HEIM — Harm Exposure Identification Module

OOF® Origin Open Foundation®

Independent Methodological Authority

Canonical Definition

The HEIM — Harm Exposure Identification Module governs how potential and
actual Harm Exposure is initially identified from Governed Harm Context by
establishing whether a materially relevant relationship may exist between
a potentially affected subject or object and a Harm-capable condition
without treating possibility, presence, proximity, contact, access,
interaction, or exposure itself as established Harm.

HEIM establishes the transition:

Governed Harm Context → Harm-Capable Condition Identification →
Potentially Exposed Subject / Object → Exposure Relationship Candidate →
Exposure Identification State

Its central question is:

Is there a sufficiently supported Harm-relevant relationship requiring the
subject or object to enter Harm Exposure governance?

  • Operational Role


Harm Exposure governance cannot begin merely because something dangerous
exists.

A machine may be capable of injuring a person who never enters its
operating space.

A harmful digital object may exist without reaching any user or system.

An AI system may produce an unsafe output that is never relied upon or
received.

A contaminant may exist without reaching a population.

Conversely, exposure may exist even where there is no obvious physical
contact, single event, visible injury, or immediate consequence.

HEIM therefore identifies when a Harm-relevant condition and a potentially
affected subject or object become sufficiently connected to require
Exposure governance.

Its role is not to determine the complete nature of that exposure.

That belongs to subsequent HES modules.

  • Position Within Harm Exposure Standard (HES)


The HES internal module flow is:

Exposure Identification → Exposure Conditions → Exposure Scope → Exposure
Duration → Exposure Transition

HEIM governs the first step:

Harm Context → Exposure Identification

Its output provides the qualified exposure candidate required by the
subsequent Exposure Conditions governance stage.

  • Governed Object


The governed object is the Exposure Identification State.

It establishes whether a Harm-relevant relationship:

  • is identifiable
  • may materially exist
  • requires further Exposure governance
  • lacks sufficient basis
  • has been excluded
  • remains uncertain or disputed


HEIM does not establish the final Exposure State.

  • Exposure Identification Trigger


HEIM activates when Governed Harm Context contains:

Potentially Affected Subject / Object

and:

Harm-Capable Condition

with a possible materially relevant relationship between them.

Conceptually:

Subject / Object + Harm-Capable Condition + Possible Relationship →
Exposure Identification Trigger

The existence of only one side is insufficient.

  • Harm-Capable Condition Identification


HEIM must identify the condition capable of contributing to Harm.

The condition may arise from:

Human Action

Organizational Process

Mechanical Operation

Physical Environment

Digital System

AI Output

Autonomous Action

Information

Resource Allocation

Environmental Condition

Multi-System Interaction

Continuing or Repeated Process

The condition need not already have produced Harm.

Harm Capability ≠ Harm Existence

  • Condition Specificity


A Harm-capable condition must be represented with enough specificity to
support legitimate exposure analysis.

Labels such as:

Unsafe

Dangerous

Problematic

Harmful

may be insufficient by themselves.

The governed condition should identify what actual state, process,
interaction, output, or circumstance creates Harm relevance.

  • Potentially Exposed Subject Identification


HEIM identifies who or what may have entered the relevant relationship.

Potential exposure subjects may include:

Individual

Multiple Individuals

Defined Group

Organization

Physical Object

Digital Object

Operational System

Infrastructure

Environment

Population / Society

HSM provides the underlying subject structure.

HEIM determines which of those subjects become relevant to Exposure
governance.

  • Subject Presence


Presence may contribute to Exposure identification.

However:

Presence ≠ Exposure

A person may be present in a facility without encountering the
Harm-capable condition.

A digital system may exist on the same network without being reachable by
the relevant process.

A population may inhabit a region without entering the affected
environmental pathway.

  • Physical Contact


Physical contact may provide a strong Exposure identification signal.

But:

Physical Contact ≠ Harm

and:

Physical Contact ≠ Material Exposure in Every Context

The meaning of contact depends upon the Harm-capable condition and
governed context.

  • Proximity


Spatial, digital, organizational, temporal, or operational proximity may
indicate possible exposure.

