Exposure Pathway Interruption

Map how a hazard can reach a vulnerable target, then break or verify the route rather than treating risk as a diffuse attribute.

Version

v1 · 2026-08-24 · History

Solution archetype #

428

Problem family

Hazard Exposure & Uncontained Harm

Problem subfamily

Source–Pathway–Receptor Propagation

What this archetype solves

Exposure Pathway Interruption turns a broad risk claim into a route-control problem. A hazard is not treated as dangerous merely because it exists somewhere; it becomes practically dangerous when it can travel through a path, make contact with a target, and exceed the target's ability to tolerate, avoid, or recover from that contact.

The draft is intentionally merge-sensitive. Several accepted archetypes already manage related pieces: diffusion containment slows spread, boundary permeability control manages what crosses an interface, failure mode anticipation enumerates design failures, structural harm mapping traces indirect institutional harm, dependency exposure reveals hidden dependencies, and bioaccumulation prevention controls stored load. This archetype remains distinct when the operative question is: through what severable route does the hazard reach the vulnerable target, and where should that route be broken?

When This Archetype Applies

Complete catalog groundingAt least one sufficient condition set is fully represented by existing primes or domain-specific abstractions.

Diagnostic problem

A hazard is present, but the operative risk is unclear because the route by which it can reach vulnerable targets is hidden, fragmented, assumed, or described only at the level of broad exposure. Without a source-pathway-receptor model, controls may be placed at the wrong link, vulnerable targets may remain reachable through substitute paths, and risk may migrate rather than fall.

Applicability expression7 distinct conditions

any one(Source-to-target hazard pathandHeterogeneous target vulnerabilityandPremature control selectionandMultiple transmission pathwaysandRoute substitutionandUniversal target reachability)orRemediation creates exposure

Algebraic((A∧B∧C∧D∧E∧F)∨G)

D=a∨b

G=(a∧a′)∨(b∧b′)∨c∨d∨e

′ context guard? connective not recorded∅ no catalog witness yet

groundedpartly groundedopen

7 conditions, all required.

2At least one of theselettered A–G

Any one of these groups completes the pattern; conditions inside a group are required together.

A

Source-to-target hazard path · grounded

A harmful agent, pressure, signal, failure, pathogen, attack, or burden can travel from a source to a target. more

primeExposure Pathway— The chain of links by which a hazard travels from source to vulnerable target, breakable at any link, turning risk into a graph search over severable routes.

and — also required

B

Heterogeneous target vulnerability · open

Targets are heterogeneously vulnerable across people, components, places, data, or assets. more

and — also required

C

Premature control selection · open

Controls are selected before the transport pathway is explicit. more

and — also required

D

Multiple transmission pathways · grounded · 2 illustrations, not alternatives

Multiple media, carriers, interfaces, or handoffs can transmit the hazard. more

a

domainLatent-Path Activation— Explain harm that arrives while every factor is individually in-range as a previously inert causal path going live only when a rare conjunction of gating states closes every edge along it at once.

or — any one of these establishes this case

b

domainActive Failure— The frontline operator's act at the sharp end that completes a hazard path by aligning with holes latent conditions had pre-positioned in a system's layered defenses — the proximate, visible half of Reason's Swiss cheese model.

How this was matched — 4 requirements, all needed

Multiple links can transmit one hazard.

All of

• domainA hazard can in principle move from a source toward one or more vulnerable targets.
• quantifierAt least two distinct media, carriers, interfaces, or handoffs participate or can participate in transmission.
• relationThe distinct links can carry or pass the hazard onward.
• modalityTransmission through the multiple links is possible, not asserted to occur in every case.

and — also required

E

Route substitution · grounded

Blocking one route can induce an adjacent route or behaviorally substituted path. more

domainRisk Transfer Without Reduction— The maladaptation pattern in which an adaptation or defence lowers risk at a protected site by displacing the unchanged hazard onto a voiceless neighbour, catchment, or future generation — because it acts on one node's exposure rather than the generative pressure.

AND both parts required

context guarddisplacement_destination is channel_adjacent_to protected_beneficiary

suppliesThe substitute path uses an adjacent route.

How this was matched — 4 shared + 2 branches

Blocking one exposure route can induce a substitute path.

All of

• domainAn existing route can carry a hazard toward a vulnerable target.
• relationAn intervention blocks or materially reduces that route.
• relationA substitute path preserves or renews hazard transmission after the block.
• causalityBlocking the original route induces or prompts the substitution.

