Philippe Palanque
email: palanque@irit.fr

Andy Cockburn
email: andy.cockburn@canterbury.ac.nz

Carl Gutwin
email: gutwin@cs.usask.ca

A Classification of Faults Covering the Human-Computer Interaction Loop

Keywords: Human error, Failures, Human-computer interaction loop

The operator is one of the main sources of vulnerability in command and control systems; for example, 79% of fatal accidents in aviation are attributed to "human error." Following Avizienis et al.'s classification system for faults human error at operation time can be characterized as the operator's failure to deliver services while interacting with the command and control system. However, little previous work attempts to separate out the many different origins of faults that set the operator in an error mode. This paper proposes an extension to the Avizienis et al. taxonomy in order to more fully account for the human operator, making explicit the faults, error states, and failures that cause operators to deviate from correct service delivery. Our new taxonomy improves understanding and identification of faults, and provides systematic insight into ways that human service failures could be avoided or repaired. We present multiple concrete examples, from aviation and other domains, of faults affecting operators and fault-tolerant mechanisms, covering the critical aspects of the operator-side of the Human-Computer Interaction Loop.

Introduction

Command and control systems have many potential sources of faults, one of which is the human operator. Operators are a primary source of vulnerability in complex systems: for example, studies have shown that 66% of hull-loss accidents in commercial jet aircrafts [START_REF]Statistical Summary of Commercial Jet Airplane Accidents[END_REF] and 74% of fatal accidents in general aviation [START_REF] Geske | The Nall Report: General Aviation Accidents in 2015[END_REF] are attributed to human error. However, there is relatively little work on categorizing the different types of operator faults than might contribute to the high frequency of operator errors.

One of the most influential taxonomies of faults was developed by Avizienis and colleagues [START_REF] Avizienis | Basic concepts and taxonomy of dependable and secure computing[END_REF]. It covers some aspects of the human operator and allows for a variety of operator faults, but does not provide a full treatment of the human-computer interaction loop (HCIL). In particular, Avizienis's taxonomy does not address issues such as environmental causes for operator faults (e.g., turbulence that prevents a pilot from pressing a button), the different subsystems in a human (perceptual, cognitive, or motor function) that can cause faults, or the difference between failures within the operator (e.g., not having adequate muscular control to guide a vehicle) and failures that are caused by another person (e.g., someone shining a laser pointer into a pilot's eyes).

Because faults stemming from the operator's interaction with a complex system are common and often critical, it is important to better understand the nature and causes of these faults. In identifying this need, Sheikh Bahaei et al. [START_REF] Sheikh Bahaei | Effect of augmented reality on faults leading to human failures in socio-technical systems[END_REF][START_REF] Sheikh Bahaei | Augmented reality-extended humans: towards a taxonomy of failures -focus on visual technologies[END_REF][START_REF] Sheikh Bahaei | Towards assessing risk of safety-critical socio-technical systems while augmenting reality[END_REF] extended previous fault taxonomies with a focus on addressing the specific issues arising in augmented reality interaction. More precisely, [START_REF] Sheikh Bahaei | Effect of augmented reality on faults leading to human failures in socio-technical systems[END_REF] builds on top of human error taxonomies including Reason [START_REF] Reason | Generic Error-Modeling System (GEMS): a cognitive framework for locating common human error forms[END_REF], Norman [START_REF] Norman | Errors in human performance[END_REF] or Rasmussen [START_REF] Rasmussen | Human errors. A taxonomy for describing human malfunction in industrial installations[END_REF] and provides a human error taxonomy using feature diagrams from [START_REF] Kang | Feature-Oriented Domain Analysis (FODA) Feasibility Study[END_REF]. In this paper, we pursue a more general approach, expanding on Avizienis's influential fault taxonomy to better characterize and explain operator faults, focusing on internal and external events that induce error states inside the operator. This approach contrasts with that of others -in particular, Avizienis's work focused on faults that induce error states inside the system. We build on that taxonomy (widely used in dependable computing) and integrate an interactive systems engineering approach with the goal of improving dependable interactive systems.

We add categories in Avizienis's System boundary dimension to include causes of operator error that are either internal to the operator or external; we add categories to the Phenomenological cause dimension to recognize new sources of faults including environmentally-induced operator faults and faults induced by other people; and we add a new dimension Human capability to separate out faults that occur in the operator's perceptual, cognitive, and motor subsystems. These additions provide 24 types of operator faults, many of which have not been considered in previous work. Our expansion provides designers and researchers with new classes of potential faults that cover common and important real-world phenomena, and that improve understanding of how faults occur in the human-computer interaction loop. By showing where operator faults can arise, our work can improve the design of new interactive systems and lead to better evaluation of existing systems and diagnosis of accidents and incidents. We demonstrate that the classification makes it possible to position previous work in the field of HCI addressing fault tolerance, fault prevention, fault removal and fault forecasting.

The paper first provides an introduction to the human-computer interaction loop and the way operators interact with technological systems. Second, we present our expanded taxonomy of operator faults and describe the main structures and categories, with examples from aviation and other task domains. Third, we describe how existing HCI research fits into our framework, and fourth, we discuss amelioration strategies for the new fault categories, using the general approaches of fault removal, fault tolerance, fault prevention, and fault forecasting.

The Human-Computer Interaction Loop (HCIL)

The research field of Human-Computer Interaction (HCI) aims to build knowledge about humans interacting with computing systems. The field covers methods, techniques, and tools for designing and developing computing systems adapted to their users. Typical properties that are targeted by HCI research are usability [START_REF]ISO 9241-11" Ergonomic requirements for office work with visual display terminals (VDT) -Part 11 Guidance on Usability[END_REF], user experience [8], accessibility [START_REF]W3C Web Accessibility Initiative. Web Content Accessibility Guidelines (WCAG) Overview. Web Accessibility Initiative (WAI)[END_REF], and acceptance [START_REF] Davis | Perceived usefulness, perceived ease of use, and user acceptance of information technology[END_REF]. In order to reach these objectives, HCI promotes iterative user-centered design and development processes [START_REF]Human-Centred Design Processes for Interactive Systems now integrated in ISO 9241 part 210[END_REF] that use variable-fidelity prototyping [START_REF] Beaudouin-Lafon | Prototyping tools and techniques[END_REF] and continuous feedback from real users [START_REF] Gulliksen | Key principles for user-centred systems design[END_REF].

These processes do not necessarily lead to robust computing systems: for example, cellphones are less dependable than fixed lines [START_REF] Gray | Dependability in the Internet Era[END_REF], but users may accept reduced dependability if it is accompanied by significant improvements in user experience. In the area of safety-critical systems, however, dependability cannot be compromised for user experience and usability, as people's lives are at stake; in addition, in some domains such as aviation, certification authorities explicitly require a very high level of dependability (e.g., the certification specification requirements in [START_REF]CS-25 -Amendment 17 -Certification Specifications and Acceptable Means of Compliance for Large Aeroplanes[END_REF]).

These requirements mean that designing interactive systems that are both dependable and usable implies making informed compromises. Making such compromises is not an easy task (as demonstrated in [START_REF] Fayollas | An approach for assessing the impact of dependability on usability: application to interactive cockpits[END_REF]) as it requires blending knowledge from several disciplines like HCI and dependable computing. The following section highlights the principles behind the engineering of interactive systems, providing a holistic view that incorporates the human with the computing system.

The Human-Computer Interaction Loop

Figure 1 presents an architectural view (from left to right) of the operator, the interactive command and control system, and the underlying system (e.g., an aircraft engine). This architecture is a simplified version of MIODMIT (Multiple Input and Output Devices and Multiple Interaction Techniques), a generic architecture for multimodal interactive systems [START_REF] Cronel | MIODMIT: a generic architecture for dynamic multimodal interactive systems[END_REF] described in AADL [START_REF] Feiler | The architecture analysis & design language (AADL): An introduction[END_REF]. Following the attribute dimensions of [START_REF] Avizienis | Basic concepts and taxonomy of dependable and secure computing[END_REF] we highlight (top right of Fig. 1) the hardware and software components, and show how the human operator interacts with them (thick dotted lines). As shown in the figure, interaction mainly takes place though the manipulation of input devices (e.g., keyboard or mouse) and the perception of information from the output devices (e.g., a computer screen or speaker). Another channel usually overlooked is the direct perception by the operator of information produced (usually as a side effect) of the underlying cyber-physical systems (e.g., noise or vibrations from an aircraft engine (represented by the lower dotted line in the figure )).

The top left of the Software section of the diagram corresponds to the interaction technique that uses information from the input devices. Interaction techniques have a tremendous impact on operator performance. Standard interaction techniques encompass complex mechanisms (e.g. modification of the cursor's movement on the screen according to the acceleration of the physical mouse on the desk). This design space is of prime importance and HCI research has explored multiple possibilities for improving performance, such as enlarging the target area for selection on touch screens [START_REF] Olwal | Rubbing the fisheye: precise touch-screen interaction with gestures and fisheye views[END_REF] and providing on-screen widgets to facilitate selection [START_REF] Albinsson | High precision touch screen interaction[END_REF].

The right side of the Software section of the architecture corresponds to what is usually called interactive applications. This is where HCI methods such as task analysis are needed for building usable application that fit the operators' work [START_REF] Diaper | The Handbook of Task Analysis for Human-Computer Interaction[END_REF].

The left side of Fig. 1 represents the operator's view. The drawing is based on work that models the human as an information processor [START_REF] Card | The model human processor: an engineering model of human performance[END_REF], based on previous research in psychology. In that model, the human is presented as a system composed of three interconnected processors. The perceptive system senses information from the environment -primarily the visual, auditory, and tactile systems as these are more common when interacting with computers. The motor system allows operators to act on the real world. Target selection (a key interaction mechanism) has been deeply studied [START_REF] Soukoreff | Towards a standard for pointing device evaluation, perspectives on 27 years of Fitts' law research in HCI[END_REF]; for example, Fitts' Law provides a formula for predicting the time needed for an operator to select a target, based on its size and distance [START_REF] Fitt | The information capacity of the human motor system in controlling the amplitude of movement[END_REF]. The cognitive system is in charge of processing information gathered by the perceptual system, storing that information in memory, analyzing the information and deciding on actions using the motor system. The sequential use of these systems (perceptive, cognitive and motoric) while interacting with computers is called the Human-Computer Interaction Loop (HCIL).