It cannot establish exposure by itself.

Proximity ≠ Exposure

HEIM must determine whether proximity creates a materially relevant
relationship.

  • Access


Access may create an Exposure candidate.

Examples include:

Access to Harmful Content

Access to Unsafe System Function

Access to Contaminated Area

Access to Harm-Capable Equipment

However:

Access ≠ Exposure

The system must distinguish availability from actual Harm-relevant
interaction.

  • Receipt


Receipt of information, output, material, signal, resource, or another
object may constitute a stronger exposure indicator.

Yet receipt alone may still require context.

Receipt ≠ Harm

and:

Receipt ≠ Reliance

These distinctions are particularly important in AI and informational
environments.

  • Interaction


Interaction between subject and condition may create a legitimate Exposure
candidate.

Interaction may be:

Physical

Digital

Informational

Cognitive

Organizational

Environmental

Systemic

Operational

HEIM must remain technology-neutral.

  • Reachability


In digital and autonomous environments, a subject or object may be
reachable by a Harm-capable condition before direct interaction occurs.

Reachability may justify further Exposure governance where material.

But:

Reachability ≠ Actual Exposure

  • Pathway Availability


A possible pathway may exist between a Harm-capable condition and subject.

Conceptually:

Condition → Possible Pathway → Subject

HEIM may identify an Exposure candidate.

The existence of the pathway does not establish that exposure traversed
it.

Available Pathway ≠ Used Pathway

  • Direct Exposure Candidate


A Direct Exposure Candidate exists where the Harm-capable condition may
interact immediately with the potentially affected subject or object.

Conceptually:

Condition → Subject

Directness strengthens structural clarity.

It does not establish Harm.

  • Indirect Exposure Candidate


An Indirect Exposure Candidate exists where the relationship passes
through intermediate elements.

Conceptually:

Condition → Intermediate Element → Subject

HEIM must not reject exposure merely because the relationship is indirect.

Indirect Exposure ≠ Immaterial Exposure

  • Mediated Exposure Candidate


Exposure may be mediated through:

Human

AI System

Organization

Digital Platform

Machine

Environment

Infrastructure

Information Channel

The mediator must remain distinguishable from the Harm-capable condition
and affected subject.

  • Distributed Exposure Candidate


Exposure may exist across distributed environments without one
identifiable contact point.

Examples include:

Distributed Digital Content

Environmental Contamination

Systemic Organizational Process

Network-Wide Condition

Population-Level Information Distribution

The rule is:

No Single Contact Point ≠ No Exposure Candidate

  • Shared Exposure Candidate


Several subjects may be connected to the same Harm-capable condition.

HEIM may establish a Shared Exposure Candidate.

It must not infer identical exposure.

Shared Condition ≠ Equal Exposure

  • Collective Exposure Candidate


Exposure may become governable at group or population level even where
each individual subject has not yet been separately identified.

This may be appropriate where the context establishes a defined affected
population or class.

Absence of Individually Named Subjects ≠ Absence of Exposure Governance

  • System Exposure


A digital or operational system may itself become the potentially exposed
object.

Examples may involve:

Malicious Input

Unsafe Command

Data Corruption Path

Resource Deprivation

Systemic Interference

Human injury is not required for Harm Exposure governance to begin.

  • Environmental Exposure


An environment may become the governed exposure object where a
Harm-capable condition materially enters or affects it.

HEIM must not require a human intermediary.

No Immediate Human Exposure ≠ No Governable Exposure

  • Informational Exposure


Information itself may create an Exposure candidate where receipt,
repeated presentation, manipulation, deception, or another informational
relationship is capable of contributing to Harm.

HEIM identifies the relationship.

It does not determine cognitive or societal Harm.

  • AI-Mediated Exposure


AI may create or mediate exposure through:

Generation

Recommendation

Ranking

Classification

Decision Support

Resource Allocation

Automated Communication

Control Output

HEIM must identify what subject actually entered the exposure
relationship.

AI Involvement ≠ Exposure by Default

  • Autonomous Exposure


An autonomous system may create exposure without explicit human
instruction at the moment of action.

