Residual Harm Accounting And Allocation¶

Name, measure, assign, and govern the harm that remains after defenses have done what they can.

Essence¶

Residual Harm Accounting and Allocation is for the moment after defenses, mitigation, adaptation, or repair have done what they can and someone still carries damage. The archetype makes that remainder visible as a governable object rather than an embarrassing residue. It asks: what harm passed through, who bears it, what response is owed or accepted, and what must change upstream so the same remainder is not normalized?

Compression statement¶

Residual Harm Accounting and Allocation treats loss after mitigation, adaptation, prevention, or defense not as a rounding error or public-relations residue, but as its own governance object. The archetype maps the control layers already tried, defines which harms are truly residual, records loss channels and affected bearers, handles attribution uncertainty, assigns responsibility or funding, chooses a response policy, and feeds the evidence back into future prevention.

Canonical formula: governed_residual_harm = ledger(loss_channels_after_defenses) + bearer_assignment + policy_response + dispute_review + prevention_feedback

Structural Problem¶

Layered defenses can create a misleading sense of completion. A levee holds for some neighborhoods but not others; a security program contains the breach but customers still suffer; a patient-safety system catches many errors but one patient is harmed; a platform removes most abuse while particular users carry severe residual damage. When success metrics center on the defense layer, the loss that survives it can become nobody’s formal problem.

The structural problem is not just that harm happened. It is that the harm sits after the main governance story: after prevention, after mitigation, after containment, after adaptation, after incident response. That position makes it easy to call the harm unfortunate, external, unavoidable, or already handled. The archetype creates a second governance object for the remainder.

Core Intervention¶

The intervention is a residual-harm governance loop. First, it maps the protective layers and declares the boundary between preventable harm and residual harm. Then it creates a loss-channel ledger, names affected bearers, records attribution and uncertainty, and assigns responsibility, funding, repair, transfer, or accepted burden. Finally, it keeps the record contestable and feeds the evidence back into future prevention and adaptation.

Key Components¶

Component	Description
Defense-Layer Context Map ↗	Describes the mitigation, adaptation, prevention, containment, or defense layers through which harm has already passed. The residual status of the harm only makes sense relative to the controls that were attempted, absent, overwhelmed, bypassed, or deemed infeasible.
Residual Harm Boundary ↗	Separates preventable or still-mitigable harm from harm that remains after reasonable control layers have been applied or exhausted. This boundary prevents actors from prematurely labeling avoidable damage as residual, while also preventing real residual harm from disappearing into vague risk language.
Loss-Channel Ledger ↗	Records residual harms as named channels, magnitudes, time horizons, reversibility classes, and evidence states rather than as an undifferentiated aggregate loss. A ledger makes the accounting unit explicit: deaths, displacement, ecological loss, lost output, trust damage, service interruption, cultural loss, and other channels may need different remedies.
Affected Bearer Map ↗	Identifies who or what actually bears each residual harm, including displaced parties, future parties, ecosystems, customers, operators, or institutions. Without a bearer map, loss becomes rhetorically acknowledged but operationally unowned.
Causal Attribution and Uncertainty Note ↗	Documents what is known, contested, probabilistic, or unknowable about the connection between hazard, defense layers, residual harm, and responsible actors. The archetype needs enough attribution to govern action without pretending that every residual loss has a clean single cause.
Responsibility and Funding Assignment ↗	Assigns decision authority, financing, repair responsibility, or accepted burden for each residual-harm channel. This component turns recognition into governance: someone must have authority and resources to compensate, repair, absorb, transfer, reduce, or explicitly accept the residual harm.
Policy Response Portfolio ↗	Defines the available responses to each loss channel, such as prevention escalation, compensation, restoration, relocation, insurance, reserve drawdown, redesign, memorialization, or explicit acceptance. Residual harm is rarely solved by one response. Different channels may require financial, operational, ecological, legal, symbolic, or adaptive remedies.
Distributional and Equity Review ↗	Checks whether residual harms and response burdens are being pushed onto weaker, less visible, less represented, or less able bearers. A technically accurate residual-loss ledger can still be unjust if the policy allocates the remaining harm to those least able to contest or absorb it.
Remediation or Compensation Path ↗	Provides the concrete route by which eligible residual losses are repaired, offset, compensated, substituted, or otherwise addressed. This path may involve funds, service credits, replacement assets, relocation support, ecological restoration, apologies, cure provisions, or other make-whole procedures.
Residual Acceptance Record ↗	Records any harm that is consciously accepted, not compensated, not repaired, or deferred, together with the rationale and review trigger. Explicit acceptance is safer than silent abandonment, but it must be reviewable and cannot be used to launder preventable harm.
Feedback to Defense Layers ↗	Routes residual-loss evidence back into mitigation, adaptation, prevention, design, and preparedness decisions. Loss accounting should reduce future residual harm, not merely normalize paying for repeated damage.
Dispute and Revision Process ↗	Allows affected parties to challenge the ledger, attribution, eligibility, valuation, bearer assignment, or chosen policy response. Residual harm is often politically and ethically contested; a revision path preserves legitimacy and corrects undercounting.

