Exposure Pathway Interruption¶
Map how a hazard can reach a vulnerable target, then break or verify the route rather than treating risk as a diffuse attribute.
What this archetype solves¶
Exposure Pathway Interruption turns a broad risk claim into a route-control problem. A hazard is not treated as dangerous merely because it exists somewhere; it becomes practically dangerous when it can travel through a path, make contact with a target, and exceed the target's ability to tolerate, avoid, or recover from that contact.
The draft is intentionally merge-sensitive. Several accepted archetypes already manage related pieces: diffusion containment slows spread, boundary permeability control manages what crosses an interface, failure mode anticipation enumerates design failures, structural harm mapping traces indirect institutional harm, dependency exposure reveals hidden dependencies, and bioaccumulation prevention controls stored load. This archetype remains distinct when the operative question is: through what severable route does the hazard reach the vulnerable target, and where should that route be broken?
Key components¶
| Component | Description |
|---|---|
| Hazard Specification ↗ | The hazard must be named precisely enough for pathway reasoning. “Pollution,” “risk,” “attack,” or “infection” is usually too broad. The pathway differs depending on whether the hazard is vapor, particulate matter, floodwater, credential access, pathogenic aerosol, contaminated equipment, heat, misinformation, or another moving burden. |
| Source and Reservoir Inventory ↗ | A pathway can begin at an active release source, a stored reservoir, a delayed emission point, or a recurring generator. Removing only the visible source can fail when an overlooked reservoir continues to feed the route. |
| Pathway Graph ↗ | The pathway graph is the central object of the archetype. It shows the links from source through transport medium, carrier, interface, contact point, and receptor. It should include bypasses, parallel routes, behavioral adaptations, seasonal routes, feedback loops, and delayed reservoirs. |
| Vulnerable Target Set and Vulnerability Profile ↗ | The target set names who or what must be protected. The vulnerability profile explains why some targets are more susceptible: higher exposure, greater sensitivity, lower adaptive capacity, longer contact time, lower threshold, or weaker recovery options. |
| Reachability and Coverage Check ↗ | The reachability check asks whether every protected target is disconnected from uncontrolled hazard paths or covered by a functioning control. This prevents false closure when one route is blocked but another route still reaches the same target. |
| Severable Link Inventory and Breakpoint Priority Rule ↗ | The severable link inventory lists places where the path can be broken. The priority rule decides which breakpoints should be used first, weighing impact, feasibility, urgency, equity, reversibility, maintenance burden, and risk-migration potential. |
| Monitoring Probe Network ↗ | Monitoring verifies that route interruption is real. Effective monitoring usually spans more than the source: it should include the path, the contact interface, and sentinel receptors likely to show residual exposure early. |
Common mechanisms¶
Common mechanisms include source elimination, source reduction, route closure, segmentation, barrier interposition, filtration, scrubbing, buffer zones, ventilation or flow redirection, contact-time reduction, receptor-side protection, vector or carrier control, pathway reachability analysis, exposure sampling transects, sentinel receptor monitoring, multi-barrier verification drills, and risk-migration review.
A single mechanism should not be mistaken for the archetype. A mask, firewall, filter, levee, quarantine, or sampling plan can be useful, but the full archetype includes route discovery, vulnerable-target overlay, breakpoint selection, residual monitoring, and substitute-route review.
Parameter dimensions¶
Important parameters include hazard identity, source strength, release frequency, transport medium, attenuation rate, pathway length, contact interface, receptor sensitivity, threshold, exposure duration, route substitutability, monitoring sensitivity, control maintenance interval, and risk-migration likelihood.
The most important practical parameter is often not the average level of hazard in the environment but whether a specific protected target remains reachable through at least one uncontrolled route.
Invariants to preserve¶
The model should preserve four invariants. First, risk reduction claims must point to broken pathway links. Second, vulnerable targets cannot be averaged away. Third, residual routes must remain observable after the first intervention. Fourth, responsibility must attach to specific links rather than dissolving into a generic “risk owner.”
Target outcomes¶
A successful use of this archetype produces a shared pathway graph, named vulnerable targets, selected breakpoints, installed controls, monitoring signals, residual-exposure statements, and triggers for model revision. The result is not simply “lower risk,” but a clearer claim: these targets are no longer reachable through these routes under these conditions, and remaining routes are known and monitored.
Tradeoffs¶
Upstream controls usually reduce more risk but can be expensive, slow, or politically difficult. Downstream receptor protection is faster but may shift the burden to those already vulnerable. Multiple barriers increase robustness but also increase maintenance and accountability needs. Detailed pathway mapping improves precision but can delay urgent action if used as an excuse to avoid protective measures.
