AI makes HMI prototypes look finished. Make them fail instead.

AI makes HMI prototypes look finished. Make them fail instead.

AI makes HMI prototypes look finished. Make them fail instead.

Leon Potgieter, robotics visual systems designer

Leon Potgieter

Leon Potgieter

Robotics Visual System Designer

Robotics Visual System Designer

Robotics Visual System Designer

AI tools can make HMI prototypes look done fast. For robot cells, the useful prototype is wired to a virtual controller and fails on command.

AI tools can make HMI prototypes look done fast. For robot cells, the useful prototype is wired to a virtual controller and fails on command.

Previous/Next Articles

There is a kind of HMI prototype that looks ready to ship and could not survive one minute on a shop floor. Every button works. Every screen transition is smooth. And nothing ever goes wrong, because nothing in the prototype can.

In my view, AI prototyping tools have made this problem bigger, not smaller. They are excellent at the part of a prototype that was already cheap to fake: how it looks. The part that decides whether a robot HMI works, how the interface behaves when the machine is in the wrong state, is still missing unless someone builds it on purpose.

My argument: for robot and cell HMIs, the most valuable prototype in 2026 is not the prettiest one. It is the one that is wired to a simulated controller and can be made to fail on command.

The AI prototype gap

The tools are moving fast. At Config 2026 on 24 June, Figma announced code layers, which let users convert any design layer into an interactive code layer "with a single click or prompt", with early access starting in July. In April, the Thoughtworks Technology Radar (Volume 34) placed Figma Make in its "Trial" ring, noting that it builds on real components and layers from a design system and that Thoughtworks teams use it to create shareable prototypes for rapid user feedback.

That is useful, and worth adopting. A designer can now produce a clickable, on-brand, believable HMI flow very quickly.

But look at what they make cheap. In my experience of reviewing them, a generated prototype has polished visuals and lots of screens. What it rarely has is a real machine state behind it. The robot is always homed. The gripper always closes. The program always loads. The safety system never trips. On an office app, a happy-path prototype hides a few edge cases. On a cell HMI, the edge cases are the job.

Fidelity is not one dial

The most useful way I know to think about this comes from a CHI 2006 paper by Michael McCurdy and colleagues, written from work on NASA mission planning tools. "Breaking the Fidelity Barrier" argues that "high fidelity" and "low fidelity" are too blunt. They identify five dimensions along which a prototype can be characterised:

  • Level of visual refinement

  • Breadth of functionality

  • Depth of functionality

  • Richness of interactivity

  • Richness of data model

Their point was that a prototype can be high on some dimensions and deliberately low on others. They built such a "mixed-fidelity" prototype and report that it predicted final user performance well.


Figure 1: chart comparing a typical AI-generated HMI prototype with what a robot HMI test needs across five fidelity dimensions

Figure 1. Five fidelity dimensions from McCurdy et al. (CHI 2006). Ratings are the author's judgement, not measured data.

Apply those five dimensions to the current wave of AI prototypes and the pattern is obvious, at least to me. Visual refinement and breadth go to maximum, almost for free. Depth of functionality, richness of interactivity and richness of data model often stay near zero, because there is no live state for them to come from.

For a robot HMI, those last three are where the risk lives. Depth means the jog dialogue actually changes something. Interactivity means the screen responds with the timing and latency of a real controller. The data model means program states, IO, alarms, and the awkward cases in between, like a paused program after a protective stop.

Polish is not what predicts usability

There is a second, quieter reason to stop chasing visual polish: the evidence suggests you often do not need it.

Jürgen Sauer, Katrin Seibel and Bruno Rüttinger tested this with an industrial product, not an app. In a study published in Applied Ergonomics in 2010, 48 users carried out cleaning tasks with a floor scrubber presented as a paper prototype, a 3D mock-up or the fully operational appliance. Their conclusion: "Reduced fidelity prototypes were generally suitable to predict product usability of the real appliance." They also found that experts reported more usability problems than novices, but those problems were judged less severe. That is worth remembering when your test participants are experienced operators.

As MeasuringU summarises an earlier study by Sauer and Sonderegger (2009), paper and computer prototypes predicted ease-of-use ratings for the real product, but not task time or aesthetic ratings.

