The Harm Governance Architecture

HAGA™ consists of twelve independent Harm Governance spaces.

Each space answers one architectural question.

Each space governs one distinct part of the Harm Lifecycle.

Each space has a defined beginning, operational purpose, and governance
boundary.


Each space begins where the preceding Harm Governance requirement has been
sufficiently established.


Together, these spaces form the complete Harm Governance Architecture.

The architecture progresses through:

Harm Context → Harm Exposure → Harm Emergence → Harm Recognition → Harm
Boundary → Harm Determination → Harm State → Harm Change & Propagation →
Harm Containment → Harm Mitigation → Harm Recovery & Residual Harm → Harm
Resolution & Finality


This progression represents the governance journey from understanding the
context in which Harm may exist to determining when active governance of
that Harm lifecycle can legitimately reach Finality. Harm Spaces Rather
Than Harm-Producing Mechanisms


HAGA™ does not organize Harm Governance around people, AI models, robots,
organizations, machines, incidents, software systems, legal categories,
insurers, medical systems, or technical components.


Instead, it organizes governance around distinct Harm Governance spaces.

Each space represents an independent governance responsibility that exists
regardless of the mechanism through which Harm emerged.


Harm arising from a human action, AI output, autonomous-system action,
physical interaction, organizational process, software failure,
infrastructure failure, environmental condition, or composite operation
may arise through very different mechanisms.


Yet each may still require governance of:

context → exposure → emergence → recognition → boundary → determination →
state → change & propagation → containment → mitigation → recovery &
residual Harm → resolution & finality.


Because these spaces are methodology-neutral and technology-neutral, HAGA™
can remain applicable while AI systems, autonomous technologies,
operational environments, industrial systems, and Harm-producing
mechanisms continue to evolve. A Methodology Rather Than an Incident
System


HAGA™ is a governance methodology.

It is not an incident-management system.

The architecture defines which Harm Governance conditions must exist, how
they relate to one another, where their boundaries lie, and what must
remain explicit for Harm to remain governable throughout its lifecycle.


Organizations and systems remain free to select their own:

  • safety systems,
  • incident-management systems,
  • medical processes,
  • risk-management systems,
  • AI governance systems,
  • autonomous-system controls,
  • investigation methods,
  • evidence systems,
  • audit systems,
  • claims systems,
  • insurance processes,
  • legal procedures,
  • remediation mechanisms


HAGA™ governs the methodological Harm structure surrounding those
implementations rather than replacing them.


This separation allows the architecture to remain stable while
Harm-producing mechanisms and domain-specific response systems change.
From Harm-Relevant Occurrence to Governed Harm


A harmful-looking event cannot automatically be treated as established
Harm merely because an incident occurred.


A real-world event, AI output, autonomous action, physical interaction,
process failure, behavioral deviation, or other occurrence may be
Harm-relevant without establishing Harm.


Harm-Relevant Occurrence ≠ Established Harm.

Exposure may exist without Harm.

Harm may begin before Recognition.

Recognition may occur long after Harm Emergence.

The Harm Boundary may extend beyond the original incident.

Determination must establish whether Harm can legitimately be represented
as governed Harm.


Once established, Harm may change independently from the mechanism that
produced it.


HAGA™ transforms these dependencies into a structured and navigable Harm
Lifecycle. Exposure Is Not Harm


One of the most important distinctions within HAGA™ is:

Exposure ≠ Harm

A person, object, organization, system, infrastructure, environment, or
population may be exposed to conditions capable of producing Harm without
Harm yet having emerged.


Exposure may:

increase

decrease

persist

repeat

or:

end without Harm emerging.

HAGA™ therefore governs Exposure separately from Harm Emergence.

This prevents potential Harm from automatically becoming established Harm
while preserving the ability to govern the conditions from which Harm may
emerge. Harm May Exist Before Recognition


Harm does not begin merely because someone notices it.

A harmful condition may exist:

before detection

before reporting

before symptoms become visible

before monitoring identifies it

or:

before an institution formally recognizes it.