Failure modes¶
The most common failure is visible-route fixation: the obvious path is blocked while hidden routes remain open. Other common failures include barrier theater, monitoring without intervention, average-exposure masking, owner gaps between route segments, risk migration, and treating receptor protection as a substitute for source control.
Neighbor distinctions¶
Use diffusion containment when the main task is suppressing general spread through a medium or network. Use boundary permeability control when the main task is deciding what crosses one boundary. Use structural harm mapping when the harm is generated by institutional pathways rather than a transmissible hazard route. Use dependency exposure when hidden dependencies must be revealed. Use bioaccumulation prevention when the dominant issue is stored load after repeated intake. Use this archetype when the route from hazard source to vulnerable target is the unit of intervention.
Examples¶
A contaminated site may require mapping soil, vapor movement, building cracks, indoor air, and residents before choosing vapor barriers and monitoring. A hospital may map infectious source, shared air, surfaces, staff movement, and susceptible patients before combining isolation, ventilation, filtration, testing, and cohorting. A cybersecurity team may map attacker reachability from public endpoint to sensitive asset before applying segmentation, credential controls, and monitoring at the asset boundary.
Non-examples¶
A risk register without route modeling is not this archetype. Buying insurance without changing the route is risk transfer, not exposure pathway interruption. A single barrier with no evidence that it breaks the active path is a mechanism at best. Treating all receptors as equally exposed when contact and sensitivity differ sharply violates the archetype's vulnerable-target requirement.
Common Mechanisms¶
- After-Action Pathway Update — After an incident or near-miss, rebuilds the source-pathway-receptor model to add the route that was actually used and the links that turned out to be cuttable.
- Barrier Interposition — Places a physical barrier across a chosen link in the route, adding one engineered layer whose only job is to stop the hazard from traversing that step.
- Buffer Zone Design — Reserves a band of space between a source and its receptors, sized so the hazard's reach in its carrier medium falls short of who must be protected.
- Contact Time Reduction — Shrinks exposure by cutting how long the receptor stays in contact at the interface, lowering cumulative dose without changing the concentration present.
- Exposure Sampling Transect — Lays a line of samplers from source outward to measure the real exposure gradient, so residual exposure is mapped where receptors actually are rather than assumed.
- Filtration or Scrubbing — Lets the carrier medium keep flowing but strips the hazard out of it in transit, so what arrives downstream is cleaned rather than blocked.
- Multi-Barrier Verification Drill — Exercises a layered defense by disabling one barrier at a time and checking that no path then reaches a receptor, proving the redundancy is real.
- Pathway Reachability Analysis — Treats exposure as a graph problem — computes whether a hazard can still reach a target after a proposed cut, and exposes the substitute routes that keep it reachable.
- Personal or Local Protective Control — Shields the receptor at the last line — worn or point-of-use protection on the specific contact interface — sized to who is most vulnerable and ready to deploy when exposure spikes.
- Risk Migration Review — Checks, after a control goes in, whether the hazard actually fell or merely moved — to a substitute route, downstream, or onto a more vulnerable population.
- Route Closure or Segmentation — Severs or compartmentalizes the specific links a hazard travels, then assigns an owner and a keep-closed cadence so a cut route cannot quietly reopen.
- Sentinel Receptor Monitoring — Places sensitive indicator receptors where a hazard would arrive first, so any breakthrough shows up on a canary before it reaches the population being protected.
- Source Elimination or Substitution — Removes the hazard at its origin or swaps in a benign substitute, so there is no source left to route anywhere — verified against a dose threshold, not just 'less of it.'
- Source Reduction Program — Lowers how much hazard enters the pathway at its upstream sources, so every barrier, buffer, and filter downstream has less to hold back.
- Vector or Carrier Control — Suppresses the living or physical carrier that ferries a hazard along the pathway, timed to its seasonal abundance — knock down the vector and the route it embodies collapses.
- Ventilation or Flow Redirection — Moves or dilutes the carrying medium — air or water — so its flow sweeps the hazard away from the receptor and holds concentration at the point of contact below the harmful dose.
Compression statement¶
Exposure Pathway Interruption is the pattern of representing risk as a traversable chain from hazard source through media, carriers, interfaces, contacts, and receptors to a vulnerable target. The intervention enumerates every plausible route, checks whether each target is reachable, selects link-specific breakpoints, layers controls so no single missed link dominates, and monitors residual or migrated pathways after the initial route is blocked.
Canonical formula: hazard_source + transport_medium + contact_interface + vulnerable_target -> exposure; route_map + breakpoint_controls + reachability_verification + residual_monitoring -> interrupted_exposure_pathway
Related Abstractions¶
Abstractions this archetype builds on — directly (a source ingredient) or as a related pattern. Links follow the typed catalog namespace.
