do not correct their interpretation immediately. Their language shows whether hierarchy, state, and instruction are doing the intended work. Note where they seek reassurance, whether they distinguish an estimate from a commitment, and whether the recovery route is visible before frustration becomes abandonment. Pair observations with operational data such as repeat contacts, manual corrections, completion time, and unresolved cases.

Document the decision, not only the artifact

For every consequential pattern, keep a short decision record: problem, evidence, chosen response, alternatives considered, known risks, owner, and date for review. Link the record to the component or content pattern that implements it. This keeps later contributors from removing an important constraint because it looks like an arbitrary visual choice. It also makes disagreement productive: a proposal can challenge the evidence or supply new evidence instead of restarting a discussion about preference.

Documentation should be close enough to production that teams encounter it while working. A small, current record beside a component is more useful than a comprehensive manual nobody opens. Include one correct example, one misuse, content limits, responsive behavior, accessibility notes, analytics or service measures, and the path for requesting an exception. Review the record whenever the underlying service, policy, data source, or technical behavior changes.

Close the loop after release

Set a review date before launch and decide which signals will trigger an earlier review. Useful signals include repeated support questions, abandoned tasks, manual workarounds, accessibility defects, inconsistent new variants, and a changed source of truth. Numbers need context: a reduction in completion time may be positive, or it may mean people are giving up sooner. Pair quantitative measures with examples from real cases and the judgment of operational staff.

Share findings in the same language as the original objective. State what changed, what remains uncertain, and which team owns the next decision. Preserve a small sample of failures as regression scenarios so future releases are tested against what the organization learned. This turns research and quality review into a durable feedback route rather than a one-time approval ceremony.

Working checklist

Before release, name the user objective, consequential decisions, source of truth, non-default states, owner, update trigger, accessibility checks, and recovery route. Review with the people who operate the service and at least several people who do not share the team’s vocabulary. Publish known limitations beside the claim they qualify.

This note offers general design practice, not legal, clinical, engineering, or policy advice. Requirements vary by service, jurisdiction, technology, and risk. Teams remain responsible for specialist review and for testing their own implementation.