Put those together with McCurdy and you get a clear rule. Spend fidelity where the question is. If you want to know whether operators understand a recovery flow, visual polish does little. Real state and real timing do a lot.

Your prototype needs a machine that can say no

The good news: robotics already has the missing piece. Major robot vendors such as ABB and Universal Robots ship simulators or virtual controllers that run robot programs off the real hardware. The opportunity is to point your HMI prototype at them instead of at a fake JSON file.

ABB's developer documentation for its PC SDK describes the virtual controller as "a very convenient choice, especially for testing and debugging", because a real robot controller "is normally not readily at hand" during development. In March 2026, ABB Robotics announced RobotStudio HyperReality, built with NVIDIA Omniverse libraries and planned for release to ABB's 60,000 RobotStudio customers in the second half of 2026. In that announcement ABB says it is "the only robot manufacturer with a virtual controller running the same firmware as the hardware", and says HyperReality will let robots bridge the gap between simulation and reality "with up to 99 percent accuracy". Those are vendor claims, and I would treat them as such until they are tested in the open.

Universal Robots publishes a PolyScope X simulator as a Docker image with a web-based UI, intended for developers building URCaps with its SDK. The robot model can be set from the UR3 up to the UR30.

The design move is simple to describe. Build the prototype so its screens read and write state through a thin adapter. In early tests, the adapter talks to a scripted mock. Later, it talks to a virtual controller. The prototype's visuals can come from Figma Make, from code, or from anything else. What matters is that the state behind them is real enough to surprise you.

Figma Make can already reach outside itself: its backend option provides "secret storage, compute, and a Postgres database", and lets you add API keys "that can be used to query external servers". Whether a given simulator exposes an interface your prototype can reach, and whether your IT team will allow it, is a project-specific question. Check before you promise anyone a live demo.


Figure 2: architecture diagram of an HMI prototype connected through an adapter to a virtual controller, with a fault injection panel operated by a test moderator

Figure 2. A failable prototype rig: AI or hand-built UI, a state adapter, a virtual controller, and a moderator-operated fault panel. Framework by the author; simulator limitations from the Universal Robots offline simulator page.

Simulators lie too, so inject the faults yourself

Here is the catch that makes this a design problem and not only an engineering one. Simulators often leave out exactly the failures operators care about.

Universal Robots is refreshingly direct about this on its offline simulator download page for Linux. It says the simulator lets you "create and run programs on a simulated robot, with some limitations". The most important, in UR's words, is that "it is not possible to simulate digital/analogue input to the robot". The same page lists that the emergency stop cannot be used, collisions with self or surroundings do not work, and force mode will not work. ABB's own SDK documentation warns that with the virtual controller, "potential problems may be hard to detect until you test the application using a real robot system."

So a prototype connected to a simulator will still be too polite unless you add the faults it cannot produce. I like a small moderator panel, invisible to the participant, with buttons for the events that matter in your cell:

  • Emergency stop pressed and released

  • Protective stop during a move

  • Gripper or vacuum fails to confirm

  • Part missing at the pick position

  • Safety light curtain or door interlock open

  • Network connection to the controller lost for ten seconds

The moderator fires these during tasks, the HMI has to react, and you watch what the operator does next. This is an old idea: in a Wizard-of-Oz study, a hidden person plays the part of the system. Here, the hidden person plays the part of the factory.


Figure 3: AI-generated illustration of a designer and an operator testing a tablet prototype at a workbench while a moderator watches a laptop

Figure 3. The person running the fault panel matters as much as the prototype. AI-generated illustration.

The same rule applies to demos

Everything above applies to sales and trade-fair demos too, with one difference: the audience. A polished prototype shown to a customer reads as a promise. If the demo can only show the happy path, buyers will assume the happy path is what they are buying.

My view: an engineer in the audience has more reason to trust a controlled failure than a flawless loop. Show the protective stop, show the recovery screen, show how long it takes to get back to production. That is a demo of the product they will actually live with. It is also much harder to fake with a generated video, which is exactly why it carries weight.

A practical checklist: build a failable prototype

Use this before your next HMI test or customer demo:

  1. Write the question first. What decision should this prototype inform? Pick the fidelity dimensions that answer it and keep the rest low on purpose.