…and any one of

• branchThe substitute path uses an adjacent route.
• branchThe substitute path arises through behavior change.

and — also required

F

Universal target reachability · open

A risk claim depends on whether every relevant target is reachable from at least one exposure path. more

or — any one satisfies this slot

G

Remediation creates exposure · grounded · any one of 5

A remedial intervention can create or intensify a harmful exposure route. more

a

domainSurrogate Endpoint Problem— The failure that arises when a trial's biomarker surrogate diverges from the clinical endpoint it stands in for — because the intervention acts through off-pathway mechanisms the surrogate cannot see — so individual-level correlation does not license an intervention-level claim.

AND both parts required

context guardThe surrogate and clinical endpoint diverge with the clinical endpoint worsening after intervention.

suppliesThe changed pathway enables or increases harmful exposure.

or — any one of these establishes this case

b

domainCollateral-Damage Blowback— Diagnose why a tactically successful action ends net negative — its peripheral harm feeds a reaction channel that routes cost back to the actor's own future capacity, delayed and amplified — distinguishing a return channel from an ordinary externality.

AND both parts required

context guardThe tactically scoped action is undertaken to reduce a pre-existing hazard or risk.

suppliesAn intervention is undertaken for a remedial or risk-reducing purpose.

or — any one of these establishes this case

c

domainAdverse Drug Event— Harm to a patient caused by the pharmacology of a drug rather than the process of delivering it — bracketing mechanistically unlike injuries under one causal structure so the prescribing question becomes a benefit-to-harm ratio, not a binary safety verdict.

or — any one of these establishes this case

d

domainRisk Transfer Without Reduction— The maladaptation pattern in which an adaptation or defence lowers risk at a protected site by displacing the unchanged hazard onto a voiceless neighbour, catchment, or future generation — because it acts on one node's exposure rather than the generative pressure.

or — any one of these establishes this case

e

domainTherapeutic Duplication— The medication-safety failure where uncoordinated prescribers each place a defensible order that lands on the same pharmacologic target, so additive exposure overruns the therapeutic window — a harm that lives in the set of orders, not in any single one.

How this was matched — 5 shared + 2 branches

A remedy can worsen harmful exposure pathways.

All of

• roleAn intervention is undertaken for a remedial or risk-reducing purpose.
• domainA hazard and vulnerable target define the potential harmful exposure relation.
• causalityThe remedial intervention causes the exposure-pathway worsening.
• relationThe changed pathway enables or increases harmful exposure.
• modalityThe intervention can have this effect, without asserting that every remedy does.

…and any one of

• branchThe intervention creates a harmful exposure route that did not previously exist.
• branchThe intervention intensifies an already existing harmful exposure route.

Coverage

4 of 7 conditions grounded · 3 open.

None of the 3 open conditions sit in the shared core — each falls inside one alternative branch, so grounding any one of them closes only that branch.

Read the methodology · Download the trigger-logic data

Key components

Component	Description
Hazard Specification ↗	The hazard must be named precisely enough for pathway reasoning. “Pollution,” “risk,” “attack,” or “infection” is usually too broad. The pathway differs depending on whether the hazard is vapor, particulate matter, floodwater, credential access, pathogenic aerosol, contaminated equipment, heat, misinformation, or another moving burden.
Source and Reservoir Inventory ↗	A pathway can begin at an active release source, a stored reservoir, a delayed emission point, or a recurring generator. Removing only the visible source can fail when an overlooked reservoir continues to feed the route.
Pathway Graph ↗	The pathway graph is the central object of the archetype. It shows the links from source through transport medium, carrier, interface, contact point, and receptor. It should include bypasses, parallel routes, behavioral adaptations, seasonal routes, feedback loops, and delayed reservoirs.
Vulnerable Target Set and Vulnerability Profile ↗	The target set names who or what must be protected. The vulnerability profile explains why some targets are more susceptible: higher exposure, greater sensitivity, lower adaptive capacity, longer contact time, lower threshold, or weaker recovery options.
Reachability and Coverage Check ↗	The reachability check asks whether every protected target is disconnected from uncontrolled hazard paths or covered by a functioning control. This prevents false closure when one route is blocked but another route still reaches the same target.
Severable Link Inventory and Breakpoint Priority Rule ↗	The severable link inventory lists places where the path can be broken. The priority rule decides which breakpoints should be used first, weighing impact, feasibility, urgency, equity, reversibility, maintenance burden, and risk-migration potential.
Monitoring Probe Network ↗	Monitoring verifies that route interruption is real. Effective monitoring usually spans more than the source: it should include the path, the contact interface, and sentinel receptors likely to show residual exposure early.