The Operator as a Service

If we consider the operator as a service provider to the interactive system (by manipulation of input devices for selecting commands and entering data) and a service consumer of information presented by means of the output devices, this service might exhibit failures, i.e., that the delivered service deviates from correct service (as introduced in [6], section 3.3.1, p. 18). While that paper [START_REF] Avizienis | Basic concepts and taxonomy of dependable and secure computing[END_REF] was focusing on faults that might trigger service failure on the software and hardware parts of systems, the taxonomy presented in Sect. 3 will identify faults that might trigger failures in the operator him-or herself by exploiting the human information processor decomposition.

A key abstraction in the HCIL is that of the match between the variance in the signal produced by either the user or the system (e.g., the variance in the user's motor movements, or the brightness of the output display) and the tolerance for variance in the receiver of the information (e.g., the size of a target in the interface, or the user's visual acuity). If the variance exceeds the tolerance, the operator might enter an error state. For example, the requirements for correct selection of a button on a touchscreen are that the variance in the movement of the finger is less than the extents of the button: if the button is 2 cm in diameter and the user has a 1 cm variance when aiming for the centre of the button, the button will be selected correctly; if the user has a 3 cm variance in their aiming motion, errors may arise. This variance element is key in the design of user interfaces and interaction techniques. If the button is the size of the entire screen, selection will be faster and the operator will be able to select even in severe turbulence; however, very little information will be presented, thus reducing the effectiveness and efficiency of the application. As described in the next section, various elements of the operator and the external environment can affect both the variance in the signals, and the tolerance for variance, in an operator-system interaction.

Taxonomy of Faults for the HCIL

Our taxonomy of operator faults expands on the framework of Avizienis and colleagues [START_REF] Avizienis | Basic concepts and taxonomy of dependable and secure computing[END_REF]. We use Avizienis as a foundation due to its widespread use and influence on the field. Other taxonomies have been introduced (such as Sheikh Bahaei et al.'s taxonomy of fault taxonomies [START_REF] Sheikh Bahaei | Effect of augmented reality on faults leading to human failures in socio-technical systems[END_REF]) that cover various aspects of operator error lacking in previous frameworks (such as faults that arise from augmented reality interaction [START_REF] Sheikh Bahaei | Effect of augmented reality on faults leading to human failures in socio-technical systems[END_REF]); however, previous work is primarily focused on specific areas rather than general limitations.

We expand the Avizienis framework in four ways. First, we extend the System boundary dimension to recognize that human faults can be induced in the operator from external causes. Second, we add new levels to the Phenomenological cause dimension to distinguish between faults arising 1) from the operator, 2) from another person, and 3) from the natural world (including the system itself). Third, we introduce the Human capability dimension to differentiate faults in the operator's perceptual, cognitive, and motor abilities. Fourth, we add specific fault categories that derive from these dimensions. Figure 2 provides an overview of the taxonomy.

Changes and Additions to the Fault Dimensions

The Avizienis framework provides several dimensions that characterize faults in terms of when, where, and how they arise: at the highest levels, they distinguish between development and operational faults (Phase), faults that are internal or external to the system (System boundary), and faults that are natural or human made (Phenomenological cause). Although this structure allows for a wide range of fault types (including operator and environmental faults), it does not systematically categorize and describe the ways in which operator faults can occur.

In particular, the complex interactions between an operator and a system (i.e., the HCIL) have properties and characteristics that are separate from the operator alone or the system alone, and the HCIL can lead to many different types of faults that have many different underlying causes -some of which involve the fault being "induced" in the operator by outside forces. For example, an aircraft's hard landing may arise from within the operator (e.g., a pilot's early-stage Parkinson's disease that reduces their muscular coordination), from another person (e.g., someone shining a laser pointer into the pilot's eyes from the end of the runway), or from effects of the natural world (e.g., air turbulence that shakes a pilot's arm as they try to press a button on the instrument panel). Although these three faults are very different in terms of implications for design, they would all be placed in the same category in the Avizienis framework (i.e., "Operational/External/Humanmade/Non-malicious/Non-deliberate/Accidental" operator faults). To address this gap, we need to broaden the dimensions that characterize faults. In this paper we focus only on operational faults (leaving aside the development faults), and expand the dimensions of System boundary and Phenomenological cause. We expand the System boundary dimension to add the HCIL as a conceptual location for faults that should be considered separately from Avizienis et al.'s categories of "internal to the system" and "external to the system." We apply the idea of internal/external to divide HCIL-based faults into those that arise from inside the operator (see Fig. 3) and those that arise external to the operator (see Fig. 4). We next identify new levels for the Phenomenological cause dimension that explicitly recognize that when an operator is unable to perform task actions correctly, the cause may be human-made or from the natural world. When the fault is internal, human-made implies that it is within the operator; when external, human-made implies the action of another person. We then create a new dimension -Human capability -to characterize the human processing subsystem where the fault is located (see discussion of the human information processor in the previous section). The HCIL requires three main kinds of human ability (perception, cognition, and motor control) and faults in any of these can lead the operator to reach an error state. Finally, there are several other dimensions that play roles in our characterization of operator faults. We use the Objective (Malicious, Non-malicious), Intent (Deliberate, Non-deliberate), and Persistence (Persistent, Transitory) dimensions in a similar fashion to Avizienis and colleagues; however, the Capability dimension, which classifies faults as accidental or due to incompetence, focusses on the cause of the fault rather than its description. For this reason, we decided to leave it outside of our classification.

Operator Faults Arising Externally (From Outside the Operator)

Operator Faults Induced by the Natural World. This category can only have Nonmalicious and Non-deliberate faults, because the source of these faults is the natural world, which does not have objectives or intents. There are fault types that affect each of the three human capabilities (perception, cognition, motor control), and it is important to note that some types of environmental phenomena may arise from the system itself rather than from weather, sunshine, or terrain (e.g., vibration may come from an aircraft's engines as well as from air turbulence). The main difference between system-based and non-system induced faults is in the operator's ability to control the system to reduce the phenomena (e.g., reduce engine power to reduce vibration); we discuss this further in Sect. 4 below.

Environment-Induced Perceptual Faults are caused by natural-world phenomena that reduce the operator's perception of the system. The primary senses of concern for interactive systems are sight, hearing, and touch. Example faults in this category include bright sunlight that "washes out" a display screen, reducing the operator's ability to see and interpret visual objects; vibration from air turbulence or a rough road that reduces both the operator's visual perception (e.g., tracking a moving object on a vibrating display) and tactile perception (e.g., receiving vibro-tactile alerts); or a noisy environment that reduces the operator's ability to hear alert sounds.

Environment-Induced Cognitive Faults are caused by phenomena that reduce the operator's cognitive capabilities -primarily memory and decision-making. Natural phenomena such as loud noises and bright flashing lights are known to cause problems for cognitive ability by saturating the brain's communication channels [START_REF] Irgens-Hansen | Noise exposure and cognitive performance: a study on personnel on board Royal Norwegian Navy vessels[END_REF]. In addition, environmental conditions such as a low-oxygen atmosphere can have severe effects on cognitive ability, memory [START_REF] Winder | Fuels for memory: the role of oxygen and glucose in memory enhancement[END_REF], and peripheral perception [START_REF] Ando | Reaction time to peripheral visual stimuli during exercise under hypoxia[END_REF]. This demonstrates that environmental faults may alter operator performance on all three capabilities, but dividing these into three is relevant as some faults only alter one capability.

Environment-Induced Motor Faults involve natural phenomena that reduce motor abilities including movement precision, strength, or endurance. For example, air turbulence reduces the accuracy of a pilot's finger movement toward a touchscreen target; if the variance in the pilot's finger movement exceeds the system's tolerance (as determined by the size of the target) then failures in selecting targets can occur [START_REF] Cockburn | Turbulent touch: touchscreen input for cockpit flight displays[END_REF]. Similarly, reduced temperature can affect muscular control in an operator who needs to carry out precise hand movements or complex gestures [START_REF] Goncalves | Tapping task performance on smartphones in cold temperature[END_REF].

Operator Faults Induced by Other People. This category involves another person acting in such a way that the operator's perceptual, cognitive, or motor abilities are compromised. Because the source is another human, these faults can vary in terms of Objective and Intent.

Other-Person-Induced Perceptual Faults are those in which another person's actions compromise the operator's sight, hearing, or touch. Malicious actions include, for example, shining a laser pointer into a pilot's eyes (preventing them from seeing a display [START_REF] Palakkamanil | Effects of malicious ocular laser exposure in commercial airline pilots[END_REF]), or making loud noises when an operator needs to hear an auditory signal. The degree to which the operator's perception is compromised and the tolerance built into the HCIL will determine whether or not a failure can occur.

Non-malicious faults in this category can be either Deliberate or Non-deliberate. Non-deliberate actions are extremely common: these could involve a person inadvertently standing in front of the operator (and thus occluding a display screen) or talking loudly to the operator (and thus preventing them from hearing an auditory signal). Deliberate but non-malicious actions in this category are less frequent, but still possible: for example, a person could stick a post-it note on a display to cover an annoying flashing alert (i.e., deliberately reducing perception of the display) without realizing that the operator will not perceive future alerts.

Other-Person-Induced Cognitive Faults are those in which another person compromises the operator's memory or decision-making ability. A Malicious and Deliberate action here could involve another person interrupting the operator to prevent proper decision-making. Non-malicious and Non-deliberate actions could include another person providing information to the operator at the exact time when the operator is trying to memorize something. Other types are less likely: e.g., it is unlikely that someone would deliberately compromise an operator's cognitive abilities without malice.

Other-Person-Induced Motor Faults are those in which another person reduces the operator's motor control. A Malicious and Deliberate action here could involve another person bumping the operator's arm to prevent them from targeting precisely. Nonmalicious and Non-deliberate actions could include another person placing objects on a desk that get in the operator's way, or a child pulling on a parent's arm while the parent is trying to drive a car. Alternatively, an operator might Deliberately but Non-maliciously block another person's action (by grabbing their arm, for example) if they see that they are about to select an incorrect control (a fault would occur if the blocking results in the triggering of another incorrect control).

Operator Faults Arising Internally (From Inside the Operator)

This category involves faults that are not induced in the operator by external forces, but that arise from the operator him-or herself. These can still be categorized in terms of their effects on the operator's perception, cognition, and motor abilities.