HAGA™ therefore preserves the distinction:

Harm Emergence ≠ Harm Recognition

and the foundational principle:

Unrecognized Harm may still be existing Harm.

This allows delayed, latent, cumulative, distributed, and gradually
emerging Harm to remain methodologically governable. Harm Does Not Require
a Single Harm-Producing Event


Harm may arise from one identifiable event.

But it may also emerge through:

repeated interactions

cumulative exposure

multiple individually insufficient actions

distributed execution

composite operations

systemic conditions

or:

long-term processes.

HAGA™ therefore does not require a single action, output, incident,
session, agent, or component to independently constitute the complete
Harm-producing condition.


The absence of a single Harm-producing action does not preclude governed
Harm.


Harm may emerge from a composite operation even where no individual
action, output, session, agent, or component independently constitutes the
complete Harm-producing condition. Containment Is Not Mitigation


Stopping Harm from expanding is not the same as reducing Harm that already
exists.


HAGA™ therefore preserves:

Containment ≠ Mitigation

Containment asks:

How can further expansion, propagation, or escalation of Harm be bounded
or stopped?


Mitigation asks:

How can existing Harm or its consequences be materially reduced?

A system may successfully prevent additional Harm while substantial
existing Harm remains.


Containment prevents additional Harm. It does not establish that existing
Harm has been mitigated or recovered from. Mitigation Is Not Recovery


Reducing Harm is not the same as recovering from it.

A Harm condition may be materially reduced while the affected subject,
object, system, organization, infrastructure, environment, or society
remains far from a recovered condition.


HAGA™ therefore preserves:

Mitigation ≠ Recovery

Recovery asks what condition has actually been regained.

It does not merely ask what intervention occurred.

Recovery is not defined by returning to the past. It is defined by the
governed condition that has actually been regained. Recovery Does Not
Require Restoration


Recovery does not necessarily mean returning to the exact pre-Harm
condition.


A subject or system may recover through:

restoration

adaptation

functional substitution

structural change

or:

a new stable post-Harm condition.

Therefore:

Recovery ≠ Pre-Harm Restoration

A legitimate Recovery condition may exist even where the post-Harm state
permanently differs from the state that existed before Harm. Residual Harm
Is What Remains


Recovery may be successful while Harm continues to remain.

HAGA™ therefore establishes Residual Harm as a distinct governed
condition.


Recovery does not necessarily eliminate Residual Harm.

Residual Harm ≠ Failed Recovery.

Residual Harm may:

remain stable

decrease

increase

change

recur

or:

become newly recoverable.

It is therefore not merely a historical label.

Residual does not mean inactive.

Residual does not mean permanent.

The foundational distinction is:

Recovery governs what returns. Residual Harm governs what remains.
Resolution Is Not Finality


A Harm may become legitimately resolved without its complete lifecycle
immediately reaching Finality.


HAGA™ therefore distinguishes:

Resolution ≠ Closure ≠ Finality

Resolution determines whether the Harm has reached a condition satisfying
legitimate Resolution Criteria.


Closure determines whether active Harm lifecycle handling may cease under
that Resolution basis.


Reopening governs whether changed Harm reality requires active governance
to resume.


Finality determines whether the Harm lifecycle itself has legitimately
reached its endpoint.


This prevents Harm from being treated as finished merely because:

an incident ended

Mitigation occurred

Recovery occurred

a claim closed

compensation was paid

a legal process ended

or:

no Harm is currently visible. Lifecycle Governance and Harm Reopening

Harm Governance does not necessarily end when the Harm lifecycle is first
closed.


Residual Harm may change.

Recovery may regress.

A latent condition may become visible.

The Harm Boundary may expand.

A dependency supporting Resolution may fail.

Harm may recur.

New information may materially affect the Resolution or Closure basis.

HAGA™ therefore extends governance beyond Resolution into Closure,
Reopening, and Finality.


Where Harm reality materially changes:

Closure → Reopening → Appropriate HAGA™ Re-Entry Point → Renewed Harm
Governance


Reopening does not automatically restart the entire Harm lifecycle.