Common mechanisms

Common mechanisms include source elimination, source reduction, route closure, segmentation, barrier interposition, filtration, scrubbing, buffer zones, ventilation or flow redirection, contact-time reduction, receptor-side protection, vector or carrier control, pathway reachability analysis, exposure sampling transects, sentinel receptor monitoring, multi-barrier verification drills, and risk-migration review.

A single mechanism should not be mistaken for the archetype. A mask, firewall, filter, levee, quarantine, or sampling plan can be useful, but the full archetype includes route discovery, vulnerable-target overlay, breakpoint selection, residual monitoring, and substitute-route review.

Parameter dimensions

Important parameters include hazard identity, source strength, release frequency, transport medium, attenuation rate, pathway length, contact interface, receptor sensitivity, threshold, exposure duration, route substitutability, monitoring sensitivity, control maintenance interval, and risk-migration likelihood.

The most important practical parameter is often not the average level of hazard in the environment but whether a specific protected target remains reachable through at least one uncontrolled route.

Invariants to preserve

The model should preserve four invariants. First, risk reduction claims must point to broken pathway links. Second, vulnerable targets cannot be averaged away. Third, residual routes must remain observable after the first intervention. Fourth, responsibility must attach to specific links rather than dissolving into a generic “risk owner.”

Target outcomes

A successful use of this archetype produces a shared pathway graph, named vulnerable targets, selected breakpoints, installed controls, monitoring signals, residual-exposure statements, and triggers for model revision. The result is not simply “lower risk,” but a clearer claim: these targets are no longer reachable through these routes under these conditions, and remaining routes are known and monitored.

Tradeoffs

Upstream controls usually reduce more risk but can be expensive, slow, or politically difficult. Downstream receptor protection is faster but may shift the burden to those already vulnerable. Multiple barriers increase robustness but also increase maintenance and accountability needs. Detailed pathway mapping improves precision but can delay urgent action if used as an excuse to avoid protective measures.

Failure modes

The most common failure is visible-route fixation: the obvious path is blocked while hidden routes remain open. Other common failures include barrier theater, monitoring without intervention, average-exposure masking, owner gaps between route segments, risk migration, and treating receptor protection as a substitute for source control.

Neighbor distinctions

Use diffusion containment when the main task is suppressing general spread through a medium or network. Use boundary permeability control when the main task is deciding what crosses one boundary. Use structural harm mapping when the harm is generated by institutional pathways rather than a transmissible hazard route. Use dependency exposure when hidden dependencies must be revealed. Use bioaccumulation prevention when the dominant issue is stored load after repeated intake. Use this archetype when the route from hazard source to vulnerable target is the unit of intervention.

Examples

A contaminated site may require mapping soil, vapor movement, building cracks, indoor air, and residents before choosing vapor barriers and monitoring. A hospital may map infectious source, shared air, surfaces, staff movement, and susceptible patients before combining isolation, ventilation, filtration, testing, and cohorting. A cybersecurity team may map attacker reachability from public endpoint to sensitive asset before applying segmentation, credential controls, and monitoring at the asset boundary.

Non-examples

A risk register without route modeling is not this archetype. Buying insurance without changing the route is risk transfer, not exposure pathway interruption. A single barrier with no evidence that it breaks the active path is a mechanism at best. Treating all receptors as equally exposed when contact and sensitivity differ sharply violates the archetype's vulnerable-target requirement.

Common Mechanisms

16 documented mechanisms across 6 implementation forms.

The grouping reflects forms represented among the mechanisms currently documented for this archetype; an absent form is not necessarily an impossible implementation.

Analysis, Modeling & Optimization · 1 mechanism

• Pathway Reachability Analysis — Treats exposure as a graph problem — computes whether a hazard can still reach a target after a proposed cut, and exposes the substitute routes that keep it reachable.

Assessment, Review & Assurance · 2 mechanisms

• After-Action Pathway Update — After an incident or near-miss, rebuilds the source-pathway-receptor model to add the route that was actually used and the links that turned out to be cuttable.
• Risk Migration Review — Checks, after a control goes in, whether the hazard actually fell or merely moved — to a substitute route, downstream, or onto a more vulnerable population.

Experiment, Test & Rehearsal · 1 mechanism

• Multi-Barrier Verification Drill — Exercises a layered defense by disabling one barrier at a time and checking that no path then reaches a receptor, proving the redundancy is real.