Operator-Made Faults. Operator-made faults are those in which the operators compromise their own perceptual, cognitive, or motor abilities. These faults are most commonly Non-malicious, although rare cases involving malice are possible. Examples of Operator-Made Perceptual Faults include Non-malicious actions that are Deliberate (e.g., an operator not wearing their prescription glasses because of vanity, thereby reducing their visual acuity) or Non-deliberate (e.g., damaged hearing from listening to loud music). Malicious actions are rare (e.g., deliberate self-harm of the operator's eyes or ears).

Examples of Non-malicious Operator-Made Cognitive Faults include Deliberate actions (e.g., an operator skipping system training because of laziness) and Nondeliberate actions (e.g., an operator drinking or using drugs on the job, or an operator forgetting to carry out a training module). Again, malice is rare in this category (e.g., purposefully choosing to skip training or take a drug to impair cognition). Operator-Made Motor Faults can be Non-malicious and Deliberate (e.g., an operator wearing gloves even though they know this reduces their ability to type) or Non-deliberate (e.g., having long fingernails that reduce touch accuracy on touchscreens). Malicious and Deliberate actions (again rare) could involve self-mutilation of the hands or fingers needed to operate a system.

Faults in the Operator Induced by the Natural World. The natural world can also affect the operator's capabilities through natural processes that are internal to the operator. Aging, disease, fatigue, and other elements of the human condition can have substantial effects on perception, cognition, and motor control. As the natural world is the source of these faults, they are all Non-malicious and Non-deliberate. Examples of Natural Perceptual Faults include reduction in color perception due to color-vision deficiency (commonly called color blindness) or reduction in visual acuity because of age-related presbyopia; reduction in auditory capability is commonly caused by agerelated deafness. Examples of Natural Cognitive Faults include well-known cognitive biases (e.g., "loss aversion" [START_REF] Kahneman | Prospect theory: an analysis of decision under risk[END_REF] in which people prefer to avoid losses rather than achieve equivalent gains) as well as age-or disease-related dementia and memory loss. Examples of Natural Motor Faults include reduction in touch accuracy due to conditions such as Parkinson's disease, or reduction in strength due to aging (e.g., the captain of Ethiopian flight ET302 requested the first officer to "Pull with me", applying a force of up to 110 lbs on the control column [49]).

It is important to note that these biases are not separated out in Avizienis et al.'s classification, even though they are of different types (information overload, lack of meaning, need for fast action, and decisions about what to remember), are numerous [START_REF]The cognitive biases codex: 175 cognitive biases[END_REF], and have strong safety implications (e.g., attention tunneling in aviation [START_REF] Wickens | Attentional tunneling and task management in synthetic vision displays[END_REF]). The taxonomy presented above introduces new concepts and classes for the domain of operator faults, and the specific characteristics of many of these categories suggest ways in which the faults can be avoided, ameliorated, or repaired. In this section we consider four common mechanisms for improving dependability -fault removal, fault tolerance, fault prevention, and fault forecasting -and apply them to the taxonomy.

Many of the strategies described in the sections below arise from our basic characterization of interaction between an operator and a system as a communication of information with certain variance and tolerance (Sect. 2.2). Improvements to dependability can therefore focus on either increasing tolerance or reducing variability. On the input side, tolerance could be increased by making touchscreen buttons larger and using a more stable selection action such as a long press instead of a tap; variability could be reduced by training the operator to brace their hand on the display bezel. For output, the operator's visual acuity could be improved with corrective lenses, or the size and contrast of the text in an alert dialog could be increased to improve comprehensibility. While at the core of HCI discipline, systematically identifying design options with respect to the faults they address could lead to more dependable interactive systems.

Fault Prevention

Fault prevention involves preventing the introduction or occurrence of faults. In Avizienis et al., prevention of operational faults is not addressed (even though prevention of development faults is covered in section 5.1, p. 24). Prevention of operational faults (inside the operator) can be done by adapting input devices, output devices, interaction techniques and user interface so that they prevent faults from occurring. On the External side (Fig. 4) this can be done by removing interference from others, from the system, and from natural causes. Some solutions are beyond current technology (e.g. preventing turbulence in aircraft) or may add other problems (e.g., removing the first officer to reduce distraction would cause more problems when workload increases). On the Internal side (see Fig. 3), prevention can be accomplished through training (e.g. informing operators about cognitive biases and techniques for debiasing [START_REF] Carney | Cognitive de-biasing strategies: a faculty development workshop for clinical teachers in emergency medicine[END_REF]) or through human augmentation (e.g. using night-vision goggles, although their use can induce new types of accidents [START_REF] Johnson | The role of night vision equipment in military incidents and accidents[END_REF]). As operator behavior is far from predictable, however, fault prevention techniques might fail and faults then have to be removed.

Fault Removal

Fault removal strategies attempt to reduce the number and severity of faults. The main type of fault removal for the HCIL is "preventive maintenance" which aims to uncover and remove faults before they cause errors (Avizienis, p. 28). However, different strategies will be needed in the different main categories of our taxonomy:

• Internal/Operator-made faults arise from actions taken by the operator, and are therefore best removed through organizational strategies (e.g., better enforcement of training, increased concern for operator mental health, and better understanding of conditions in the workplace that could lead operators to act in an unsafe manner).

• Internal/Natural faults must be removed by addressing the underlying natural cause. For example, faults caused by limits on ability due to aging or disease can be avoided both by treating conditions that are treatable (e.g., providing corrective lenses to operators who need them) and by accommodating reduced ability by increasing system tolerances (e.g., using brighter cockpit displays to accommodate the reduced night vision of an aging pilot population). • External/Human-made faults involve the actions of other people, and so removal strategies are more difficult to prescribe. Regulations that limit access to the operators' workplace can assist with this category (e.g., not allowing the public near where operators are working, and ensuring that people who do have access are aware of the risks of interrupting or disrupting operators). • External/Natural faults involve natural-world phenomena inducing faults in the operator. Removal strategies can focus either on reducing the effects of likely phenomena or on improving the operator's abilities during the phenomena. For example, the effects of turbulence could be mitigated by allowing pilots to fly to smoother air (reducing the phenomenon), or by teaching pilots to brace their hands while reaching for controls [START_REF] Cockburn | Design and evaluation of brace touch for touchscreen input stabilisation[END_REF] or better control their movements during turbulence (improving operator abilities). Similarly, strategies could reduce sunlight or loud noise through filters or through technologies such as noise-cancelling headphones, or could increase the magnitude of the system's visual or auditory signals.

Fault Tolerance

Fault tolerance is the delivery of a correct service despite the occurrence of faults, and has several elements that are relevant to the HCIL, including error detection, recovery, and error handling. First, error detection in a human-computer system will often involve the operator rather than the system -that is, it is often only the operator who can determine that an input was erroneous. The design of an interactive system can assist the operator using well-known HCI strategies such as providing sufficient feedback to the operator to help them detect errors (e.g., mode errors in aircraft automation [START_REF] Sarter | How in the world did we ever get into that mode? Mode error and awareness in supervisory control[END_REF]), or providing "reasonableness checks" on input. Second, HCIL-based recovery and error handling (i.e., mechanisms that eliminate errors from the interactive system state) can be based on the idea that input and output are a kind of communication between the operator and the system that occurs in a noisy channel. Telecommunications theory uses the idea of adding redundancy in order to preserve the signal, and a similar approach can provide fault tolerance in the HCIL. For example, in an aircraft cockpit where turbulence causes touchscreen errors, the humansystem communication channel could add redundancy through command repetition or explicit confirmation. As in telecommunications, however, adding redundancy reduces the throughput of the system, and as a result, operator actions will take longer. Therefore, an important design principle is that the degree of redundancy should be adaptively matched to the amount of "noise" in the channel. In the case of turbulence, sun glare, or ambient sound, this could be accomplished using environmental sensors and models of the effects of these phenomena on the operator. In the context of interactive cockpits, self-checking interactive components have been proposed that migrate checking from the flight crew to a software component -a study of this system showed that dependability increased without degrading operator throughput [START_REF] Tankeu-Choitat | Selfchecking components for dependable interactive cockpits using formal description techniques[END_REF].

Fault Forecasting

Predictive models are another type of fault forecasting that is critical to some of the strategies described above. These models provide a prediction of the likelihood that a physical phenomenon such as noise, sunlight, or turbulence will affect operator actions or perception; these predictions are critical because of the possibility of adapting the system to the magnitude or severity of the current phenomena. In addition, if techniques such as adding redundancy are used (see Sect. 4.2), models can help avoid situations where the system asks for more confirmation or repetition than is required by the environmental conditions. As an example, recruitment procedures of operators aim at detecting operators' capabilities in order to reduce likelihood of failures [START_REF] Carretta | Pilot Candidate Selection Methods (PCSM): sources of validity[END_REF].

Experimental psychology is also an evolving field and previous knowledge can be overturned by new studies. For example, Wason [START_REF] Wason | Reasoning[END_REF] describes a study where a large majority were not able to deduce information correctly (philosophyexperiments.com//wason). A more recent study [START_REF] Griggs | The elusive thematic-materials effect in Wason's selection task[END_REF] showed that the abstract nature of the task was the limiting factor; concrete presentation of the same information removed the difficulty.

Discussion and Conclusion

We analysed our taxonomy in terms of the requirements identified by Hansman [START_REF] Hansman | A taxonomy of network and computer attack methodologies[END_REF]: acceptability, completeness, standard terminology, determinism, mutual exclusiveness, repeatability, and unambiguity. We meet several of these requirements by using wellaccepted foundations (i.e., the Avizienis framework and the standard HCI model of the human information processor); this improves acceptability, facilitates completeness (although further sub-divisions are possible), uses standard terminology that is familiar to researchers, and provides clear classification structures (determinism). We partially meet the requirements of mutual exclusiveness, repeatability, and unambiguity: the divisions in the taxonomy are clearly separated, but because many tasks involve multiple human capabilities, a phenomenon could affect multiple categories (e.g., turbulence can affect both perception and motor action); therefore, users of the taxonomy will need to separately consider effects on different human capabilities. In addition, it is often difficult to ascertain people's internal states (i.e., deliberateness and maliciousness may not be knowable). Finally, the usefulness of the taxonomy is in providing new ways to think about operator faults, which can lead to better analysis of incidents and improved designs. However, usefulness must be further determined as the taxonomy is used by the research and practitioner communities.

