OrcaSlicer/docs/cad_ux_guidelines.md

Orca-CAD — UX guidelines and design charter

Status: proposed, v1. Owner: design working group. Applies to the Design tab — the parametric CAD environment inside OrcaSlicer.

This document is a review instrument, not an essay. Sections 3–9 are written so that a reviewer can hold a pull request against them and get a yes or a no. If a rule here cannot be failed, it is badly written and should be rewritten.

---

1. Why this exists

A CAD tool acquires its interface by accretion. Every feature arrives needing "just one more field", the side panel is the cheapest place to put it, and after forty features the product is FreeCAD: complete, respected, and abandoned by almost everyone who opens it once. That end state is not a failure of any single decision. It is the sum of forty locally reasonable ones taken without a written rule to violate.

So we write the rule down first, and we make additions argue against it.

2. Product thesis

Orca-CAD is a modelling space for people who want a part, inside the tool that prints it.

Three audiences, one interface:

• The fourteen-year-old on a school laptop. Free software, on the machine they already have, with no account, no subscription, no licence and no tutorial. They open the tab because they want a bracket for a bike light, and an hour later it is printing. This is not the charity case at the bottom of the list — it is the reason the project is worth doing. A CAD tool that only the equipped can run is a tool for people who were already going to design something; this one has to be a creative instrument in the hands of someone who did not yet know they could make things. Everything in §6.1 exists to keep that door open, and nothing gets to close it for the convenience of the other two audiences.
• The maker who has an idea and a printer, and who has bounced off FreeCAD. They should be modelling something real within ten minutes of first opening the tab, without a tutorial, without knowing the word "constraint".
• The mechanical designer who needs assemblies, mates, exploded views, variables, and a feature history they can edit six months later. They should not have to leave for SolidWorks the moment the work gets serious.

The order matters. When a decision helps one audience and hurts another, the earlier one wins unless there is a written argument for why not.

The reference for how it feels is Shapr3D: direct, gestural, quiet, almost no chrome, depth revealed by what you touch rather than by what is on screen. The anti-references are Blender (a modal keyboard language you must learn before the first success) and FreeCAD (a workbench-and-dialog architecture where the geometry is a preview of a form you fill in elsewhere).

We are not cloning Shapr3D's feature set. We are adopting its interaction economy: the smallest number of visible controls that still makes an expert fast.

And one thing neither reference has: Orca-CAD lives inside a slicer. The plate, the nozzle, the material and the print constraints are known to the application at design time. Designing for print is not a plugin here, it is the home advantage. Where a rule below trades generality for print-awareness, it trades in favour of print-awareness.

3. The laws

Non-negotiable. A change that breaks one of these does not get merged on the grounds that it was easier, that the alternative is more work, or that another CAD does it that way. Each law carries a test — the question a reviewer asks.

L1 — Geometry first: you point, then you act

Controls live on the geometry: handles, arrows, points, small circles and boxes, with an inline label tab for typed values. Not in a side panel of combos and spin fields.

The canonical gesture: select a face or plane in the viewport, then click the sketch tool. Never: click the sketch tool, then choose a plane from a list. The tool consumes what you pointed at — and, better still, the thing you pointed at offers the tool itself (§4).

Test. Can the operation be performed start to finish without the pointer leaving the viewport, except to press the tool itself? If a control had to be added to a panel to make it work, the design is not finished.

This is the law the others serve. It was stated after two proposals in a row reached for a dropdown, and the failure mode it names is real and recurrent: a fix that "adds a row to the plane combo" is the side-panel pattern wearing a different hat.

L2 — Everything draggable is typable, and everything typable is draggable

Any value produced by direct manipulation (a fillet radius, an extrude depth, a pattern spacing, a plane offset) shows a live label on the geometry, and that label is an editable field. Any value entered numerically has a corresponding handle in the viewport.

Dragging is for finding the answer. Typing is for committing to it. A tool that offers only one of the two is half a tool.

Test. Point at the number the tool produces. Can you drag it? Can you click it and type? Both must be yes.

L3 — Noun then verb, always the same way round

Selection precedes action, without exception, across sketch tools, features, dress-up, booleans and mates. There is no tool in the product that is armed first and asks for its input afterwards.

Test. Does this tool work if the user has already selected the thing they want it applied to? Does it work only that way?