Conceptually:

Perception → Autonomous Action → Harm-Capable Condition → Potential
Subject

The absence of linguistic mediation does not eliminate Exposure
governance.

Non-Linguistic Execution ≠ Non-Governable Exposure

  • Multi-Agent and Multi-System Exposure


Exposure may arise only from interaction among multiple systems.

Conceptually:

System A + System B + Agent C + Environment → Harm-Capable Condition →
Subject

HEIM must support composite Exposure identification.

It must not force the Exposure candidate onto one actor merely for
simplification.

  • Exposure Opportunity


An Exposure Opportunity exists where exposure could occur but has not been
established.

Conceptually:

Harm-Capable Condition + Reachable Subject + Available Pathway

This state may require monitoring or further governance.

But:

Exposure Opportunity ≠ Exposure

  • Prevented Exposure


Controls may prevent a candidate relationship from becoming actual
exposure.

Conceptually:

Condition → Effective Barrier → Subject

Where the barrier legitimately interrupts the pathway, HEIM may record:

Exposure Prevented

This is different from:

No Harm-Capable Condition

  • Failed Barrier


A barrier may exist but fail to prevent the Harm-relevant relationship.

Conceptually:

Condition → Barrier Failure → Subject

The existence of a control must therefore not automatically exclude
Exposure identification.

Control Present ≠ Exposure Prevented

  • Unknown Barrier Effectiveness


Where control effectiveness is uncertain, HEIM must preserve uncertainty.

It must not infer either:

Exposure Prevented

or:

Exposure Established

without sufficient basis.

  • Exposure Signal


An Exposure Signal is information suggesting that a relevant relationship
may exist.

Signals may include:

  • contact
  • presence
  • receipt
  • access
  • system logs
  • environmental measurements
  • observation
  • user report
  • sensor data
  • repeated interaction
  • downstream effect
  • operational state


Exposure Signal ≠ Exposure Determination

  • Multiple Exposure Signals


Several weak signals may collectively justify Exposure governance.

Conceptually:

Signal₁ + Signal₂ + Signal₃ → Material Exposure Candidate

HEIM must therefore avoid requiring one decisive signal where the governed
context is inherently distributed.

  • Conflicting Exposure Signals


Signals may conflict.

Example:

Sensor indicates presence

while:

Access record indicates absence

HEIM must preserve the conflict rather than selecting whichever source
supports a preferred conclusion.

Conflicting Signals ≠ Permission for Selective Interpretation

  • Missing Exposure Information


Relevant information may be unavailable.

HEIM must support:

Insufficient Exposure Basis

rather than manufacturing a binary answer.

Missing information must remain distinguishable from evidence that
exposure did not occur.

No Exposure Evidence ≠ Evidence of No Exposure

  • Exposure Identification States


HEIM may produce:

Exposure Candidate Identified

Strong Exposure Candidate

Possible Exposure

Exposure Opportunity

Exposure Prevented

Exposure Unlikely

Insufficient Basis

Exposure Candidate Excluded

These states support further governance.

They are not Harm states.

  • Exposure Identification Confidence


Where useful, confidence may be attached to the identification state.

Confidence must refer to the quality of the Exposure identification basis.

It must not be interpreted as probability of Harm.

High Exposure Confidence ≠ High Harm Probability

  • Temporal Identification


HEIM must preserve when the Exposure candidate may have existed.

Relevant distinctions include:

Exposure Candidate Time

Recognition Time

Reporting Time

Governance Entry Time

These may differ.

Exposure Recognition Time ≠ Exposure Origin Time

  • Delayed Exposure Discovery


Exposure may be discovered after the relationship has ended.

Conceptually:

Exposure → Exposure Ends → Later Discovery

HEIM must support retrospective identification.

Late Exposure Discovery ≠ Late Exposure Origin

  • Repeated Exposure Identification


Repeated interactions may generate multiple Exposure candidates.

HEIM must determine whether they require separate identification or belong
to a repeated exposure structure.

It must not prematurely determine accumulation.

That belongs to subsequent HES governance.

  • Subject-Specific Identification


Where multiple subjects are present, HEIM should identify exposure
separately where material differences exist.