Although several taxonomies exist that cover different aspects of operator failures, these have not comprehensively explored the many ways in which operators fail while interacting with an interactive human-computer system. We expanded on Avizienis et al.'s fault taxonomy [START_REF] Avizienis | Basic concepts and taxonomy of dependable and secure computing[END_REF] to better characterize and explain operator faults, focusing on internal and external faults that induce error states inside the operator. Our new taxonomy explicitly recognizes that operators can be induced into error states, and separates out faults in the operator's perceptual, cognitive, and motor subsystems. These additions provided 24 types of operator faults that expand on the coverage of previous taxonomies. The framework highlights the fact that the some research contributions are able to address one type of fault (e.g., stabilizing touch interaction by bracing the hand on the display [START_REF] Palanque | Brace touch: a dependable, turbulence-tolerant, multi-touch interaction technique for interactive cockpits[END_REF]) while triggering another type of fault (e.g., bracing with the hand on the display may cause other faults if the hand occludes the display content).

Our work provides new opportunities for future research. First, we will refine and validate the taxonomy by classifying existing incidents in consultation with domain experts and practitioners. Second, we will develop new adaptive fault-removal techniques for different environmental conditions such as ambient noise, vibration, and glare. Third, we will look more deeply into some of the fault categories by developing formal models of the operator's actions in the HCIL, and will further develop the idea of humansystem interaction as communication in a noisy channel that can be improved through redundancy. Overall, our new taxonomy provides researchers and designers with a broad understanding of how and where operator faults can arise, and can improve the design of new interactive systems in complex environments. Our classification is able to integrate previous work in multiple domains such as medicine, psychology, and HCI, all of which contribute to the dependability of interactive systems.

Fig. 1 .

 1 Fig. 1. Architecture of interactive systems with operator, hardware, & software components.

Fig. 2 .

 2 Fig. 2. Overview of the taxonomy of faults focusing on the HCI Loop.

Fig. 3 .

 3 Fig. 3. Focus of the taxonomy on Internal faults (from inside the operator) with examples.

Fig. 4 .

 4 Fig. 4. Focus of the taxonomy on External faults (from outside the operator) with examples.


the Prophet, in the Idrisside branch), but because of his exemplary conduct, conforming in every way to the Muḥammadan model. In addition, his mission is different from that of the monarchy, which exercises political power, or that of his original Sufi brotherhood, the Qādiriyya Būdshīshiyya, which teaches spiritual progression and realisation: Shaykh Yassine worked towards reform and social justice, which may explain why his teachings have mostly been studied by sociologists or political scientists. 1 Yassine's ideas were not restricted to the field of politics, in which his positions earned him the position of principal opponent of the monarchy. Above all a man of religion, very heavily influenced by or even impregnated with Sufism, he was an important Muslim thinker of the twentieth and twenty-first centuries, author of an important body of work that is much discussed at international conferences. The Qādiriyya Būdshīshiyya Sufi brotherhood and Justice and Spirituality are probably the two largest religious groups in Morocco today.

Shaykh Yassine and the charismatic leader of the Būdshīshiyya, Sīdī Ḥamza (d. 2017) were both taught by the same spiritual master, Sīdī Bel-' Abbās (d. 1972), Sīdī Ḥamza's father. Sīdī Bel-'Abbās's teachings sprang from the Darqāwiyya, a Sufi brotherhood that was very powerful in Morocco and the west of Algeria during the nineteenth century and the first quarter of the twentieth, and whose many branches spread as far as the Near East. 2 Sīdī Ḥamza and Shaykh Yassine both described themselves as continuing a model of Islamic tradition that had become classical from the time of the prominent theologian al-Ghazālī (d. 1111): that of a reviver of religion (mujaddid al-dīn), pre-destined to restore the purity of the faith and renew Islamic Law. They identified with this role on the basis of their Sharifian and spiritual legitimacy. Sīdī Ḥamza did not set himself up in opposition to political power, but built up around his own person a group that claimed to reproduce the spiritual community of the Prophet and his companions. Yassine, on the other hand, was in open conflict with the King; he set himself the mission of the moral reconstruction of the Muslim mind as a preliminary step that would lead to the building of a society defined by Islam; he also founded his own community as a model for this, his jamā'a. 3 His theological and metaphysical ideas are sometimes complex, and his books not accessible to all readers. On the basis of our 1 Belal, Le Cheikh et le Calife; Chekroun, 'Islamisme, messianisme et utopie au Maghreb'; Darif, Jamā'at al-'adl wa l-iḥsān; namūdhajān; El-Ayadi, 'Abdessalam Yassine ou le poids des paradigmes dans le parcours d'un nouveau clerc'; Lauzière, 'Post-islamism and the Religious discourse of 'Abd al-Salam Yasin'; Tozy, Monarchie et islam politique au Maroc; Zeghal, Les islamistes marocains. 2 Chih, 'Shurafā' and Sufis: the Qādiriyya Būdshīshiyya in Contemporary Morocco'. The Darqāwiyya, an offshoot of the Shādhiliyya Sufi path, was founded at the end of the eighteenth century by Mawlāy al-ʿArbī ad-Darqāwī (c. 1737-1823) in Morocco. Le Tourneau, 'Derkāwa'. 3 Yassine, The Muslim Mind on Trial.

1

Religious Revival (tajdīd) and Politics in Contemporary Morocco:

'The Prophetic Path' of Shaykh Abdessalem Yassine (d. 2012) (Rachida Chih -Cnrs/Ehess) Abstract:

Shaykh Abdessalem Yassine (d. 2012) founder of the the so-called 'Islamist' movement Justice and Spirituality (al-'Adl wa-l-Iḥsān) in Morocco claimed for himself the title of 'reviver of religion ' (mujaddid al-dīn), pre-destined to restore the purity of the faith and renew Islamic Law. He identified with this role on the basis of his Sharifian and spiritual legitimacy and set himself the mission of the moral reconstruction of the Muslim mind as a preliminary step that would lead to the building of a society defined by Islam; he also founded his own community as a model for this, his jamā'a. On the basis of the examination of his major work, The Prophetic path (Al-Minhāj al-nabawī), this paper analyses Yassine's conception of prophetic heritage in order to show that his predication followed a religious concept and cultural model of messianic mysticism that has been identifiable in Morocco since the Middle Ages: in the eyes of his followers, the very existence of Al-Minhāj al-nabawī demonstrated and proved that Yassine was the guide (imām) predestined to set in motion a great social transformation that would restore the Islamic community to its original purity by placing it under the direction of a Prophet's Sunna that is re-actualised.

The most popular of the so-called 'Islamist' movements in Morocco, Justice and Spirituality (al-'Adl wa-l-Iḥsān), was not born out of opposition to Sufism, as was the case for most such theological and political movements in the contemporary Muslim world, which have rejected Sufi practices as reprehensible innovations (bid'a). On the contrary, it was inspired by Islamic spirituality and the Sufi concept of imitation of the Prophet (ittibā' alnabī) in the interior lives of believers as in their outward acts. The founder of this movement, Shaykh Abdessalam Yassine (d. 2012), laid claim to the earthly heritage of the Prophet, in competition with both Morocco's monarchy, to which he was openly opposed, and the Sufi brotherhoods from which he sprang and ultimately distanced himself. Unlike the monarchy, Shaykh Yassine does not justify his prophetic legitimacy by means of sharaf, genealogy (although he nevertheless remembered to underline the fact that he was also a descendent of 3 examination of his major work, The Prophetic path (Al-Minhāj al-nabawī), I shall analyse Yassine's conception of prophetic heritage in order to show that his predication followed a religious concept and cultural model of messianic mysticism that has been identifiable in Morocco since the Middle Ages: in the eyes of his followers, the very existence of Al-Minhāj al-nabawī demonstrates and proves that Yassine is the guide (imām) predestined to set in motion a great social transformation that will restore the Islamic community to its original purity by placing it under the direction of a Prophet's Sunna that is re-actualised.

Morocco in the postcolonial era: consolidation for the monarchy and fragmentation in the religious sphere

The growing importance of nationalist reformism during the colonial period (1912-1956) brought with it a concomitant increase in power for the Moroccan monarchy, the sacred aspects of which had been underlined by reformist movements. Nationalist groups campaigned in the press for the colonising powers to show greater respect for the sacred person of the King; in 1933 they instigated the Throne celebration, in which urban Moroccans participated in large numbers. Thus the King became a symbol of national unity. 4 Once Morocco had gained its independence, the monarchy consolidated its authoritarian power: in the 1962 Constitution the King gave himself the title 'Commander of the Faithful' (Amīr almu'minīn); he weakened the religious sphere by fragmenting it and, as early as 1956, began co-opting the leaders of the nationalist movement into the administration of the State to neutralise them. 5 Unlike the republics of Algeria, Tunisia and Turkey, which engaged in a political drive to secularise their societies, Morocco did not see attempts to purge Sufism, but as it emerged from the colonial period the Sufi brotherhoods were nevertheless delegitimised by nationalist reformists; for example, 'Allāl al- Fāsī (d. 1974), who founded the Istiqlāl (Independence) party in 1943, spoke very harshly of the brotherhoods.

At the time of independence, the construction of a national narrative that accused the Sufi brotherhoods of collaboration with the colonial power and presented the Sharifian State as the sole agent of modernisation and of struggle against colonialism meant that the historical role played by Sufis was forgotten. 6 Yet, the Darqāwiyya (to which 'Allāl al-Fāsī belonged) was 4 very active in the anti-colonial struggle in the north of the country, and its offshoot the Kattāniyya was behind one of the first movements for anti-colonial resistance, led by a religious figure with whom Yassine identified, Muḥammad al-Kattānī (1873-1910), who died under torture in the royal gaols. 7 In this unfavourable context the Qādiriyya Būdshīshiyya, whose groundwork had been laid during the colonial period, was founded during the 1960s in the mountains inhabited by the Banī Iznassen Berber tribe in north-western Morocco, near the Algerian border. The Qādirī Būdshīshīs present themselves as a Sufi and saintly linage, that it encompasses, completes and revivifies.12 From a remote and isolated spot in the north of the country, this brotherhood would progressively spread across all of Morocco's educated and urbanised classes. Among its first disciples were two school teachers who were to become high-profile public personalities, Shaykh Yassine and today's Minister of Endowments and Islamic Affairs, Ahmad Tawfiq.