Optional Components¶

Evidence Preservation Protocol¶

Preserves records, measurements, testimony, and chain-of-custody evidence needed to later account for residual loss. Useful when harms unfold slowly or are likely to be contested.

Temporal Loss Horizon¶

Specifies whether the accounting window includes immediate, delayed, cumulative, irreversible, intergenerational, or recurring losses. Many residual harms are undercounted because accounting stops before delayed loss appears.

Non-Monetary Loss Register¶

Records losses that cannot be adequately reduced to market value, such as cultural loss, ecological loss, dignity loss, trust loss, or loss of place. The register does not solve commensuration; it prevents non-monetary losses from being treated as zero.

Common Mechanisms¶

Mechanism	Description
Loss and Damage Register ↗	Type: `accounting_artifact`. A structured record of residual harm channels, evidence, affected bearers, response status, and unresolved gaps.
Post-Incident Residual-Loss Assessment ↗	Type: `assessment_protocol`. A review after a hazard, breach, failure, disaster, or policy intervention that separates prevented loss from residual loss and assigns follow-up actions.
Claims and Compensation Fund ↗	Type: `financing_mechanism`. A funded route for eligible residual losses to be paid, repaired, or supported without renegotiating every case from zero.
Residual Harm Eligibility Rule ↗	Type: `governance_rule`. A rule that determines which harms qualify for residual-harm treatment, which are still preventable, and which require another remedy path.
Adaptation Gap Report ↗	Type: `planning_report`. A report that identifies where existing adaptation, mitigation, or defense measures leave residual harms unhandled.
Harm-Bearer Agreement ↗	Type: `agreement_or_contract`. A formal allocation of who carries, pays for, insures, repairs, or governs specific residual harms.
Managed Retreat or Relocation Package ↗	Type: `remediation_program`. A program that addresses residual place-based loss where continued defense or restoration is infeasible or unjust.
Residual-Risk Acceptance Signoff ↗	Type: `decision_record`. A signed record that a residual risk or harm is knowingly accepted, including who has authority to accept it and when it must be reviewed.
Restorative Remedy Plan ↗	Type: `remediation_plan`. A plan for repair, service restoration, ecological restoration, apology, trust rebuilding, or other non-purely-monetary redress.
After-Action Loss Feedback Review ↗	Type: `learning_review`. A learning review that uses residual-loss evidence to strengthen prevention, defense-in-depth, adaptation, and early-warning layers.

Parameter Dimensions¶

Important parameters include the number and independence of defense layers, the residual boundary standard, loss-channel taxonomy, evidence quality, reversibility, time horizon, monetary versus non-monetary valuation, affected-party voice, funding authority, dispute process, and feedback strength into upstream prevention.

Invariants to Preserve¶

Residual harm must remain explicit, bearers must be named, uncertainty must be documented without paralyzing response, and acceptance must be reviewable. The archetype must not become a mechanism for laundering preventable harm into an accepted residue. Every ledger should preserve a route back to stronger prevention, mitigation, adaptation, or containment.

Neighbor Distinctions¶

This archetype is close to residual risk monitoring, compensating transactions, externality internalization, and welfare analysis, but it is not identical to any of them. Residual risk monitoring follows exposure over time; this archetype governs actual harm. Compensating transactions are one remedy path; this archetype decides which residual harms need compensation, repair, transfer, acceptance, or prevention feedback. Externality internalization pulls spillovers into decision boundaries; this archetype handles the remainder that still passes through. Welfare analysis can forecast distributional effects; this archetype records and governs the residual loss that actually lands.

Tradeoffs and Failure Modes¶

The main tradeoff is between decisiveness and attribution quality. Waiting for perfect causality can abandon affected parties; acting with weak evidence can misallocate funds or responsibility. Another tradeoff is between closure and revisability: harmed parties need timely response, but delayed, cumulative, and non-economic losses may appear later. The most dangerous failure mode is residualization of preventable harm, where actors use the language of inevitability to avoid redesign. A second major failure mode is silent burden shifting, where the ledger records aggregate damage but not who actually carries it.

Examples¶

Climate policy: losses that remain after mitigation and adaptation are recorded as property, livelihood, health, ecological, cultural, and displacement channels, each with response policies.
Cybersecurity: after defense-in-depth fails, customer harm is handled through notification, monitoring, reimbursement, support, and control redesign rather than merely closing the technical ticket.
Healthcare: residual patient harm after safety barriers is disclosed, supported, reviewed for compensation, and used to improve process controls.
Infrastructure: damage after flood defenses is routed to insurance, reserve funds, buyouts, rebuilding rules, or explicit accepted-risk records.