L4 — No modal dialog in the modelling loop

Dialogs belong to document-level actions: open, save, import, export, preferences. Modelling never opens one. A feature that needs three values gets three labels on the geometry, not a form; a feature that needs confirming gets a ghost preview and a confirm/cancel puck in the scene beside it (§4.2) — an object, not a window: the camera still orbits, the values are still editable, nothing is blocked.

Test. Between starting an operation and seeing its result, does a window appear that must be dismissed? If yes, redesign.

L5 — One click, one visible change

Every click either changes what is on screen or tells the user why it did not. A click that opens something invisible, arms an invisible state, or requires a second identical click to have any effect is a defect, not a design.

This law exists because we shipped its violation twice. Sketch-tool family buttons were flyouts whose first click only rendered a pressed state — three separate sessions filed bugs against tools that were working. Solid picking used a click cycle (first click selects the body, second refines to the face), so sketching on a face appeared broken to anyone who clicked a face once, the way every human does.

Test. Perform the gesture exactly once, as a first-time user would. Take a screenshot. Is the state visibly different, and is the difference the one the user intended?

L6 — The default is the answer four times out of five

Every option that has a default must have the common answer as its default, measured against real parts, not against generality. "New body" as the default result of an extrude is wrong: most extrudes join. Radius as the input for a circle is wrong: drawings give diameter.

Test. Take ten real parts. In how many is the default correct? Below eight, change the default or infer it from context.

L7 — Errors are caught before the commit, in the user's words

A self-intersecting profile, a cut that removes no material, a wall thinner than the nozzle: these are reported at the moment they become knowable, on the geometry that is wrong, phrased as what happened and what to do — not as a kernel exception after the fact, and never silently.

Test. Is the failure detectable before the user commits? Then it must be reported before the user commits. Read the message aloud: does it name a thing the user can see and an action they can take?

L8 — The camera is the application's job

Selecting a sketch plane orients the view to it. Committing a feature does not throw the camera away. Zoom-to-fit exists and is one keystroke. The user is never required to fight the view in order to reach the geometry, and orbit is bound to the gesture people actually try.

Test. Count camera manipulations in a representative modelling session. Any camera action the application could have performed for the user is a bug.

L9 — Accessible by construction, not by retrofit

The floor, applied to every new interaction (details in §6.2): full keyboard reach, no meaning carried by colour alone, hit targets that survive a shaky hand and a HiDPI screen, legible labels over an arbitrary 3D background, no gesture that depends on timing.

Test. Drive the whole interaction from the keyboard. Then drive it in greyscale. Both must work.

L10 — Vocabulary from the drawing office

Names come from the language of people who make parts: fillet, chamfer, boss, rib, counterbore, mate, exploded view. Not from the kernel (no "boolean subtract", no "B-rep"), not from invented product-speak. Where the drawing-office word and the beginner's word differ, use the drawing-office word and make the tooltip teach it — an approachable tool that leaves the user unable to talk to a machinist has failed them.

Test. Would a shop-floor engineer recognise this word? Would a first-time user be able to look it up and find a real definition?

L11 — The floor is a school laptop, and nothing is behind a door

The product runs, completely, on a low-end laptop with integrated graphics and a small screen, offline, with no account, no subscription and no feature withheld. No capability in this document is reserved for a paid tier, a cloud service, a plugin, or a machine with a discrete GPU — there is one product and everybody gets all of it.

Test. On the reference low-end machine (§6.1), at 1366×768, with the network cable pulled and no account ever created: does this feature work, and is it usable at an honest frame rate? Any "no" is a defect, not a limitation.

4. Interaction grammar — object-driven

The rules above compose into one sentence the whole product obeys:

Point at geometry → the geometry offers what can be done to it → choose the tool → manipulate handles and type exact values → confirm or cancel.

The selection does not merely feed the tool. The selection determines which tools exist. Pick a planar face and the product shows you the small set of things a planar face can become — sketch on it, extrude it, hole it, shell it, put a datum on it. Pick an edge and that set is fillet, chamfer, and the sketch tools that can use it as a reference. Nothing else is offered, because nothing else is possible.

This is the single largest thing we can do for a first-time user, and it is worth stating as the reason: a beginner's difficulty is not operating a tool, it is not knowing which tools apply to what they are looking at. A palette of sixty icons answers a question they cannot yet ask. A face that offers its own five verbs teaches the model of the product by using it. It also removes an entire class of failure — a tool that silently does nothing because the selection was wrong can no longer be reached.