The Islamic Revival in the 1970s and 1980s

The defeat during the 1960s of ideologies with a socialist orientation, and the struggle against leftist parties, prepared the ground for the Islamisation of society across the Muslim world, with the financial support of Saudi Arabia. During the 1970s, Shaykh Yassine left the Būdshīshiyya and established his fame by defying King Ḥasan II in a letter entitled 'Islam or the flood ' (1973). This was an impudent missive, accusing the King of squandering the people's wealth and calling on him to return to the path of God. 13 Yassine was then imprisoned in a psychiatric ward; it was alleged that King Ḥasan II could not conceive that any sane man would challenge his authority so brazenly. Shaykh Yassine was laying the foundations of his movement, which would be registered as an association during the 1980s under the name Justice and Spirituality (this association is tolerated but not recognised).

In 1981 Shaykh Yassine provided his companions with a practical guide to spiritual improvement and socio-political militancy, The Prophetic Path, his most important work (mentioned above). Yassine was in and out of prison, with his original Būdshīshiyya brotherhood under suspicion, and Sīdī Ḥamza under house arrest in his zāwiya in Madāgh.

Meanwhile, the manipulation of public opinion by the monarchy had reached its peak: Ḥasan II organised a vast spectacular call for unity around his sacred person, the Green March of 1975, when thousands of Moroccans from all regions of the Kingdom marched peacefully to recover the Moroccan Sahara from Spanish occupation. An extensive media campaign was organised by the King, using the State monopoly on television and radio (which lasted until the 1980s). This allowed him to capture public opinion and manipulate it by disseminating notions of of solidarity with an imaginary community that was protected and perpetuated by its King. The monarch reproduced the ritual of allegiance (bay'a) to his person on the scale of an entire country, thanks to new communication technologies that allowed him to erase 6 distance and establish a close and direct relationship with his unique and united people.

According to research undertaken by the anthropologist Emilio Spadola among participants in the march, they often felt that to reply to the King's call was to demonstrate their belonging in the nation, but also to give to the King in the hope of receiving a gift in return; these hopes were never realised. 14 From the beginning of the 1980s the two competing religious groups -the Qādiriyya Būdshīshiyya and Justice and Spirituality -had begun to implant themselves in the new departments of Islamic Studies that had been created in State universities from 1979 to compete with the traditional institutions of religious learning (the Qarawiyyine and Dār al-Ḥadīth al-Ḥasaniyya). 15 The political relaxation of the 1990s, and the introduction of new forms of communications media that remained outside of State control, also changed the situation in the religious sphere, allowing for new calls to Islam to appear and compete with the call of the Sharifian State. Across Morocco there followed an unprecedented expansion for the movements of Shaykh Yassine and of Sidi Ḥamza, who, no longer under house arrest, was able to travel and to meet freely with his disciples. The Būdshīshiyya became embedded among the Moroccan middle and upper middle classes, and, thanks to networks of Moroccan emigrants, expanded to Europe. The house arrest of Shaykh Yassine came to an end with the coronation of Mohammed VI in 1999, and he, too, could at last travel around the country. His Justice and Spirituality movement also spread transnationally, through Moroccan emigration to Europe.

Genealogy and Politics

Competition around Sharifian genealogy is part of a long politico-religious tradition in Morocco. However, claiming authority or political legitimacy because of descent from the Prophet is a modern phenomenon: during the Medieval Period only personal charisma and virtues were emphasised. Genealogical literature began to flourish from the fifteenth century, with Ibn Sakkāk's celebrated work Nuṣḥ mulūk al-Islām (Advice to Muslim Kings), which reminds kings of their duties towards ashrāf: the Moroccan historian Halima Ferhat describes this sort of text as making up a 'literature of combat', influenced by a militant and often political outlook. 16 The accession to power of the Saadian dynasty (1549-1659), which 7 instituted a compromise between political and religious authority, was a turning point that historian M. Garcia Arenal calls 'a joining of Sufism with Sharifism' in the symbolic elaboration of power in Morocco. 17 The Saadīs constantly evoke concepts of sharīf and of jihād to define their movement, to explain its success and to establish its legitimacy. 18 The rise of the Saadīs was closely linked with that of jazulism, the most important mystical movement in Morocco in the fifteenth and sixteenth centuries. 19 The writings of Muhammad al-Jazūlī (d. 1465), with their eschatological bent based on the notion of sa'da (the promise of happiness here below and in the after-life), provided the ideological foundation for the legitimisation of the Saadīs, and were exploited to this end by the sultans. The expression aqtab al-dawla (the poles of the State) arose in milieux linked to Jazūlī, meaning that on earth the Sufi acts for the Prophet and, in His absence, becomes His legitimate substitute (badil).

Qutbiyya signifies concrete power over the world, along with the feeling among men that it is because of the permanent presence and intercession of the saints that the world continues to exist: saints are effectively guarantors of stability in a society that is prey to constant and often violent political change. It was during this period that the great zāwiyas that would mark the history of Morocco were born: the zāwiya of Ilīgh, the zāwiya Nāsiriyya, the zāwiya Sharqāwiyya and the Wazzāniyya. 20 Almost all of them were in some respects messianic, and they also refered constantly to the closely-related concept of tajdīd, renewal of Islam. What's more, this renewal was never distinct from material -or even political -claims, often made at times of crisis during which the stability or integrity of the country was threatened from within or without. 21 During the same period the concept of a Muhammadan Path (tarīqa muhammadiyya) emerges among Sufi and non-Sufi scholars, defined either as a return to the model of the Prophet or as a direct attachment to His person as a way of reaching sainthood. Vincent Cornell attributes to Jazūlī and his disciples a decisive role both in the conceptualisation of the Muhammadan Path and in its propagation to the rest of the Muslim world via the scholarly and Sufi milieus of Medina, thanks to the new Ottoman context. 22 The Muhammadan Path was not an organised Sufi path, but a way of accessing religious knowledge that was specific to Sufis who were initiated by the Prophet through assiduous prayer on Him (tasliya) 'until it invades the consciousness to the extent that when he hears his 17 Garcia-Arenal, 'La conjonction du soufisme et du sharifisme'. 18 Garcia-Arenal, 'Mahdī, Murabīt, Sharīf', 81. 19 Cornell, Realm of the Saint. 20 Laroui, Les Origines Sociales et Culturelles du Nationalisme Marocain, 137. 21 Hammoudi, 'Aspects de la mobilisation populaire à la campagne', 47. 22 Chih,Sufism in Ottoman Egypt,chap. 3. name he trembles, his heart is overwhelmed beholding him, and the visible appearance of the Prophet appears present to the eyes of inner vision (basīra) during his sleep (manāman) or when he is awake (yaqazatan). He can then ask him whatever he wants.' 23 During the seventeenth century there was a mention in the Kitāb al-Ibrīz, which relates the words of the Moroccan Sufi 'Abd al-'Aziz al-Dabbāgh (d. 1720), of the omniscience and infallibility (ma'sūm) of the believer who has conformed in his outward behaviour and his inner life (ma'nawī) to the Prophetic model; this places him above theologians and jurists for his knowledge of God and for his continuous interpretation of the law through fath, spiritual opening. 24 The Sufis' claim to a prophetic inheritance through the Muḥammadan path worked to legitimise the (probably unprecedented) authority they exercised in society.. The concept itself was not new, but its amplification in the Modern period corresponds to a new geographical expansion of Sufism, and to what was probably the apogee of its implantation in society, encouraged as it was by sultans and emperors. 25 The Sufi masters who were at the The overlap between Sharifism, religious renewal and Sufism has left an indelible mark on the political and religious history of Morocco, where the resulting outlook is very evident even to the present day. The centre of gravity of the triangle formed by these three religious poles (Monarchy -Būdshīshīyya -Jamāʿat al-'Adl wa-l-iḥsān) is the issue of the Prophet's earthly heritage (which means that of the imamat), and the legitimate leadership of 23 Sanûsî, al-Salsabîl al-mu'în, 7. 24 Radtke, 'Ibriziana', 113-158. 25 Chih, 'The Apogee and Consolidation of Sufi Teachings and Organizational Forms (1453-1683)' 26 Meftah, 'L'initiation dans la Shâdhiliyya-Darqâwiyya', the community. Sīdī Ḥamza claimed to be the holder of the Prophet's secret, or sirr, which is the inner knowledge accessible only to God's elect: the decline of Islam with the passage of time (fasād al-zamān) is interpreted by the Būdshīshīs as a decline of the spiritual influx of God's Messenger; this influx had permeated his community while he was alive and was preserved after his death only by a small circle of pious men elected by God, to whom fell the task of reviving this legacy (amāna). 27 In his struggle against the Salafis since the attacks of May 2013, 'Commander of the faithful' King Muḥammad VI has supported the Sufi brotherhoods and in particular the Būdshīshiyya, several of whose most eminent members are in the government, including Ahmad Tawfiq (mentioned above), and his cabinet head Ahmad Qustās. The aim of the Būdshīshiyya is to support the monarchy's claim on the sacred realm while strengthening and legitimising its own. Yassine has his own concept of prophetic heritage (wirātha), refusing the king the title of 'Commander of the faithful' and rejecting his claim to religious legitimacy, believing that the king has left the path of God. Yassine ascribes to himself the role of renewer and admonisher, as the Prophet was described in the Quranic verse: 'Indeed, We have sent you with the truth as a bringer of good tidings and a warner' (Quran 35:24). I will not present the life and career of Shaykh Yassine here, because Mohamed Tozy and, later, Malika Zeghal have between them created a fine and carefully-researched portrait of the man, touching notably on the moments that contributed to his charisma, his role as censor of the monarchy, and the historical models among Moroccan insurgent Sufis with whom the shaykh identified, such as al-Yūsī (d. 1691) and Muḥammad al- Kattānī (d. 1910). 28 Yassine's social activism and political opposition to the monarchy have also been the object of numerous studies among Moroccan and western scholars, in whose works may be found descriptions of the organisation of the jamā'a and of its activities, often similar to those of the Būdshīshiyya to which Yassine initially belonged: the visit (ziyāra) to the guide (murshid) in his house in Salé corresponds to the ziyāra to Sīdī Ḥamza in Madāgh; the structure of the jamā'a is based on companionship (ṣuḥba), and the ritual is centred on the permanent mention of God's Names (dhikr) and the recitation of daily prayers and litanies. As in the Būdshīshiyya, lessons (majālis), camps and spiritual retreats are organised. Yassine's book,