Built directly on (7)
- Boundary: Defines system limits.
- Containment: Holding a hazard, process, or agent within a deliberately maintained perimeter to prevent its spread or uncontrolled interaction with the surroundings.
- Coverage / Reachability: A completeness claim in the surjective direction: every required target in a target set is reachable from at least one of the system's inputs, pathways, or mechanisms.
- Exposure Pathway: The chain of links by which a hazard travels from source to vulnerable target, breakable at any link, turning risk into a graph search over severable routes.
- Propagation: The systematic spreading of a signal, effect, or state from a source through a medium or network, where the medium's structure governs how fast it moves, how it attenuates, and which paths it follows.
- Risk: Exposure to a known distribution of possible outcomes.
- Vulnerability Decomposition: A system's vulnerability to a named stressor factors into exposure, sensitivity, and adaptive capacity, each admitting its own intervention family.
Also references 33 related abstractions
- Access Catchment: The set of users who can reach a node given friction and a tolerance horizon.
- Access Control: Restrict system access.
- Bioaccumulation: Progressive concentration.
- Cascade: A change in one element triggers a chain of further changes.
- Constraint: Limits possibilities to guide outcomes.
- Contact-Response Decomposition: Impact decomposes into how much contact occurs between a system and a driver times how strongly the system responds per unit of contact, two independently actionable terms.
- Contagion: Spread of a state from element to element through contact.
- Defense In Depth: Stacking multiple independent protective layers between threat and asset so that only a correlated breach across all layers produces total loss.
- Diffusion: Spread over time.
- Dose-Response Relationship: Input-output mapping.
Variants¶
Narrower or domain-specific specializations that share this archetype's core structure. Recognized variants are established; candidate variants are provisional.
Environmental Exposure Pathway Control · domain variant · recognized
Controls pollutant, contaminant, smoke, radiation, or climate-related exposure routes from environmental source to receptor.
- Distinct from parent: The parent pattern is cross-domain; this variant emphasizes environmental media, receptor populations, exposure limits, and cumulative burden.
- Use when: A hazardous environmental source reaches people, ecosystems, buildings, or infrastructure through air, water, soil, food, or physical contact; The decision requires selecting breakpoints across source control, transport control, contact control, and receptor protection.
- Typical domains: environmental health, climate adaptation, industrial siting
- Common mechanisms: source elimination or substitution, filtration or scrubbing, buffer zone design, exposure sampling transect
Infectious Transmission Pathway Interruption · domain variant · recognized
Breaks pathogen transmission routes from infectious source through carrier medium to susceptible hosts.
- Distinct from parent: It adds pathogen-specific concepts such as incubation, infectious period, vector ecology, and susceptibility while preserving the same path-break structure.
- Use when: A pathogen moves through air, droplets, surfaces, vectors, water, food, or direct contact; Host susceptibility and contact conditions differ across settings.
- Typical domains: infection prevention, public health, biosecurity
- Common mechanisms: vector or carrier control, ventilation or flow redirection, contact time reduction, sentinel receptor monitoring
Attack-Path Exposure Reduction · domain variant · candidate
Treats a cyber or adversarial compromise route as an exposure pathway from attacker-controlled source to vulnerable asset.
- Distinct from parent: The parent applies to non-adversarial and physical pathways too; this variant stresses attack path enumeration, least privilege, segmentation, and monitoring.
- Use when: A threat can traverse exposed services, credentials, permissions, channels, dependencies, or user actions to reach a protected asset; The task is to reduce reachability rather than only score vulnerability severity.
- Typical domains: cybersecurity, identity and access management
- Common mechanisms: pathway reachability analysis, route closure or segmentation, barrier interposition, sentinel receptor monitoring
Hotspot Pathway Prioritization · risk or failure variant · recognized
Prioritizes pathway controls where multiple vulnerabilities co-locate and small route differences create large harm differences.
- Distinct from parent: The parent can treat any pathway; this variant is explicitly prioritization under concentrated vulnerability.
- Use when: Average exposure looks manageable but harm clusters in specific places, populations, assets, or time windows; Control resources are insufficient to treat every route equally.
- Typical domains: environmental justice, disaster risk reduction, infrastructure resilience
- Common mechanisms: sentinel receptor monitoring, risk migration review, exposure sampling transect
Near names: Source-Receptor Pathway Control, Source-Pathway-Receptor Modeling, Exposure Route Breakpoint Design, Multi-Barrier Exposure Control, Route of Exposure Control.