4.1 The offer, and the one thing that makes it work

The flow, in full:

left-click the geometry to select it → right-click to open the offer → a vertical list, always in the same order, each row an icon, a name and its keyboard shortcut → click.

• Selecting and acting are separate gestures. Left-click only ever selects, so pointing at things is quiet — nothing pops up while you look around. Right-click on the selection opens the offer, at the pointer, over the geometry it acts on.
• Order is fixed and it is the whole point. A verb occupies one permanent row, and that row is the same in every selection where the verb appears. Dress-up is the fourth row on an edge, on a face, on a body, on the day the product ships and two years later. The hand learns the position; the eye stops being needed.
• What does not apply is DISABLED IN PLACE, never removed. This is the single strongest thing the list does, and it is why it beat the radial we drew first: a greyed row still carries its name and the reason it is grey — "Create a sketch, or pick a solid face, first", "Create a solid body to pattern first" — in the words the product already ships. On a first-run document the offer is therefore not a mostly-empty control but a map of what the product does and what you have to do first.
• It is an accelerator, not a toll gate. The toolbar and the single-letter shortcuts keep working exactly as they do now, and pressing a tool directly consumes the same selection (L3). An expert never has to open the offer; a beginner never has to know the toolbar exists. Both routes land in the same place — this is the only way one interface serves §2's three audiences.
• Every row shows its keyboard shortcut, right-aligned so the keys stack into a column the eye learns without trying, beside the icon and the drawing-office word (L10). This is deliberate: the offer is the path by which a user stops needing the offer. You reach for fillet in its row, the row says "F", and one day your hand types F before the menu has finished opening. A menu that teaches its own shortcut is how a beginner becomes the power user who never opens it — the same interface at two speeds, with no "advanced mode" between them (§7).
• A family with more than one applicable verb opens a submenu to the side, in its own fixed order. A family with exactly one shows that verb directly, so the common path is never one click longer than it needs to be.
• It never blocks the view of what it acts on: it opens beside the pick, never over it, with a thin leader back to the point it belongs to, and it dismisses the moment the selection changes.
• The header names what is selected ("Top face · Body 1"), because a user who mis-picked should find that out before choosing a verb, not after.

Opening the offer on every machine

Right-click is the primary gesture and every platform must have a first-class equivalent — this is a reach requirement (L11), not a nicety:

Input	Gesture
Two-button mouse	right-click
Trackpad	two-finger tap (the OS-standard secondary click)
macOS, one-button mouse	long-press, and Ctrl-click, which is the platform convention
Keyboard	the Menu key, or Shift+F10, on the current selection
Touch / pen	long-press

The long-press is an additional route, never the only one — §6.2 forbids press-and-hold as a sole path to a function, and it stays forbidden. Every opening gesture is reachable at least two ways on every platform, and the keyboard route exists everywhere. A long-press must show that it is charging (a growing ring under the finger) so a user who holds too briefly learns why nothing happened rather than concluding the product is broken (L5).

The row-constancy invariant

This is the rule that has to survive every future feature, so it is written as an invariant rather than as advice:

Every verb has exactly one row index in the offer. That index is identical for every selection type in which the verb appears. Verbs that do not apply to the current selection are DISABLED IN PLACE, with their reason — the offer is never compacted, re-sorted or re-ordered. Adding a verb never changes the index of an existing one.

Two consequences the group must accept together with the invariant:

• No adaptive ordering. Ever. Not most-used-first, not recently-used-first, not per-selection frequency. An offer that rearranges itself to be helpful destroys the only thing that made it fast, and it does so precisely for the user who has just started to learn it. (Office 2000's adaptive menus are the textbook case; they were removed.)
• Greyed rows are the price, and they are cheap. A compacted menu is shorter and unlearnable. A constant one is a few rows longer, teaches while it waits, and is memorised in a week.

The map — RATIFIED 2026-07-31

The invariant is not negotiable, and as of 2026-07-31 neither is the assignment: the row order below is ratified. It was argued once; it is not argued again. Changing an index from here on is a breaking change to every user's muscle memory and needs the group, not a pull request (§9 q12).

Eight families, ordered so the sequence itself has a logic: material is created, grows, is taken away, is refined, is repeated, is moved, is referred to, is edited.