Conceptually:

Condition → Subject A: Candidate

Condition → Subject B: No Candidate

Condition → Subject C: Uncertain

This prevents group assumptions from replacing subject-level reality.

  • Domain-Specific Identification


Exposure identification must respect the applicable Harm Domain Context.

The same operational condition may create:

Physical Exposure Candidate

for one subject,

and:

Digital Exposure Candidate

for another.

Same Condition ≠ Same Exposure Domain

  • Cross-Domain Exposure Candidate


One Harm-capable condition may create candidates across multiple domains.

Conceptually:

Condition → Physical + Medical + Digital + Financial Exposure Candidates

HEIM preserves the structure.

It does not establish that all domains ultimately contain Harm.

  • Exposure Identification and Harm Context


HEIM consumes the governed outputs of HCS.

It must not rebuild the complete Harm Context independently.

The relationship is:

Governed Harm Context → Exposure Identification

not:

Exposure Identification → New Operational Reality

  • Exposure Identification and Operational Reality


ORA™ may establish whether an action, system state, interaction, or
environmental condition actually occurred.

HEIM determines whether that reality creates a Harm Exposure candidate.

Operational Occurrence ≠ Exposure by Default

  • Exposure Identification and Evidence


ADIT® may govern evidence supporting Exposure identification.

HEIM consumes appropriate evidence without governing evidence integrity
itself.

Evidence Presence ≠ Exposure Conclusion

  • Exposure Identification and Validation


VALIDOS™ may validate measurements, methods, or claims used in Exposure
governance.

HEIM determines whether the resulting basis supports Exposure
identification.

Validated Input ≠ Exposure Automatically

  • Exposure Identification and Risk


Risk analysis may identify scenarios in which exposure could occur.

HEIM governs whether a relevant Exposure candidate exists in the governed
Harm Context.

Risk Scenario ≠ Actual Exposure Candidate by Default

  • Exposure Identification and Causation


HEIM may identify a relationship requiring later causal consideration.

It does not determine that the Harm-capable condition caused any
consequence.

Exposure Candidate ≠ Causal Finding

  • Exposure Identification and Accountability


A person, organization, system, developer, operator, owner, or other
entity may be associated with the Harm-capable condition.

That association does not determine accountability.

Condition Association ≠ Accountability

  • Exposure Identification and Liability


Legal liability is outside HEIM.

The identification of Exposure must remain independent from whether
compensation, legal responsibility, fault, or liability may later arise.

Exposure Identification ≠ Liability Identification

  • Exposure Identification Reassessment


HEIM must permit reassessment where:

  • a new subject is discovered
  • a Harm-capable condition is redefined
  • a pathway becomes known
  • a supposed pathway is disproven
  • barrier effectiveness changes
  • new logs or measurements appear
  • temporal understanding changes
  • domain context changes
  • distributed exposure becomes visible


Reassessment must preserve the earlier governed state.

  • Historical Identification Integrity


Exposure identification evolves with available information.

Conceptually:

No Candidate → Possible Candidate → Strong Candidate → Confirmed for
Further Exposure Governance

or:

Candidate → New Information → Candidate Excluded

Historical states must remain reconstructable.

Current Exposure Identification ≠ Historical Exposure Identification

  • Identification Sufficiency


HEIM is sufficient when it can answer:

Is there enough governed basis to require further Harm Exposure governance
for this subject or object?

It does not require complete Exposure determination.

The output may legitimately remain uncertain.

The sufficiency test is:

Would excluding this Exposure candidate create a material risk of omitting
a legitimate Harm Exposure relationship from downstream governance?

  • Proportionality


Identification effort must follow the complexity of the context.

A simple direct physical relationship may require little structural
analysis.

Distributed environmental, digital, AI-mediated, multi-agent, or
population exposure may require substantial mapping.

Identification Complexity Should Follow Exposure Reality

  • Enterprise Application


HEIM can be applied across:

  • industrial operations
  • healthcare
  • workplace environments
  • digital platforms
  • financial systems
  • AI systems
  • autonomous systems
  • robotics
  • transportation
  • infrastructure
  • environmental systems
  • organizational processes
  • public administration
  • human-AI interaction
  • multi-agent systems


Its function remains constant:

identify when a Harm-capable condition and a potentially affected subject
or object become sufficiently connected to require governed Exposure
analysis.