The Prophetic path, is taught to the members of the jamā'a as a religious discipline (al-fikr al-minhājī), like the Quran, the hadīth or the fiqh. 29 27 Qustās, Nibrās al-murīd, 36-38; Chih, 'Shurafā' and Sufis. 28 who inspired and influenced Shaykh Yassine; the founder of the Muslim Brotherhood spoke of an Islamic method (al-minhāj al-islāmī) containing all aspects of everyday life -spiritual, but also social and political. We believe that the use of this term by Yassine and also by the Būdshīshiyya Sufi brotherhood (whose teaching is described as a path of education, minhāj tarbiya) reflects the impregnation of Sufism with the influence of a literalist and fundamentalist reformist Islam, which has obliged Sufism to adapt its vocabulary to match the evolution of contemporary Muslim thought. Although Yassine's al-Minhāj al-nabawī has ambitions to be a practical work (hence the translation by some of minhāj as 'method'), it nevertheless contains a great deal of theory, which is expressed in a style and language accessible only to the educated élite -the élite addressed by Yassine in the hope that they might make up his jamā'a, his group, which, following the example of the Prophet and his companions, would support Yassine in his mission and propagate his message. During the same period, the master of the Būdshīshiyya, Sīdī Ḥamza, also aimed his predication at the educated élite of the nation, succeeding, with the support of his many close disciples who were teachers or university students, in recruiting numerous followers among the Moroccan bourgeoisie. 34 The Moroccan political scientist Mohamed Tozy describes al-Minhāj as an original synthesis of Sufi teachings with the political and religious ideas of the Egyptians Ḥasan al- Bannā and Sayyid Qutb (d. 1966), the former being the founder and the latter a prominent theorist of the Muslim Brotherhood. The Prophetic Path began to appear in the journal al- Jamā'a (16 issues between 1979-1983), during a period marked by two events that shook the Muslim world: the Iranian revolution in 1978-79 and the 1981 assassination of the President of Egypt, Anwar al-Sadat, by a member of the radical Egyptian Islamic Jihād. As a result, its first chapters are marked by a militant, anti-imperialist and anti-Zionist tone, and by reminders of the struggle to be undertaken against all the enemies of Islam: Yassine speaks here of invasion (ghazw), of a difficult and obstacle-strewn path (ihtiqām al-'aqaba), of uprising (qawma). In the second part of the book, he explains his concept of a prophetic path or method that is entirely contained within the Prophet's saying (hadīth) on faith (īmān): 'Īmān consists of seventy branches, the best of which is the declaration that there is no god but God and the least of which is the removal of harmful objects from the road, and modesty is a branch of īmān.' However, of these seventy branches, only three are cited, which has led religious scholars to seek the others in the vast hadīth corpus; the best-known work on 34 Chih,'Sufism,Education and Politics in Contemporary Morocco'. this subject is by al-Bayhaqī (d. 1066), Shu'ab al-imān. Yassine rearranged the seventy branches into ten principles (al-khisal al-'ashar wa shu'ab al-īmān) and from these he derived his model of education (tarbiya) to revive the faith. The first three of these ten principles are the most important, and adherence to them determines the success of the method: 1. Companionship and community (al-suḥba wa-l-jamā'a); 2. Remembrance of God (dhikr); 3. Sincerity of faith (sidq) towards one's master and brothers (sincerity of faith has other aspects, of course, among which are faith in God and His mystery, belief in the Last Judgement, and belief in pious visions). The other principles are: 4. Offering and sacrifice (badhl), giving alms, charity towards the poor and orphans; 5. Knowledge ('ilm); 6. Good works ('amal); 7. Religious devotion (al-samt al-hasan); 8. Moderation and discipline (altu'ada, rejecting violence as the means of achieving any legitimate claims); 9. Economy (aliqtiṣād); 10. Dominating the ego (al-jihād). This ordering means that it is after the acquisition of good behaviour and deeds and the transformation of one's character that one may then attempt to achieve the continuous striving involved in dominating one's ego. Thus an Islamic order cannot be reached unless the individual is educated and trained according to a model, minhāj, into which all branches of faith are integrated. 35

A handbook of ethics

The Prophetic way is essentially a handbook of religious ethics, profoundly inspired by Sufism. Even the name of the movement founded by Yassine, Jamāʿat al-'Adl wa-l-iḥsān, expresses the two distinct registers of his teaching and the intrinsic link that he establishes between spiritual and moral perfection and social justice. This approach is not particularly original, especially in the history of Morocco where religious exhortation and social critique featured side by side in the lives of many of the saints who founded Sufi lineages. Yassine situates himself in the domain of tarbiya, education, which is not received from books but acquired through ādāb (refinement, good manners, morals), although he does not employ this Sufi term. His approach can be summed up as demanding proper behaviour towards God and His Prophet, oneself, and others. The word iḥsān, built on the Arabic verb aḥsana, means to act with benevolence, kindness and charity towards others. These qualities are engendered through the refinement and embellishment of one's moral character (ḥusn al-khuluq) via the battle with one's ego (nafs). An untamed nafs will pull a man towards evil inclinations and 113. actions (sū' al-khuluq). The believer who acts and does good for God's sake alone and not in the expectation of earthly approbation that would flatter his pride, or even in hope of a reward in the afterlife, also does genuine good to those around him.

The Prophetic path is meant to be practical and progressive; the one who follows it must pass from Islam to īmān and then to iḥsān, which, according to the celebrated hadīth of the angel Jibrīl is the highest degree of faith: 'that you worship God as if you see Him, for even if you do not see Him, He sees you'. This method puts divine revelation into practice, rather than relying on argumentation. Yassine's thinking is often very metaphysical, entirely focussed on intuition, inspiration (ilhām) and revelation (waḥy). He believes in the invisible world (ghayb) and rejects all intellectualism or speculative thinking. 36 The Prophetic path is man's quest within himself for his primordial nature (fitra) before it was corrupted by the search for rewards in this lowly world, by stubborn, arrogant and impious reason. Some passages of the Minhāj in which he rails against the dogmatism of theologians and the formalism of jurists are reminiscent of the writings of Ghazālī, who established the superiority of spiritual intuition over reason, and to whom Yassine compares himself 37 , but also of the works of the Moroccan Sufi Ibn Idrīs (mentioned above), among them the Risālat al-radd 'alā ahl al-ra'y (An epistle in reply to the authorities of the legal schools), as studied by Bernd Radtke: 'In his treatise, the main points Ibn Idrīs expounds are these: a Muslim has only been commanded to obey God and the Prophet. God is the Koran and the Prophet is the Sunna (...) In order to understand both categories of scripture the techniques of the schools of jurisprudence are not necessary. What is required is fear of God (taqwā), which each Muslim can develop individually.' 38 Yassine defends himself against accusations that he is a political ideologue of the Salafi type: 'Which of us is nearer to his prophetic guidance and method, the jurists of ritual cleanliness, its pious observance and general application, or the adherents of political Islam, who meet in session after the call to the afternoon prayer, in order to plan for the Islamic Caliphate, until the sunset prayer is announced while they are heedless of their prayer? Making a mockery of Islam, they would allege that the prayer is an act of worship and that what they are doing is also an act of worship… [such a man's] deeds will not be sanctioned 36 Al-Minhāj al-nabāwī, 115, The Muslim Mind on Trial. 37 'Like al-Ghazālī I have found the truth among Sufis, where I realised the limits of Islam as transmitted by the texts. God allowed me to free myself of ignorance, of an inherited Islam that was badly understood, and to put me on the path of truth -He pushed me to seek to know Him.' L'islam ou le déluge, 8; cited by Zeghal, Les islamistes marocains, 129. 38 Radtke, 'The Question of Authority', 252.

even if he strives with all his wealth and strength to establish an alleged Islamic Caliphate.' 39 For Yassine, true jihād consists of changing one's way of life and acquiring the habit of devoting oneself to work during the day and to the recitation of the Quran and supererogatory prayers at night -but only during the earlier part of the night, for the believer must get some sleep in order to be able to concentrate on his professional activities during the day, that he may see to his own needs and those of his family. Yassine uses the Sufi concepts of wayfaring and progression, of discipline and the training of the soul, of stages (maqām, the highest of which is that of iḥsān, described as the stage of divine proximity). Yassine calls on the faithful to follow the same path to spiritual improvement as himself, until they reach its perfect realisation. He is therefore himself a model to be imitated, and love for the Prophet is passed on via love for the Shaykh. He reminds the faithful that the Prophet was not only a messenger but also a guide and a teacher (Quran 62:2), which Yassine means in the sense of a spiritual father: the Prophet felt both the love of a father for his son and the patience of the master towards his disciple. Yassine himself established this kind of paternal relationship with his disciples. 40 Companionship (al-ṣuḥba wa-l-jamā'a) is the first and most important of the ten principles of the Prophetic path (and the keystone of any mystical organisation), so he called his group al-Jamā'a. Yassine sets up a rapport of companionship (ṣuḥba) between the guide and his disciples, based on the relationship between the Prophet and his companions (sahāba). He writes that the guide must be the object of respectful or reverential fear (hayba), as was the Prophet, for the guide is a reminder of God, and God's Messenger on earthsubmission to a holy (walī) and pious (ṣāliḥ) guide (murshid) is submission to God. 41 This relationship is sealed by a pact (bay'a). Yassine had a very strong feeling for the group, the community, believing in the solidarity essential to its members as social ties began to disintegrate.

Yassine has been labelled an Islamist, a term popularised during the 1980s by French scholars and used to refer to modern movements that politicise the religious realm: Wahhābīs, Salafis, jihādīs, the Muslim brotherhood... This catch-all term masks the complexity of the different configurations involved. For example Yassine's position on the status of the Prophet is very distant from what one finds in the writings of the Wahhābī or Salafi tendency.

Although Sunni Islamist groups assume many different forms, they generally have a theoretical link with Ibn Taymiyya (d. 1328) in common: this Ḥanbalī theologian's ideas, 39 Yassine, The Muslim Mind on Trial, 29. 40 Yassine,The Muslim Mind on Trial,123. rejecting the sacralisation of the figure of the Prophet and all forms of devotion to his person in accordance with his concept of divine unity (al-tawhīd), were initially recuperated and simplified by Muḥammad b. 'Abd al-Wahhāb (d. 1791) and the followers of the fundamentalist religious movement he created. Ibn 'Abd al-Wahhāb's essential doctrine is contained in his 'Book of Divine Unity' (Kitāb al-tawḥīd); as the title indicates, he develops therein his own concept of the dogma of unity and of the absolute uniqueness of God as Creator and Sustainer of the universe, with its different components (tawhīd al-rubūbiyya, the affirmation of God's omnipotence, tawḥīd al-ulūhiyya, the reservation of worship only to God). 42 He exhorts the reader to return to a pure monotheism and to 'devote [himself] to an exclusive worship of God alone without any associate'. This therefore excludes the veneration of any being or thing other than God. He considers the veneration of the Prophet and the belief in his intercession as a form of idolatry (shirk) and of impiety (kufr). In his biography all men (mentioning the notorious story of the Satanic Verses as being based on fact), asserting that it is only in this sense that the Prophet may be, and must be, imitated. 43 The continuer of the Prophet's mission on earth and the renewer of his Sunna Yassine depicts a Prophet who is close to mankind -because he is human -and simultaneously unlike other people (basharan lā ka-bashar) because of his divine election.