It returns governance to the earliest materially affected space.

The result is targeted governed Harm lifecycle re-entry.

Reopening does not erase legitimate historical Resolution or Closure. Who
May Benefit


HAGA™ may support:

  • AI developers,
  • AI operators,
  • autonomous-system developers,
  • robotics organizations,
  • industrial organizations,
  • infrastructure operators,
  • manufacturers,
  • insurers,
  • claims organizations,
  • healthcare organizations,
  • safety organizations,
  • risk-management teams,
  • public institutions,
  • regulators,
  • research organizations,
  • digital-platform operators,
  • cybersecurity and operational teams,
  • environmental organizations,
  • audit and assurance organizations,
  • organizations responsible for complex human, physical, digital,


operational, or societal environments.

Relationship to Other OOF® Architectures

HAGA™ governs Harm.

It operates alongside complementary OOF® architectures.

GOA™ — Governance Architecture governs governance structure, authority,
boundaries, scope, delegation, accountability, validation, integrity,
transparency, continuity, and interoperability.


ORA™ — Operational Reality Architecture governs what actually exists and
occurs in Operational Reality.


AGA™ — Accountability Governance Architecture governs accountability,
responsibility, attribution, delegation, and accountable relationships
surrounding actions, decisions, omissions, and consequences.


ADIT® — Continuous Audit & Evidence Governance Architecture governs
evidential observation, preservation, correlation, verification,
examination, and auditability.


VALIDOS™ — Validation Governance Architecture governs validation purpose,
criteria, methods, evidence fitness, determination, Validation States,
reliance, and revalidation.


INTEGROS® — Integrity Governance Architecture governs integrity across
governed objects, states, evidence, structures, and processes.


AIG® — AI Governance Architecture governs AI behavioral governance and
behavioral integrity.


ASGA™ — Autonomous Systems Governance Architecture governs
autonomous-system identity, authority, execution, constraints,
coordination, intervention, escalation, and operational governability.


VFM® — Value Flow Mechanism governs what happens to Value as a consequence
of events and conditions.


SIMULOS® — Simulation Governance Architecture governs simulation purpose,
structure, execution, outputs, and lifecycle.


Together, these architectures allow Harm Governance to interact with
Operational Reality, accountability, evidence, validation, integrity, AI
behavior, autonomy, Value, and simulation without collapsing those
independent governance domains into one architecture. Use Case 1 — Harm
Without a Single Harm-Producing Action


An AI-enabled service interacts with a person repeatedly over time.

No individual output independently constitutes the complete Harm-producing
condition.


Each interaction may appear acceptable when reviewed in isolation.

However, repeated interactions create cumulative Exposure.

The resulting condition develops gradually.

Harm emerges across the composite interaction rather than through one
identifiable output.


HAGA™ asks:

What was the relevant Harm Context?

What Exposure accumulated?

When did Harm begin to emerge?

When did it become recognizable?

What belongs within the Harm Boundary?

Can Harm legitimately be determined to exist?

What is its current State?

Has Harm accumulated or compounded?

Does further Harm require Containment?

What existing Harm requires Mitigation?

What can recover?

What Harm remains?

HAGA™ therefore preserves:

Absence of a Single Harm-Producing Action ≠ Absence of Harm

Local Compliance ≠ Absence of Composite Harm

The objective is not to assign responsibility to the AI system, developer,
operator, or another actor.


The objective is to ensure that Harm remains governable even where no
single interaction explains the complete Harm-producing condition. Use
Case 2 — Physical Harm Continues After the Mechanism Stops


An autonomous industrial system causes a physical interaction that damages
equipment and affects surrounding operations.


The autonomous action stops immediately.

The producing mechanism is no longer active.

However, the resulting Harm continues.

Operational disruption spreads to connected processes.

Damaged equipment remains unavailable.

Secondary effects appear later.

Mitigation reduces part of the Harm.

Recovery restores significant functionality.

Some Residual Harm remains.