Row	Family	On a face	On an edge	On a body	On text/art
1	Create	Sketch on it	—	—	Edit text
2	Add material	Extrude, thicken	—	Combine, thicken	Extrude
3	Remove	Hole, shell	Thread	Shell, cut, split	—
4	Dress-up	Draft	Fillet, chamfer	Fillet, chamfer	—
5	Repeat	Pattern	Pattern along it	Pattern, mirror	Pattern
6	Transform	Align to, mate	—	Move, mate	Move, size
7	Reference	Plane, axis, measure	Axis, measure	Project, measure, mass	—
8	Modify	Delete face, edit	—	Edit, colour, delete	Replace art

A dash means the row is drawn greyed for that selection, with its reason.

The authoritative version of this table is docs/ux/tool_atlas.json, which carries all 52 verbs with their preconditions and their refusal strings, taken from the code rather than from memory. Every state it produces — 20 selection kinds × 2 document states, 40 primary menus and 73 submenus — is rendered by docs/ux/mockups/gen_offer_mockups.py into docs/ux/offer_atlas.html. Read the atlas before proposing a change to the map; the generator refuses to render an address collision, so the map cannot silently rot.

Rejected: the radial ring

The first design put the eight families at eight compass points around the pick. It is recorded here because it is a good idea that loses on evidence, and someone will propose it again:

• an inapplicable slot could only be drawn empty, and an empty slot says nothing — the reason text above has nowhere to live;
• the measured fill was 3.45 of 8 slots, so most of the control was blank most of the time, and on a fresh document only two of eight were live;
• sketch-mode Create needs nine addresses; eight forced two primitives behind a "More" slot, and a ninth position costs the 45° spacing that made the ring worth having;
• long translated names do not fit around a circle, and screen readers and arrow keys need bespoke handling a list gets for free;
• a 380 px disc over the model costs more on a 1366×768 screen than a 324 px list beside it (§6.1).

What it kept — equidistant targets and a future flick gesture — buys little in a product whose experts live on the keyboard by design.

4.2 Confirm and cancel are objects, not gestures

The old rule — click empty space to commit — is withdrawn. It was an invisible gesture with a destructive meaning: nothing on screen said it, and a stray click committed a feature the user was still adjusting. That is exactly what L5 forbids, and it is hostile to the audience §6.1 exists for.

• A pending feature carries a confirm/cancel puck, attached to the geometry it is editing, next to its handles: ✓ commits, ✗ discards. Enter and Escape mirror them for the keyboard (L9). It is drawn where the user's attention already is, and it is the only thing in the viewport that commits.
• Empty space now means "clear the selection" — the safe meaning, and the same meaning everywhere.
• This is not a dialog (L4). It is two objects in the scene, on the geometry, non-modal: the camera still orbits, the tree is still there, the values are still editable while it waits.
• Continuous tools do not ask. Drawing a line, a rectangle, a circle commits each entity as its own gesture completes — a ✓ per line would destroy the inner loop. The puck belongs to features (extrude, fillet, hole, pattern, mate) and to sketch edits that hold a pending state. Enter/Escape end a continuous tool rather than confirming an entity.
• Ambiguity resolves toward keeping work, never toward losing it. Starting another operation while a valid feature is pending commits it rather than discarding it; if it is not valid, the product says why (L7) and keeps it pending. Since undo reaches everything (§6.1), the recoverable direction is always the right default.

4.3 The rest of the grammar

• The status line is one imperative sentence naming what the tool wants next, and it names the target when the target came from a selection ("Circle — click centre, then radius · on the picked face"). It is the authoritative feedback surface for the armed tool; the toolbar is not.
• Hover previews, click commits. A hover shows the ghost of what a click would do wherever this is cheap to compute.
• Selection is persistent and visible until consumed or cleared. A tool that consumes a selection clears it, so the next feature cannot silently inherit it.
• Every gesture is undoable, and the feature tree is editable history, not a log. Re-editing a feature re-enters the same on-geometry interaction that created it — including its offer and its puck.

5. Layout and screen budget

The viewport is the application. Chrome is a tax on it.