  • Minimum Implementation Framework


A minimum implementation of HEIM should provide eight capabilities.

  • Governed Input


Receive Governed Harm Context containing identifiable subjects or objects,
relevant domains, temporal context, and contextual relationships.

  • Harm-Capable Condition Identification


Represent the condition capable of contributing to Harm with sufficient
specificity for Exposure governance.

  • Potential Exposure Subject Identification


Identify which subjects or objects may materially relate to that
condition.

  • Exposure Relationship Candidate Formation


Represent the possible relationship without treating it automatically as
actual exposure.

  • Exposure Signal Qualification


Preserve supporting, conflicting, missing, or uncertain Exposure signals.

  • Barrier and Pathway Recognition


Represent whether a relevant pathway exists and whether controls may
prevent, interrupt, or leave exposure uncertain.

  • Reassessment & Historical Continuity


Permit Exposure candidates to be added, strengthened, weakened, excluded,
or reopened without erasing earlier states.

  • Governed Output


Produce a traceable Exposure Identification State suitable for subsequent
Exposure Conditions governance.

A system that simply labels every subject near a dangerous condition as
“exposed” does not fully implement HEIM.

  • Use Case 1 — Harm-Capable Physical Condition with Multiple Nearby


Subjects

A Harm-capable physical condition exists within an operational environment
containing several people and objects.

A simplistic system records:

Dangerous Condition Present → Everyone Present = Exposed

HEIM instead examines which subjects have a materially relevant
relationship to the condition.

It may establish:

Subject A → Direct Exposure Candidate

Subject B → Possible Exposure Candidate

Subject C → Effective Barrier / Exposure Prevented

Subject D → No Material Exposure Relationship

No Harm is determined.

HEIM ensures that presence alone does not become Exposure and that a
potentially legitimate Exposure candidate is not ignored merely because
Harm is not yet observable.

The governing distinction is:

Presence ≠ Exposure

  • Use Case 2 — AI Output Reaches a User Through a Mediated Process


An AI system produces a potentially Harm-capable output.

The output passes through an organizational or digital process before
reaching a user.

A simplistic governance model concludes either:

AI Produced Output → User Exposed

or:

Human / Platform Mediated Output → AI Not Relevant

HEIM preserves the actual structure:

AI Output → Mediating Process → User → Exposure Candidate

It identifies whether the user entered a materially relevant exposure
relationship while leaving AI behavior, organizational accountability,
causation, Harm Emergence, and liability to their appropriate governance
spaces.

The governing distinction is:

AI Output Existence ≠ User Exposure

  • Governance Requirements


HEIM requires that:

  • Harm-capable conditions remain distinguishable from Harm
  • potentially affected subjects remain distinguishable from exposed


subjects; - presence remain distinguishable from Exposure; - proximity
remain distinguishable from Exposure; - access remain distinguishable from
Exposure; - receipt remain distinguishable from Harm; - reachability
remain distinguishable from actual Exposure; - available pathways remain
distinguishable from used pathways; - direct, indirect, mediated,
distributed, shared, collective, system, environmental, informational,
AI-mediated, autonomous, and multi-system Exposure candidates remain
supportable; - Exposure Opportunity remain distinguishable from actual
Exposure; - prevented Exposure remain representable; - control presence
not automatically establish prevention; - Exposure signals remain
distinguishable from Exposure conclusions; - conflicting and missing
information remain visible; - no evidence of Exposure remain
distinguishable from evidence of no Exposure; - temporal and domain
differences remain preservable; - historical Exposure Identification
states remain reconstructable; - Exposure Identification remain distinct
from Harm, causation, accountability, liability, and risk.

  • Governance Logic


HEIM applies the following logic:

Is there an identifiable Harm-capable condition?

If no:

→ no Exposure candidate should be formed.

If yes:

→ identify potentially affected subjects or objects.

Is there a plausible materially relevant relationship?

If no:

→ exclude the Exposure candidate.

If yes:

→ identify the relationship structure.