Intervention, Treatment & Transformation · 8 mechanisms

• Barrier Interposition — Places a physical barrier across a chosen link in the route, adding one engineered layer whose only job is to stop the hazard from traversing that step.
• Contact Time Reduction — Shrinks exposure by cutting how long the receptor stays in contact at the interface, lowering cumulative dose without changing the concentration present.
• Filtration or Scrubbing — Lets the carrier medium keep flowing but strips the hazard out of it in transit, so what arrives downstream is cleaned rather than blocked.
• Personal or Local Protective Control — Shields the receptor at the last line — worn or point-of-use protection on the specific contact interface — sized to who is most vulnerable and ready to deploy when exposure spikes.
• Source Elimination or Substitution — Removes the hazard at its origin or swaps in a benign substitute, so there is no source left to route anywhere — verified against a dose threshold, not just 'less of it.'
• Source Reduction Program — Lowers how much hazard enters the pathway at its upstream sources, so every barrier, buffer, and filter downstream has less to hold back.
• Vector or Carrier Control — Suppresses the living or physical carrier that ferries a hazard along the pathway, timed to its seasonal abundance — knock down the vector and the route it embodies collapses.
• Ventilation or Flow Redirection — Moves or dilutes the carrying medium — air or water — so its flow sweeps the hazard away from the receptor and holds concentration at the point of contact below the harmful dose.

Monitoring, Sensing & Alerting · 2 mechanisms

• Exposure Sampling Transect — Lays a line of samplers from source outward to measure the real exposure gradient, so residual exposure is mapped where receptors actually are rather than assumed.
• Sentinel Receptor Monitoring — Places sensitive indicator receptors where a hazard would arrive first, so any breakthrough shows up on a canary before it reaches the population being protected.

Structure, Architecture & Configuration · 2 mechanisms

• Buffer Zone Design — Reserves a band of space between a source and its receptors, sized so the hazard's reach in its carrier medium falls short of who must be protected.
• Route Closure or Segmentation — Severs or compartmentalizes the specific links a hazard travels, then assigns an owner and a keep-closed cadence so a cut route cannot quietly reopen.

Compression statement

Exposure Pathway Interruption is the pattern of representing risk as a traversable chain from hazard source through media, carriers, interfaces, contacts, and receptors to a vulnerable target. The intervention enumerates every plausible route, checks whether each target is reachable, selects link-specific breakpoints, layers controls so no single missed link dominates, and monitors residual or migrated pathways after the initial route is blocked.

Canonical formula: hazard_source + transport_medium + contact_interface + vulnerable_target -> exposure; route_map + breakpoint_controls + reachability_verification + residual_monitoring -> interrupted_exposure_pathway

Related Abstractions

Abstractions this archetype builds on — directly (a source ingredient) or as a related pattern. Links follow the typed catalog namespace.

Built directly on (7)

• Boundary: Defines system limits.
• Containment: Holding a hazard, process, or agent within a deliberately maintained perimeter to prevent its spread or uncontrolled interaction with the surroundings.
• Coverage / Reachability: A completeness claim in the surjective direction: every required target in a target set is reachable from at least one of the system's inputs, pathways, or mechanisms.
• Exposure Pathway: The chain of links by which a hazard travels from source to vulnerable target, breakable at any link, turning risk into a graph search over severable routes.
• Propagation: The systematic spreading of a signal, effect, or state from a source through a medium or network, where the medium's structure governs how fast it moves, how it attenuates, and which paths it follows.
• Risk: Exposure to a known distribution of possible outcomes.
• Vulnerability Decomposition: A system's vulnerability to a named stressor factors into exposure, sensitivity, and adaptive capacity, each admitting its own intervention family.

Also references 33 related abstractions

• Access Catchment: The set of users who can reach a node given friction and a tolerance horizon.
• Access Control: Restrict system access.
• Bioaccumulation: Progressive concentration.
• Cascade: A change in one element triggers a chain of further changes.
• Constraint: Limits possibilities to guide outcomes.
• Contact-Response Decomposition: Impact decomposes into how much contact occurs between a system and a driver times how strongly the system responds per unit of contact, two independently actionable terms.
• Contagion: Spread of a state from element to element through contact.
• Defense In Depth: Stacking multiple independent protective layers between threat and asset so that only a correlated breach across all layers produces total loss.
• Diffusion: Spread over time.
• Dose-Response Relationship: Input-output mapping.