• One toolbar, contextual to the mode (model / sketch). Tools are grouped by what they make, not by which subsystem implements them.
• A left rail for the document, not for parameters: feature tree, bodies, variables. It answers "what exists", never "what value should this be".
• No parameter panel. Where one exists today it is technical debt with a scheduled removal (§10).
• Print context is ambient, not a panel: the plate is visible in the design space, and print-domain warnings appear on the geometry that will fail.
• Nothing is added to permanent chrome without removing something, or demonstrating that the addition is used in the majority of sessions.
• The budget is set by the smallest screen we serve, 1366×768 (§6.1) — not by the reviewer's monitor. Chrome that fits a 27-inch display and swallows a laptop's has not fitted, it has just failed somewhere the author cannot see.

6. Accessibility — reach first, then the assistive floor

"Accessible" means two different things and the product owes both. §6.1 is about who can get in at all; §6.2 is about who can operate it once inside. Neither is a phase. Both are merge requirements.

6.1 Reach — the door has to be open

The premise of the whole project: someone with no money, no licence, no account, no fast machine and no teacher can open this and make a real thing. Free software on a school laptop is the only path to a CAD tool that reaches people who were never going to be handed one. If a design decision quietly raises the cost of entry, it has broken the premise, however elegant it is.

• The reference machine. A 5-year-old laptop: dual/quad-core CPU, integrated graphics, 8 GB RAM, 1366×768 screen, no discrete GPU. The Design tab must be usable there, and any interaction that needs more is a design failure to be solved, not a requirement to be documented. The GPU path degrades gracefully to software rendering rather than refusing to start; the viewport stays interactive while the kernel thinks.
• 1366×768 is the layout target, not the stretch case. A form-heavy side panel is not merely inelegant on that screen — it takes the model off it. This is the second, independent argument for the whole of L1 and §5.
• No account, no cloud, no connection. The product works forever with the network unplugged. Nothing is uploaded, no sign-in gates any feature, no telemetry is required to use it. A school network that blocks everything must not be able to block this.
• No tier, no plugin wall, no "pro". Every feature named in this document is in the product everyone downloads. Assemblies and exploded views are not the paid half.
• Files belong to the user, on their disk, in a format that outlives the project: the design travels inside the ordinary project file, and the geometry exports to STEP and mesh formats anyone can open.
• Learnable without instruction. The first solid comes with no documentation, no video and no tutorial mode — from noticing that a face can be clicked. Tooltips teach the vocabulary (L10) at the moment it is needed; nothing is explained in a manual the user will never open.
• Plain language at the entry tier. The Make tier speaks in words a thirteen-year-old reads without stopping. Precision comes with the tier that needs it, and everything is translated, because "accessible" in English only is not accessible.
• Exploration must be free. Undo reaches everything, work is never lost to a wrong click, and no dialog ever asks the user to be sure. A tool that punishes experiments teaches people to stop experimenting, which is the one thing this audience cannot afford to learn.
• The product never blames the user. Failures are stated as what happened and what to do (L7). "Invalid input" is not an acceptable sentence anywhere.

6.2 Assistive floor

• Keyboard: every operation reachable and completable without a pointer. Single-letter shortcuts for sketch tools, shown in the offer itself (§4.1) as well as in the tooltip. The offer opens from the keyboard (Menu key or Shift+F10) and walks by arrow key and by type-ahead, so the row map works for someone who never touches the pointer. A visible focus state on every focusable element. No shortcut that only works while the pointer happens to be over the canvas.
• Colour: never the sole carrier of meaning. Selection is colour and outline; an error is colour and an icon and text. Verify in greyscale.
• Contrast: labels over the 3D viewport get a scrim or halo so 4.5:1 holds against any background the model can produce, including a white body under a white plate.
• Targets: handles and grips no smaller than 32 px at 100 % scale, scaling with the OS factor; the grab tolerance is larger than the drawn glyph.
• Timing: no double-click-to-mean-something-else, no press-and-hold as the only route to a function, no cycle that depends on repeated clicks (see L5). The long-press that opens the offer on a one-button Mac and on touch (§4.1) is explicitly an additional route — Ctrl-click, two-finger tap and the keyboard all reach the same place — and it shows its own progress while charging, so it never fails silently.
• Motion: animation is functional (showing where a thing went), never decorative, and it respects the reduced-motion preference.
• Text: no fixed-width assumptions; the UI holds together in German and in Chinese, at 125 % and 200 % scale. Every string routed through the normal translation path.

7. Depth without clutter — the three tiers

Power for experts is delivered by progressive disclosure of tools, never by relocation of tools. A tool that appears in a later tier is in the same place it will always be; it is simply not shown yet.