Those who lowered the status of the Prophet, making of him a simple transmitter whose mission on earth ended once his message was delivered, are called blind and idiotic. In order to enlighten the faithful on the status of the Prophet, sent to bring mercy to the worlds, and on the extraordinary nature of his mission (as Yassine expresses himself in one of his lessons posted on Youtube), he recommends that they read the poem al-Burda (The Mantle), the bestknown poem in praise of the Prophet by the Egyptian Muḥammad al- Busīrī (d. 1298). This poem about love for the Prophet combines a description of his physical and moral beauty with an account of his birth, his miracles, his celestial ascension and the quest for his intercession. 42 Peskes and Ende, "Wahhābiyya"; Mouline, The Clerics of Islam. 43 Riexinger, 'Rendering Muḥammad Human Again'. See his contribution in this volume messianic dimension of Almohad power is aligned with the Muḥammadan prophecy as far as the origins and beginnings of Islam are concerned: at the end of times, after the Mahdī, the era of the Caliphate will begin again. Thus the first four Almohad Caliphs received the title of 'Rightly Guided' (rāshidūn). The Almohad Caliphs were simultaneously imām (infallible religious guides) and caliphs, God's representative on earth (khalīfa); they demonstrated a universal ambition to lead the entire Islamic umma. 50 and the necessity for good behaviour in this earthly life. The theme of death and the afterlife is omnipresent in his lessons as in his writings: Yassine exhorts men to change their behaviour so that they may arrive at a new order made of 'justice and moral and spiritual excellence', in preparation for eternal life. For Yassine, history unfolds in successive stages or reigns, each of which ends in fitna, disorder, but, thanks to the presence of a category of men sent by God, Islam and the Caliphate are cyclically revivified in accordance with the Prophetic path (al-khilāfa 'alā minhāj al-nubuwwa), ending corruption and re-establishing justice and the universal message of Islam before the end of times. This outlook can indeed be compared to that of messianic Mahdism, which features the re-establishment of the Caliphate. 51 On the Jamā'a website, Yassine has the titles of guide and renewer (imām mujaddid).

Conclusion

Drawing on his best-known work, Al-Minhāj al-Nabawī, this article has sought to cast new light on Yassine's Sufi itinerary, and on its impact on his thinking and his actions as a man of religion. Within the framework of this collective volume on modern constructions of the Prophet's image, and the co-opting of this image for political ends, the aim was to analyse Yassine's way of representing the Prophet, and his own relationship with God's messengera relationship that was intended to serve as an example for every Muslim. The Prophetic 50 Buresi, Les Almohades; Garcia-Arenal, Messianism and Puritanical Reform. [19][20] Path, the publication of which started at the beginning of the 1980s, set out to express a modern revival of Islamic faith and a re-actualisation of the Prophet's Sunna, presented by one who had achieved the prophetic model of perfection. Yassine is the heir of a long religious tradition in Morocco, the dogmas and figures of which (especially the sharīf-mahdī, here interpreted in the sense of mujaddid, renovator) are not frozen in time, but alive and dynamic; they have always and continually been reappropriated and remodeled, according to their evolving historical and cultural contexts. Yassine revisits the figure of the mujaddid in Islam and introduces into its conception new ideas and forms of language in order to encourage believers into their self transformation as Muslims, motivated by the notion of ihsān, excellence in the adoration of God: in Sufism ihsān is the highest degree of religion after submission to Quranic prescriptions (islām) and faith in God (īmān). Through Yassine's predication the believer discovers his own capacity to transform himself and act on society; thus Yassine's teaching is also a political project.

Scholars of political science tend to agree that the thinking of Shaykh Yassine is original because he reconciled mysticism and social (or even political) activism. However, the very term 'mysticism', borrowed from the Christian lexicon, is inappropriate because it ignores the entire social dimension of Sufism, and its intrinsic political implications, along with the eminently collective and public aspects of Sufism. Political scientists and sociologists have presented the structure of the Jamā'a, existing in opposition to an individualistic Islam, as a novelty, but even in its formative period Sufism was always a social and collective phenomenon. Since its emergence in the writings of al-Ḥakīm al-Tirmidhī (d. 898), the figure of the saint (walī) is a political one; Tirmidhī developed his theory of sanctity (walāya) and its relation to prophecy (nubuwwa) during a period of weakening of the Abbasid caliphate, and granted the walī prerogatives similar to those of the Prophet from whom he inherited, thus putting him in competition with other religious contenders on the issue (one that is endlessly debated in Islam), of authority. With Tirmidhī the walī was brought into the religious and historical conscience of Muslims: subsequently the notion of sainthood changed in different historical periods, adapting to social contexts; this allowed the walī to adopt socially recognised types of behaviour to respond to the hopes and expectations of his community. Through time, the language of the saint may change, but his practice remains the same: the figure of the saint who chastises a prince, or even competes with him on the issue of the legitimacy of terrestrial powers, is a familiar theme in hagiographic literature. This figure symbolises the tension that has always existed in Islam, between the realities of political power and the powers to which men of religion have laid claim, alongside their aspirations or pretensions to being above political power. 52 M. Garcia-Arenal has published several pieces of research showing that millenarism and eschatological discourse appear to be inherent to Maghrebi Sufism since at least the twelfth century, and that no doctrine of sainthood can be complete if it doesn't attempt to define political legitimacy. Although Yassine demonstrates his in-depth knowledge of the classics of contemporary Islamic thought (Bannā, Qutb and Mawdūdī), he also takes on models of sainthood that are socially recognised in the Maghreb specifically, and sees himself in the model offered by the Sufi Muhammad Kattānī, nicknamed The Martyr, who rebelled against two successive Sultans. The role that Kattānī attributed to the Sufi shaykh is that of faqih mujtahid, a jurist who exercise ijtihād (independent reasoning) in an external as well as an esoteric way. Kattānī affirms that his knowledge of divine law is received either while awake or in a dream state, directly from the Prophet -and that this qualifies him for the role of mujtahid. This claim by the Sufis to a superior interpretation of the sacred scriptures defines the tarīqa muhammadiyya. The Kattānīs emerged in Fez in the context of popular discontent and revolts provoked by the profound economic changes taking place in the second half of the nineteenth century. It didn't take all that long for the local Sufi Kattāniyya to transform itself into a political force capable of mobilising the masses, as it was to do during the revolt of 1907. 53 During his lifetime Yassine always refused to participate in the political system as defined by the monarchy (although his successors may think differently); nevertheless, Yassine did demonstrate his power to mobilise people in the streets, the university campuses and in his own association. He also left behind an important body of work and his guide, The Prophetic Path.

The term 'Islamist', broad and undefined as it may be, is not appropriate to describe Shaykh Yassine. It's true that he did not call himself a Sufi either -that term had been delegitimised during the construction of Morocco's national history. Yet his teachings fit well into the spiritual traditions of his country and region. These traditions are plural, and have brought forth masters with diverse profiles: some were in search of ascesis and retreat from the world, while others engaged with the social and political events of their times, claiming for themselves an earthly authority similar to that of the Prophet within his own community.

Observation of the success of Yassine's foundation and that of the Sufi Sidi Ḥamza (whom his disciples call Mūl al-waqt, Master of the present moment) provides a clear demonstration 52 Berque, Ulémas, fondateurs et insurgés du Maghreb. 53 Bazzaz,Forgotten Saints.

  descendants of the Prophet Muḥammad. According to the family's genealogy, Qādirī indicates kinship ties with the great saint of Baghdad, 'Abd al-Qādir al-Jīlānī (d.1166); as for Būdshīsh, it is a nickname (laqab) given to an ancestor who fed the people with a soup made of cracked wheat (dashīsha or tashīsa) during a period of famine. 8 To this reputation for hospitality they soon added one for jihād: in 1845, when France and the Sultan of Morocco Mūlay 'Abd al-Rahmān signed the treaty of Maghniya, defining the border between Morocco and Algeria, Sīdī Mukhtār al-Kabīr (d. circa 1852), the great-great-grandfather of Sīdī Hamza, joined the emir 'Abd al-Qādir al-Jazā'irī's resistance struggle against the French occupation. 9 The defeat of the emir in 1847 brought a temporary halt to resistance in the north of Morocco; it would be taken up again by the Habriyya branch of the Darqāwiyya at the turn of the nineteenth century. 10 French colonial archives mention the arrest in 1907 of Sīdī Mukhtār's grandson, also called Sīdī Mukhtār (d. 1914) and nicknamed al-Mujāhid, 'the one who carries out the jihād' because he led a long insurrection against the French army, which had entered the country from Oujda on the northen border. 11 After his release in 1910, Sīdī Mukhtār al-Mujāhid left his mountain village, Bū Yahyā, and settled on the Berkane Plains in Madāgh ; his descendents still live there. Thus the Būdshīshiyya follows the model of Morrocco's great historic zāwiyas, places of hospitality and outposts on the frontier of Christian invasion. In 1942, the arrival in the zāwiya of a cousin of Sīdī Bel-'Abbās, Sīdī Bū Madyan Munawwar Būdshīsh (d. 1955), a Sufi who was initiated into both the Tijāniyya and the Darqāwiyya, was a turning point in the family's history: Sīdī Bū Madyan transformed this local lineage of shurafā' into a Sufi path to spiritual education (tarīqa al-tarbiya), describing its teaching as a synthesis of the great Moroccan spiritual traditions, of the Qādiriyya by blood (nasab), and of the Darqāwiyya (a branch of the Shādhiliyya) and the Tijāniyya by virtue of the initiatic transmission (mashrab)

  origin during the eighteenth and the nineteenth centuries of what historians would later call the Sufi revival claimed this path for themselves. In the Maghreb from the end of the eighteenth century it was powerfully expressed in the teachings of Ahmad al-Tijānī (d. 1815); of Muhammad b. 'Abd al-Rahmān (d. 1793), the founder of the Rahmaniyya in Algeria; of the Moroccan Sufi Ahmad Ibn Idrīs (d. 1837), and of his successors who were to make union with the Prophet the aim of their Sufi path. In Jawāhir al-ma'ānī, (The Jewels of Meaning) Ahmad al-Tijānī informs his disciple 'Alī Ḥarazim that although the legislative prophecy is sealed, the Prophet nevertheless continues to guide his community and to send messages through his spiritual heirs. As for Shaykh al-'Arbī al-Darqāwī (d. 1823), he was considered by his disciples to be a mujaddid, reviver of religion in the Maghreb, and the pole of the circumference (qutb al-dā'ira), because of the tens of thousands of disciples who were affiliated to his Sufi path. 26 Below we shall see how Yassine's predication continued in the tradition of this Muhammadan path, without naming it.