HAGA™ distinguishes:

Mechanism Stopped ≠ Harm Ended

Containment ≠ Mitigation

Mitigation ≠ Recovery

Recovery ≠ Resolution

Resolution ≠ Finality

The autonomous operation itself belongs to the relevant operational and
autonomous-system governance spaces.


The resulting Harm lifecycle belongs to HAGA™.

Physical contact is an operational mechanism. Harm is a governed
consequence. The Long-Term Vision


Harm-producing environments are becoming increasingly distributed,
automated, interconnected, and difficult to reduce to one event or one
responsible mechanism.


AI systems may interact continuously with millions of users.

Autonomous systems may perceive, decide, and act without linguistic
mediation.


Multi-agent systems may distribute one operational objective across many
agents.


Digital Harm may propagate across platforms.

Infrastructure Harm may cascade across dependent systems.

Environmental Harm may continue long after the initiating event.

Cognitive or societal Harm may accumulate gradually before becoming
recognizable.


One harmful condition may therefore exist across many actions, systems,
subjects, locations, domains, and periods of time.


As this transition accelerates, the central question will no longer be
only:


What caused the incident?

It will also be:

What Harm actually exists, when did it begin, what does it include, how is
it changing, what has been contained, what has been mitigated, what has
recovered, what remains, and when can its lifecycle legitimately end?


The long-term objective of HAGA™ is to provide a common Harm Governance
language through which humans, organizations, AI systems, autonomous
systems, insurers, public institutions, infrastructure operators, and
future operational environments can identify, distinguish, govern, track,
contain, mitigate, recover from, resolve, reopen, and bring Harm to
legitimate Finality without confusing Harm with the mechanism that
produced it, evidence proving it, accountability surrounding it, liability
arising from it, or Value consequences resulting from it.


HAGA™ is intended to make Harm governable from Exposure and Emergence
through Recovery, Residual Harm, Resolution, Reopening, and Finality.
Canonical Principle


Human systems, AI systems, autonomous technologies, industrial
environments, digital platforms, infrastructure, organizational processes,
and Harm-producing mechanisms will continue to change. Harm Governance
must remain stable. HAGA™ therefore governs the methodological conditions
that determine the context in which Harm may exist, when Exposure occurs,
how Harm emerges and becomes recognized, what belongs within its boundary,
whether Harm can legitimately be determined, what its current state is,
how it changes and propagates, how further Harm is contained, how existing
Harm is mitigated, what recovers, what remains as Residual Harm, when
Resolution and Closure become legitimate, when changed Harm reality
requires Reopening, and when the complete Harm lifecycle can legitimately
reach Finality.


Canonical Closing Statement

HAGA™ — Harm Governance Architecture provides the governance foundation
through which Harm affecting individuals, groups, organizations, physical
and digital objects, AI systems, autonomous systems, infrastructure,
environments, and society can be contextually identified, distinguished
from Exposure alone, governed through Emergence and Recognition, bounded,
legitimately determined, represented through current Harm States, tracked
through accumulation, compounding, propagation and cascading, contained
against further expansion, mitigated where existing Harm can be reduced,
evaluated through Recovery, distinguished from Residual Harm, brought into
legitimate Resolution and Closure, reopened where Harm reality materially
changes, and ultimately brought to governed Finality. By defining the
independent governable spaces of the complete Harm Lifecycle, HAGA™
establishes a methodology-neutral and technology-neutral architecture for
ensuring that Harm remains governable without requiring one legal system,
safety model, incident process, AI system, medical framework, claims
mechanism, or operational technology to define Harm Governance itself.
HAGA™ therefore establishes Harm Governance as a distinct methodological
layer around Harm itself, enabling Harm to remain identifiable, bounded,
state-governed, traceable, containable, mitigable, recoverable,
resolvable, reopenable, and capable of legitimate Finality regardless of
whether it originates through human action, AI behavior, autonomous
operation, physical interaction, organizational process, system failure,
environmental condition, or composite operational mechanisms.


HAGA™ governs Harm from exposure to finality.