Tier	Who	What appears
Make	first hour	Sketch, extrude, revolve, hole, fillet/chamfer, move, commit to plate
Model	competent user	Patterns, shell, draft, sweep/loft, booleans, reference geometry, variables, import/export
Mechanism	mechanical designer	Assemblies and mates, exploded views, interference detection, surfaces, feature-level editing of imported solids

Rules that keep this honest:

1. Tiers are non-modal. No mode switch, no workbench selector, no "advanced mode" toggle that changes the meaning of anything. The tier only governs what is offered.
2. A tier reveals itself by use. Using a body reveals boolean tools; adding a second body reveals assembly tools. The product notices what you are doing.
3. Nothing moves when a tier appears. A user who learned where fillet lives finds it in the same place forever.
4. An expert tool obeys the same grammar as a beginner tool. Mates are picked in 3D like everything else, not configured in a table.
5. Exploded views are a view state, not a document mode — reversible, draggable along mate axes, and never a separate file.

8. Designing for print — the home advantage

Design-time knowledge the application already has, and must use:

• The plate is present in the design space, at the real size, with the real origin. Committing a body to the plate is one action and preserves placement.
• Print-domain checks run on the model, on the geometry, before slicing: walls thinner than the nozzle, unsupported overhangs beyond the material's angle, features smaller than the layer height, a part that does not fit the build volume.
• These are warnings on the geometry, never a report. The thin wall glows; the tooltip says how thin and what the nozzle is.
• Material and machine context is inherited from the active slicer profile, not re-entered in the Design tab.
• The round trip is preserved: editing a design after slicing returns to the feature history, not to a mesh.

9. The review gate

Every pull request that touches the Design tab UI answers these, in the PR body. A "no" that is not accompanied by an argument is a request for changes.

1. Which law (L1–L11) does the change most directly serve?
2. Can the whole operation be completed without the pointer leaving the viewport? If not, why is this the exception? And: does the relevant selection offer this tool (§4.1), or must the user already know it exists?
3. Are the values draggable and typable?
4. Screenshot of the state after exactly one click of the new gesture, performed as a first-time user.
5. Keyboard-only walkthrough: does it complete?
6. Greyscale screenshot: is every state still distinguishable?
7. What was removed? (Net additions to permanent chrome require an argument.)
8. Which tier does it belong to, and does it appear without moving anything else?
9. What does it do when the geometry is invalid, and is that reported before the commit?
10. Interaction cost: actions required for the canonical task it addresses, before and after.
11. Reach (L11): screenshot at 1366×768 with the panel open — is the model still on screen? Does it run on integrated graphics? Does it need the network, an account, or a file the user cannot keep?
12. If the change adds or moves a verb in the offer: which row, and is it that verb's row in every selection where it appears? Did any existing verb's index change? (If yes, this is not a UI change, it is a breaking change to every user's muscle memory, and it needs the group — see §4.1.) Was docs/ux/tool_atlas.json updated and the atlas regenerated?
13. If the change adds a pointer gesture: what is its keyboard equivalent, and what does a one-button Mac, a trackpad and a touch screen do (§4.1)?

10. Where we stand today — honest inventory

Complying with the laws already:

• Sketch inline editors — draw an entity and its dimension tab opens on the geometry; Tab walks Length → Width → Angle.
• Fillet/chamfer draggable radius arrow with an editable value label.
• Extrude depth arrow; move-body three-axis arrows.
• Datum-plane resize handles and offset arrow; ghost reference planes picked in 3D.
• Imported-art place/size gizmo.
• Sketch plane taken from the picked face, with the target named in the status line, and the sketch-plane dropdown deleted outright.

Violating them, with removal scheduled:

• Every tool card is a two-column form of combos and spin fields in the left panel. This is the single largest debt in the product and the reason this document exists. Tracked as an epic; each card is replaced by its on-geometry equivalent, not improved in place. It fails L1 and it fails L11 twice over — on a 1366×768 screen the cards leave the model a strip.
• Seven remaining plane pickers still populate a combo instead of consuming a viewport selection.
• Pattern has no on-geometry spacing arrow or count badge.
• Hole is positioned by X/Y fields rather than by a point on a face.
• Booleans and cuts pick their operands from lists rather than in 3D.
• Fillet/chamfer edge selection still requires the click cycle L5 forbids.
• Selecting geometry offers nothing. There is no contextual offer (§4.1): the user faces the full toolbar whatever they have picked, and finds out that a tool did not apply by it doing nothing. This is the largest single item of new work the charter asks for. The map and every state of it are already drawn (docs/ux/offer_atlas.html); what the group owes itself before the code is ratifying the row order, since every verb built before that lands has to be addressed afterwards anyway.
• Committing is an invisible click in empty space rather than the confirm/cancel puck of §4.2 — the exact gesture that rule withdraws.