  Tozy, Monarchie et islam politique au Maroc, 185-226; Zeghal, Les islamistes marocains, Chapter II. 29 Bellal, 'Mystique et politique chez Abdessalam Yassine et ses adeptes' 175.10 The Prophetic path as self-empowerment for Muslim individuals and communities The 10 principles of the Prophetic path The Prophetic Path is Yassine's most important work because it brings together and synthesises all of the ideas presented in his forty-odd published texts. 30 It has been studied by many researchers, who have described its structure and principal themes along with their own readings of its contents. Outside of Morocco, the Minhāj al-Nabawī and the shaykh's other writings have been examined at several international conferences organised by the European Institute for Islamic Sciences and other international Islamic foundations: Istanbul (2012); Brussels (2013); Ukraine (The National University of Ostroh Academy, 2014); University of London (British Association for Islamic Studies Annual Conference, 2015). 31 After two days of debates and discussion at the Istanbul conference, on The Centrality of the Holy Koran in Abdessalam Yassine's Theory of The Prophetic Method (Al-Minhāj al-Nabawī), the academics and religious scholars present concluded that Shaykh Yassine was the renewer in his own time; his Minhāj was described as 'one of the most prominent and influential revivalist projects in current intellectual Islamic thought'. Ten days later, the death of Shaykh Yassine at the age of 84 was announced..Yassine reminds his readers that minhāj is a Quranic term (sura al-Mā'ida, verse 48), and that 'the Islamic law, the sharī'a, comes from the Quran and the minhāj from the Prophet's Sunna.' 32 He writes that the minhāj is the path (tarīq) of faith (īmān) -and of the spiritual struggle against oneself's ego (jihād) in one's relationship with God -a path along which the believer travels (salaka) in order to reach spiritual perfection (ghāyat al-ihsāniyya);for Yassine the minhāj perfectly expresses the objectives of his text: to translate the Quran and the Sunna into concrete action (barnamijan 'amaliyyan) in order to overcome the obstacles ('aqabāt) of the times. 33 However, the term minhāj is traditionally found in the Islamic jurisprudence (fiqh) texts that currently flood the market for religious books; it was used by Muslim reformists of the twentieth century, in particular byḤasan al-Bannā (d. 1949) 30 https://yassine.net/en/2013/05/14/list-of-books/ 31 https://Yassineconferences.net/quran-conf/en/index/ 32 Al-Minhāj al-nabāwī, Introduction. 9.

  of the Prophet Muḥammad (his own abridged version of the life of the Prophet), entitled Mukhtasar sīrat al-rasūl Muḥammad b. 'Abd al-Wahhāb erases from the most commonly accepted version of the Prophet's life, the Sīra by Ibn Hishām, all the episodes that demonstrate the suprahuman nature of the Prophet. Ibn 'Abd al-Wahhāb retains only the parts of the biography that show the Prophet as an ordinary, sometimes fallible, human being, like

  figure of the khalīfa, who lays the groundwork for the coming of the 'Master of the Hour' (Mūl al-Sā'a), in addition to being a renewer of religion? In the Sunni tradition the two figures, mahdī and mujaddid, are often linked. During a lesson taught as part of a spiritual retreat to Salé with his disciples (posted on Youtube), Yassine identifies his role with that of the Prophet who brings a warning. He expresses the spiritual destitution and ignorance about God in which his community finds itself and warns it of the ultimate end of times (al-Sā'a)

Spadola, The Calls of Islam.

Zeghal, Les islamistes marocains, 50

Al-Fāsī, Hadīth al-Maghrib fī-l-Mashriq.

Bazzaz, Forgotten Saints.

Qustās,[36][37]68.

Qustâs, 35.

Founded by Muhammad al-Habrî (d. 1898), the Darqâwiyya Habriyya spread mainly in Algeria. Le Tourneau 'Derkâwâ'; Drague, Esquisse d'histoire religieuse du Maroc.

Berahab, Zâwiya Bûdshîshiyya, textes et documents à l'appui.

Chih, 'Shurafā' and Sufis', 212.

Yassine, Al-Islam aw al-Tūfān, consultable online http://siraj.net

Spadola, Calls for Islam.

Tozy, 'Le prince, le clerc et l'État',[81][82]

Ferhat, 'Chérifisme et enjeux du pouvoir'.

Commenté [md1]: Is this right ?

Yassine thus supports the idea that between his death and his resurrection the Prophet is still alive and communicating with mankind, especially with those who have been directly initiated by him. In Yassine's conception, the Sunna may be represented differently according to its varied historical contexts. The Prophetic path is the Sunna of the Prophet as re-activated by its inheritor, who is able to take into account his own historical time and the necessity of adapting the Sunna to his time: 'Ulama of the past have debated about the concept of tajdīd, and how to recognise the renewer of his time. It is important for us to know the meaning of tajdīd: who can renew the religion and how. Renewal receives strength (mustamiddan) from the Prophetic guidance, the Prophetic Sunna and the Prophetic method (hudā, sunna, minhāj).' 44 Then Yassine quotes the most famous hadīth on tajdīd, transmitted by Abū Dā'ūd:

'At the turn of each century God will send to this community someone who will renew its religion.' 45 Here we are faced with the figure of the renewer in its Sufi conception, the tajdīd being the re-actualisation of the Prophetic model -that is, the Sunna -in a post-Prophetic context. 46 Yassine believes in a continual re-interpretation of the divine message (and thus of God's law) by a person who has conformed to the Prophetic model; thus he expresses the possibility of innovation in Islam in its changing historical contexts. God and His will cannot be known by common mortals; only those who have approached Him through combatting their egos and purifying their souls until they obtain spiritual openness can receive messages from the Prophet enabling them to continue guiding their communities until the end of time. In the second chapter of Al-Minhāj al-nabawī, called tajdīd al-dīn, Yassine presents himself as the renewer of the religion of the fifteenth Hegiran century, attributing this title for the fourteenth century to Ḥasan al-Bannā who also came from a Sufi background.

The degree of tajdīd is defined by Yassine as that of the walāya al-kubrā. There is a hierarchy among the 'friends of God' (awliyā' Allāh), and the walāya al-kubrā corresponds to the highest stage, that of spiritual openness (fatḥ) and interior vision (baṣā'ir): 'This is an elevated degree that God through His grace grants to his elect'. The perfection inherited from God (kamāl al-wirātha), is not acquired through exoteric science ('ilm), and it is not sought out by the believer: this is a gift of divine grace. The character (khuluq) of the person who has 44 Al-Minhāj al-nabāwī, Chapter II: Tajdīd an dīn wa-l-imān. 45 Abū Dā'ūd (d. 889) was a Persian scholar of prophetic hadīth who compiled the third of the six 'canonical' hadīth collections recognised by Sunni Muslims, the Sunan Abū Dā'ūd Al-Ṣaʿīdī, Al-Mujaddidūn fī-l-islām. Voll, 'Renewal and Reform in Islamic History'; Lapidus, 'Islamic Revival and Modernity'. 46 Pagani, 'Renewal before Reformism'.

the most elevated experience of faith becomes the Quran (as Aisha described the Prophet).

The one who is chosen in this way must work to raise up the community of believers (qawma al-umma al islāmiyya): this is understood to be the meaning of the qiyām, 'holding oneself upright' before God and in His hands, thanks to a permanent interior jihād undertaken in order to allow the Prophetic path to triumph. The qawma is the objective and end of the tarbiya.

The caliphate according to the Prophetic path (al-khilāfa 'alā minhāj al-nubuwwa)

In the Maghreb, the rhetoric of renewal that is present among all founders of new Sufi orders since the early Modern period refers not only to the question of the imamate, but also to the notions of redemption and salvation. On the Jamā'a website (and thus widely available) are postings describing visions granted to disciples of Shaykh Yassine; these visions confirm the Shaykh's status as heir of the Prophet and renewer of his community. In some of them the Prophet himself is seen to approve the contents of the Minhāj and to recommend that believers read it, or to accept the orientation of the Guidance Council (majlis al-irshād) 47 of the Jamā'a, or to promise paradise to its followers. In other visions the Shaykh himself appears, taking precedence over the four Caliphs and imposing himself as the elect of the Prophet in a flash of bright light; the saint's house in Salé becomes a sacred place. Most of the disciples' dreams show Shaykh Yassine in the presence of the Prophet and surrounded by angels. In another vision, the Prophet arrives on a white horse, from which he dismounts, asking Shaykh Yassine to mount in his place. The Prophet then strikes the horse's rump and enjoins him to continue on his course. 48 Some researchers have detected a messianic promise in Shaykh Yassine's predication and the apocalyptic character of his writings (Islam or the Flood), a promise of the Shaykh's arrival and the restoration of the ideal community (his jamā'a) on earth before the end of times. In this context, then, one should read Yassine's predication in the light of Morocco's Mahdist tradition, which was begun by Ibn Tūmart (1080-1130). 49 This Berber from the south of Morocco proclaimed himself mahdī and, with the support of the Atlas tribes, laid the foundations of the Almohad state (1130-1269), thus successfully transforming his religious and prophetic authority into political sovereignty. The 47 Executive Council of the Jamâ'a entrusted to supervise the activities of the movement. It was founded on the model of the Egyptian Muslim Brotherhood's maktab al-irshâd (leadership bureau). 48 Tozy has examined about sixty of these visions from the Jamā'a website, analysing their political role: Tozy, 'L'évolution du champ religieux marocain au défi de la mondialisation'. 49 Chekroun, 'Islamisme, messianisme et utopie au Maghreb'.