Is the relationship direct, indirect, mediated, distributed, shared, or
composite?

→ preserve the applicable structure.

Is there an available pathway?

If no:

→ Exposure may be excluded unless another relationship exists.

If yes:

→ determine whether the pathway was used, potentially used, prevented, or
remains uncertain.

Are effective barriers present?

If established:

→ record prevented Exposure where appropriate.

If uncertain:

→ preserve uncertainty.

Are Exposure signals sufficient?

If no:

→ maintain Possible Exposure / Insufficient Basis.

If yes:

→ establish an Exposure Identification State requiring further Exposure
governance.

Has material new information appeared?

If yes:

→ reassess without erasing history.

At every stage:

Possibility ≠ Exposure

Exposure ≠ Harm

Exposure ≠ Causation

Exposure ≠ Liability

  • Governance Outputs


HEIM may produce:

  • Exposure Identification State
  • Harm-Capable Condition
  • Potential Exposure Subject / Object
  • Exposure Candidate
  • Direct Exposure Candidate
  • Indirect Exposure Candidate
  • Mediated Exposure Candidate
  • Distributed Exposure Candidate
  • Shared / Collective Exposure Candidate
  • Exposure Opportunity
  • Exposure Pathway Candidate
  • Exposure Prevented State
  • Exposure Signal Set
  • Exposure Signal Conflict
  • Exposure Uncertainty State
  • Exposure Candidate Exclusion
  • Exposure Identification Reassessment
  • Historical Exposure Identification State
  • Identification Sufficiency State


The principal output is:

Exposure Identification State

for the next HES governance stage.

  • Critical Distinctions


Harm Capability ≠ Harm Existence

Presence ≠ Exposure

Physical Contact ≠ Harm

Proximity ≠ Exposure

Access ≠ Exposure

Receipt ≠ Harm

Receipt ≠ Reliance

Reachability ≠ Actual Exposure

Available Pathway ≠ Used Pathway

Indirect Exposure ≠ Immaterial Exposure

No Single Contact Point ≠ No Exposure Candidate

Shared Condition ≠ Equal Exposure

Absence of Individually Named Subjects ≠ Absence of Exposure Governance

No Immediate Human Exposure ≠ No Governable Exposure

AI Involvement ≠ Exposure by Default

Non-Linguistic Execution ≠ Non-Governable Exposure

Exposure Opportunity ≠ Exposure

Control Present ≠ Exposure Prevented

Exposure Signal ≠ Exposure Determination

Conflicting Signals ≠ Permission for Selective Interpretation

No Exposure Evidence ≠ Evidence of No Exposure

High Exposure Confidence ≠ High Harm Probability

Exposure Recognition Time ≠ Exposure Origin Time

Late Exposure Discovery ≠ Late Exposure Origin

Same Condition ≠ Same Exposure Domain

Operational Occurrence ≠ Exposure by Default

Exposure Candidate ≠ Causal Finding

Condition Association ≠ Accountability

Exposure Identification ≠ Liability Identification

  • Canonical Boundary


The HEIM — Harm Exposure Identification Module governs the initial
identification of Harm Exposure candidates by determining whether a
sufficiently supported and materially relevant relationship may exist
between a Harm-capable condition and a potentially affected subject or
object. It governs Exposure signals, candidate relationships, pathways,
barriers, uncertainty, exclusion, reassessment, and historical
identification states without establishing the complete Exposure
conditions, scope, duration, transition, Harm Emergence, causation,
accountability, responsibility, or liability.

HEIM answers:

Should this subject-condition relationship enter Harm Exposure governance?

It does not yet answer:

What exactly are the governed conditions of that Exposure?

That question passes to the next HES module.

  • Canonical Closing Statement


Exposure governance should begin when a Harm-relevant relationship becomes
materially plausible — not only after Harm becomes visible, and not merely
because danger exists nearby.

HEIM prevents possibility from becoming fact while also preventing
uncertain, indirect, distributed, AI-mediated, or non-physical Exposure
from disappearing simply because it does not resemble a traditional
incident.

Before HAGA™ can govern what Exposure means, it must first establish which
relationships legitimately require Exposure governance.