▸ Show 23 more

Variants

Narrower or domain-specific specializations that share this archetype's core structure. Recognized variants are established; candidate variants are provisional.

Environmental Exposure Pathway Control · domain variant · recognized

Controls pollutant, contaminant, smoke, radiation, or climate-related exposure routes from environmental source to receptor.

• Distinct from parent: The parent pattern is cross-domain; this variant emphasizes environmental media, receptor populations, exposure limits, and cumulative burden.
• Use when: A hazardous environmental source reaches people, ecosystems, buildings, or infrastructure through air, water, soil, food, or physical contact; The decision requires selecting breakpoints across source control, transport control, contact control, and receptor protection.
• Typical domains: environmental health, climate adaptation, industrial siting
• Common mechanisms: source elimination or substitution, filtration or scrubbing, buffer zone design, exposure sampling transect

Infectious Transmission Pathway Interruption · domain variant · recognized

Breaks pathogen transmission routes from infectious source through carrier medium to susceptible hosts.

• Distinct from parent: It adds pathogen-specific concepts such as incubation, infectious period, vector ecology, and susceptibility while preserving the same path-break structure.
• Use when: A pathogen moves through air, droplets, surfaces, vectors, water, food, or direct contact; Host susceptibility and contact conditions differ across settings.
• Typical domains: infection prevention, public health, biosecurity
• Common mechanisms: vector or carrier control, ventilation or flow redirection, contact time reduction, sentinel receptor monitoring

Attack-Path Exposure Reduction · domain variant · candidate

Treats a cyber or adversarial compromise route as an exposure pathway from attacker-controlled source to vulnerable asset.

• Distinct from parent: The parent applies to non-adversarial and physical pathways too; this variant stresses attack path enumeration, least privilege, segmentation, and monitoring.
• Use when: A threat can traverse exposed services, credentials, permissions, channels, dependencies, or user actions to reach a protected asset; The task is to reduce reachability rather than only score vulnerability severity.
• Typical domains: cybersecurity, identity and access management
• Common mechanisms: pathway reachability analysis, route closure or segmentation, barrier interposition, sentinel receptor monitoring

Hotspot Pathway Prioritization · risk or failure variant · recognized

Prioritizes pathway controls where multiple vulnerabilities co-locate and small route differences create large harm differences.

• Distinct from parent: The parent can treat any pathway; this variant is explicitly prioritization under concentrated vulnerability.
• Use when: Average exposure looks manageable but harm clusters in specific places, populations, assets, or time windows; Control resources are insufficient to treat every route equally.
• Typical domains: environmental justice, disaster risk reduction, infrastructure resilience
• Common mechanisms: sentinel receptor monitoring, risk migration review, exposure sampling transect

Active Transfer Across an Atmospheric Path Break · active path break variant · recognized

Prevent reverse intrusion by replacing a direct bidirectional connection with pumped elevation followed by an open, atmospheric transfer into the downstream system.

• Distinct from parent: Exposure Pathway Interruption owns breaking a source-to-receptor route. Pumped elevation followed by open atmospheric discharge preserves forward transfer while removing a continuous reverse-pressure path; loss of lift, overflow, and path reclosure are narrower failures.
• Use when: A direct below-grade connection to an overloaded municipal sewer provides a reverse path into a building basement despite local check devices.
• Evidence (strong independent recurrence confirmed): US10837165B2; EPA — Air gap interrupts the path and may require secondary pumping downstream; EPA — Air gaps as physical separation against backflow

Near names: Source-Receptor Pathway Control, Source-Pathway-Receptor Modeling, Exposure Route Breakpoint Design, Multi-Barrier Exposure Control, Route of Exposure Control.

Editorial Notes

Problem Classification

Classification: Hazard Exposure & Uncontained Harm → Source–Pathway–Receptor Propagation

Problem kernel: hazard risk is discussed without an operative exposure route

Rationale: Source, transport pathway, and vulnerable receptor are not connected, preventing targeted interruption of actual propagation.

Independent corroboration: The earliest necessary condition in the frozen evidence is: A hazard is present, but the operative risk is unclear because the route by which it can reach vulnerable targets is hidden, fragmented, assumed, or described only at the level of broad exposure. That is a source pathway receptor propagation problem because A harmful source or contaminating fraction can reach new targets through migration, transfer, diffusion, or establishment pathways that controls do not see or sever.

Review outcome: Independent reviewer agreement; high confidence.