Nothing on the violating list is defended. The only open question for each is what its on-geometry replacement should be.

11. How the group works

Roles. Product/UX lead (owns this document and casts the tie-break vote on interaction questions); kernel maintainer; GUI maintainer; a print-domain reviewer; a mechanical-design reviewer who uses the product on real work; an accessibility reviewer covering both senses of §6 — reach and assistive — who owns the reference machine and actually runs on it. One person may hold more than one role; the UX lead and the mechanical-design reviewer should not be the same person, and nobody reviews reach from a workstation.

The absent audience needs a seat. The fourteen-year-old is not in the room and cannot file an issue. Someone in the group is accountable for B5 and B6, and the group watches real first-timers use the product on the reference machine at least once a quarter — school, makerspace, or a friend's kid. Everything else in this document can be argued from principle; approachability can only be observed.

Cadence. A short weekly review of open interaction proposals. A monthly pass over the violating inventory in §10 — anything that has not moved in two months is either scheduled or explicitly accepted as permanent, with a reason written into this document.

How a change moves.

1. Problem — a described user difficulty, ideally with an interaction-cost measurement, never a solution in disguise.
2. Sketch — one or two on-geometry interaction proposals, drawn or described as a gesture sequence. Reviewed against §3 before any code.
3. Prototype — built behind whatever the smallest safe path is, driven end to end on a real display, and screenshotted at each state.
4. Gate — §9 answered in the PR.
5. Merge, then update §10.

Decisions are written down. Any resolution that constrains future work is appended to this document as a numbered law or as an accepted exception with its reasoning. A decision that lives only in a call is not a decision.

How disagreements resolve. Against the laws first. If the laws do not decide it, the tie-break is the interaction cost measured on the canonical tasks in §12; if that does not decide it, the UX lead chooses and records why.

12. Canonical tasks — the benchmark

The measure of every UX change is the cost of these five tasks. Each is timed and counted (clicks, keystrokes, camera actions, mode switches) on the headless rig and, periodically, with real users who have not seen the product.

#	Task	What it exercises
B1	Bracket: sketch an L, extrude, two holes, fillet the inside corner, send to plate	The inner loop
B2	Change a hole diameter and the plate thickness, six features deep, and rebuild	Parametric editability
B3	Take an imported STEP, delete a boss, close the face, thicken a wall to nozzle width	Direct editing + print awareness
B4	Two parts, one revolute mate, check interference, produce an exploded view	The Mechanism tier
B5	First-run: from opening the Design tab to a print-ready solid, no documentation	Approachability
B6	B1 again, on the reference machine at 1366×768, offline, on a fresh account-less install	Reach (L11)

Every task is run on the reference machine of §6.1, not on a workstation — a number measured on a fast desktop describes an experience most of our users will never have. B6 repeats the inner loop under the full entry conditions so that reach is a measured quantity and not an intention.

Targets are set once each task has been measured on the current build. B5's target is expressed in minutes-to-first-solid by someone who has never seen a CAD program, and it is the number this project is ultimately judged by.

---

Appendix — anti-patterns we have already paid for

Kept because each cost real time and each is easy to reintroduce.

• The dropdown that grew a row. Fixing "cannot sketch on a face" by adding a "Face of Body 1" entry to a plane combo. It reads as a small fix and it is the side-panel architecture reproducing itself.
• The invisible first click. Flyout buttons and pick cycles whose first click changes nothing meaningful. Filed as bugs three separate times against working code, and made a real bug look fixed when it was not.
• The fix verified through a path the user will never take. A face-sketch fix confirmed by double-clicking to reach face level. Users click once. A fix reachable only by an undiscoverable gesture is indistinguishable from no fix.
• The wrong feedback surface. Measuring an armed tool by the toolbar, which never renders keyboard-armed state. The status line is the surface that answers.
• The silent success. A cut that removed no material, reported as done. Now an error naming the likely cause.