  2. Separate visuals from state. Put a thin adapter between screens and machine state, so the same UI can run against a mock, a virtual controller, or later a real cell.

  3. List the five worst moments. With a service engineer, name the five states operators hate most in your cell. Every prototype test must include at least two of them.

  4. Know your simulator's blind spots. Read the limitations page of your virtual controller. Anything it cannot simulate, such as IO, emergency stop or collisions, goes on the fault panel.

  5. Give the moderator a fault panel. Keep it out of the participant's view. Log every fault fired with a timestamp so you can match it to the session recording.

  6. Test with experienced operators. Expect them to find more problems, though those may be less severe. Weigh severity with your own safety and service data.

  7. Label what is real. In any demo, say which parts run on a real or virtual controller and which are mocked. Credibility lost here is hard to win back.

Conclusion: polish is cheap now, so stop paying for it

For years, a beautiful prototype signalled effort and therefore seriousness. In my view, AI is ending that. Visual polish can now cost an afternoon, and more and more people in the room know it.

What still costs effort, and therefore still signals seriousness, is a prototype with a real state model behind it and a person ready to break it. Wire your next HMI prototype to a virtual controller, inject the faults the simulator cannot, and test what the operator does in the worst minute of their shift. If the prototype never fails, it has not been tested yet.

Sources

Previous/Next Articles

more aloud

more aloud

Leon Potgieter

Robotics Visual system Designer

Let AI read your operator interviews. Never let it be the operator.
In 2026, LLMs matched human analysts at coding interview data and still failed at inventing it. That split should decide where AI sits in HMI research.

Leon Potgieter

Robotics Visual system Designer

Let AI read your operator interviews. Never let it be the operator.

In 2026, LLMs matched human analysts at coding interview data and still failed at inventing it. That split should decide where AI sits in HMI research.

Leon Potgieter

Robotics Visual System Designer

AI Did Not Make Palletisers Smarter. It Moved the Configuration Problem Elsewhere.
Palletising is the most automated end-of-line task and the one where AI claims drift furthest from what ships. What actually changed, and who now has to decide.

Leon Potgieter

Robotics Visual System Designer

AI Did Not Make Palletisers Smarter. It Moved the Configuration Problem Elsewhere.

Palletising is the most automated end-of-line task and the one where AI claims drift furthest from what ships. What actually changed, and who now has to decide.

Leon Potgieter

Robotics Visual System Designer

The AI Tooling I Actually Use for HMI Visuals, and the Line I Do Not Cross
A working account of the generative tooling in my HMI pipeline: what it does for cell renders, motion and variants, and what it must never be allowed near.

Leon Potgieter

Robotics Visual System Designer

The AI Tooling I Actually Use for HMI Visuals, and the Line I Do Not Cross

A working account of the generative tooling in my HMI pipeline: what it does for cell renders, motion and variants, and what it must never be allowed near.

Leon Potgieter

Robotics Visual System Designer

Your AI robot render may now count as a deepfake under EU law
Since 2 August 2026, a realistic AI image of a real robot can fall under the EU deep fake rules. Here is how to keep robot visuals true.

Leon Potgieter

Robotics Visual System Designer

Your AI robot render may now count as a deepfake under EU law

Since 2 August 2026, a realistic AI image of a real robot can fall under the EU deep fake rules. Here is how to keep robot visuals true.

Leon Potgieter

Robotics Visual System Designer

HMI software updates Cyber Resilience Act
AI ships HMI features faster, the CRA wants security fixes shipped separately, and operators who get burned often stop updating. Design two tracks.

Leon Potgieter

Robotics Visual System Designer

HMI software updates Cyber Resilience Act

AI ships HMI features faster, the CRA wants security fixes shipped separately, and operators who get burned often stop updating. Design two tracks.

Leon Potgieter

Robotics Visual System Designer

The Brand System Should Start at the Panel, Not at the Fair Wall
Most brand work is built for the first ninety seconds, not for five years. The interface faces the hardest constraints, so it should set the rules.

Leon Potgieter

Robotics Visual System Designer

The Brand System Should Start at the Panel, Not at the Fair Wall

Most brand work is built for the first ninety seconds, not for five years. The interface faces the hardest constraints, so it should set the rules.

Leon Potgieter

Robotics Visual System Designer

Perception Does Not Check Its Sources
Gestalt cannot become obsolete because it describes the viewer, not the screen. Which is why it is now dangerous: it will confidently group a guess with a fact.

Leon Potgieter

Robotics Visual System Designer

Perception Does Not Check Its Sources

Gestalt cannot become obsolete because it describes the viewer, not the screen. Which is why it is now dangerous: it will confidently group a guess with a fact.

Leon Potgieter

Robotics Visual System Designer

The HMI Was a Mirror. Now It Has to Be an Argument
For forty years, the industrial HMI represented machine state. AI broke that contract. The screen's job is now accountability, and that is a different design discipline.

Leon Potgieter

Robotics Visual System Designer

The HMI Was a Mirror. Now It Has to Be an Argument

For forty years, the industrial HMI represented machine state. AI broke that contract. The screen's job is now accountability, and that is a different design discipline.

Leon Potgieter

Robotics Visual System Designer

Four months to the Machinery Regulation: what HMI teams must fix
The EU Machinery Regulation applies on 20 January 2027. Several of its requirements end on a screen. Here is what HMI teams should fix now.

Leon Potgieter

Robotics Visual System Designer

Four months to the Machinery Regulation: what HMI teams must fix

The EU Machinery Regulation applies on 20 January 2027. Several of its requirements end on a screen. Here is what HMI teams should fix now.

Leon Potgieter

Robotics Visual Systems Designer

Natural-language robot programming needs a proof screen, not a chat box
Typing "pick the small parts" into a robot is easy. Knowing what the robot understood is the hard part. Design the proof screen first.

Leon Potgieter

Robotics Visual Systems Designer

Natural-language robot programming needs a proof screen, not a chat box

Typing "pick the small parts" into a robot is easy. Knowing what the robot understood is the hard part. Design the proof screen first.

Leon Potgieter

Robotics Visual System Designer

Proof is the new production value in robotics content
AI-generated posts now dominate the LinkedIn feed. In robotics, the content that still earns trust is the kind that proves itself on camera.

Leon Potgieter

Robotics Visual System Designer

Proof is the new production value in robotics content

AI-generated posts now dominate the LinkedIn feed. In robotics, the content that still earns trust is the kind that proves itself on camera.

Leon Potgieter

Robotics Visual System Designer

Robot HMIs need a validation test borrowed from medical devices
Many medical device makers validate critical tasks with real users. Robot HMIs, in my view, rarely do. Here is how to borrow the method.

Leon Potgieter

Robotics Visual System Designer

Robot HMIs need a validation test borrowed from medical devices

Many medical device makers validate critical tasks with real users. Robot HMIs, in my view, rarely do. Here is how to borrow the method.

Leon Potgieter

Robotics Visual System Designer

Slop Is a Decision Failure: Taste, Perception and Why Plausible Is Not Correct
Slop isn't an aesthetic failure; it is output made without a cost function. What taste actually is, why perception is trainable, and where AI still loses.

Leon Potgieter

Robotics Visual System Designer

Slop Is a Decision Failure: Taste, Perception and Why Plausible Is Not Correct

Slop isn't an aesthetic failure; it is output made without a cost function. What taste actually is, why perception is trainable, and where AI still loses.

Leon Potgieter

Robotics Visual System Designer

Show the Runners-Up: UX for Machines That Decide
Automation heuristics are not hard to understand, they are invisible. A working method for exposing a machine's ranked decisions at the right depth in the HMI.

Leon Potgieter

Robotics Visual System Designer

Show the Runners-Up: UX for Machines That Decide

Automation heuristics are not hard to understand, they are invisible. A working method for exposing a machine's ranked decisions at the right depth in the HMI.

Robotics Visual System Designer

Leon/Potgieter

Leon/Potgieter

Robotics Visual Systems Designer; bridging the gap between how automation technology works and how the world understands it.

©2026 Leon Potgieter - All work, all rights.

Offline

Leon Potgieter
Koringberg
Western Cape

South Africa

Leon Potgieter - Koringberg, Western Cape, South Africa