Non-Examples¶

A risk register before harm occurs is not this archetype. A normal rollback of a reversible workflow error is closer to compensating transaction. An insurance price by itself is not enough because it may transfer money risk without recording affected-party harm or non-economic loss. A containment plan that stops damage propagation is a neighbor, but it does not decide what happens to damage already borne downstream.

Review Notes¶

The full draft is recommended because the disposition check found no accepted archetype that directly covers residual harm after defenses as an accounting unit with bearer and policy assignment. The closest neighbors should remain linked in boundary metadata to prevent future duplicate drafting or inappropriate merging.

Abstractions this archetype builds on — directly (a source ingredient) or as a related pattern. Links follow the typed catalog namespace.

Built directly on (12)

Accountability: Responsibility for actions.
Allocation: Assign a limited supply across competing claimants under a feasibility constraint, independent of which criterion fills in the rule.
Defense In Depth: Stacking multiple independent protective layers between threat and asset so that only a correlated breach across all layers produces total loss.
Equity: Context-sensitive fairness.
Externality: Spillover effects.
Loss And Damage: The residual harm that passes through after every layer of defense, treated as its own accounting unit and assigned a bearer and a policy.
Responsibility Attribution: Assigning credit or blame for an outcome to a particular agent.
Risk: Exposure to a known distribution of possible outcomes.
Risk Migration: An intervention that blocks a hazard at one site without absorbing the generative pressure behind it does not eliminate the hazard but relocates it across a permeable boundary to a less-monitored region, often where controls are weaker and measurement does not follow.
Risk Transfer: Shifting an adverse-outcome distribution from one party to another for a price, so the loss lands on whoever can bear it best.
Swiss Cheese Model (Layered Defense with Aligning Holes): Catastrophe occurs only when a hazard finds a trajectory through a hole in every serial defensive layer at once, so the key variable is the correlation of holes across layers.
Yield Loss: The gap between a transformation's theoretical maximum output and its realized output, decomposed under a balance constraint into named loss channels that sum to the deficit and can be ranked and attacked.

Also references 21 related abstractions

Boundary: Defines system limits.
Causality: Cause-effect relationships.
Containment: Holding a hazard, process, or agent within a deliberately maintained perimeter to prevent its spread or uncontrolled interaction with the surroundings.
Cost–Benefit Analysis: Evaluate decisions.
Defeat In Detail: A globally weaker attacker beats a globally stronger but distributed adversary by achieving local superiority and engaging the parts sequentially before they can combine.
Escape and Leakage: Constrained quantities exit through unintended pathways.
Fault Tolerance: Continue operating under failure.
Feedback: Outputs influence inputs.
Intervention-Coupled Harm: A beneficial intervention produces its harm through the same causal channel that produces its benefit, so the two cannot be tuned apart.
Managed Retreat: Withdrawing deliberately and in advance to a defensible boundary when the cost of holding a position rises past its value, before forced displacement closes the option.

▸ Show 11 more

Variants¶

Narrower or domain-specific specializations that share this archetype's core structure. Recognized variants are established; candidate variants are provisional.

Climate Loss-and-Damage Governance · domain variant · recognized

A climate and disaster-policy variant for accounting for losses that remain after mitigation and adaptation, then assigning finance, support, repair, retreat, or accepted burden.

Distinct from parent: The parent is cross-domain residual-harm governance; this variant emphasizes climate attribution, adaptation gaps, finance, relocation, non-economic loss, and intergenerational equity.
Use when: Climate, disaster, or ecological harms remain after feasible mitigation, adaptation, and protective infrastructure; Affected communities need a route for support that is not reducible to ordinary insurance, generic development aid, or future prevention; Irreversible and non-economic losses need to be named rather than treated as zero because they are hard to price.
Typical domains: environmental climate, disaster risk reduction, public policy, international governance
Common mechanisms: loss and damage register, adaptation gap report, claims and compensation fund, managed retreat or relocation package

Post-Incident Residual-Loss Allocation · risk or failure variant · recognized

An incident-response variant that accounts for harm remaining after containment, remediation, and service restoration, then assigns repair and bearer responsibilities.

Distinct from parent: The parent covers any residual harm after defenses; this variant centers incident closure and residual obligations after response work.
Use when: An incident response has contained the acute failure but customers, patients, residents, workers, or downstream systems still bear residual harm; The organization must distinguish direct repair, compensation, apology, risk acceptance, and prevention feedback.
Typical domains: cybersecurity, healthcare, infrastructure, public administration, platform governance
Common mechanisms: post incident residual loss assessment, after action loss feedback review, restorative remedy plan

Residual Harm Acceptance Case · governance variant · candidate

A governance variant that explicitly documents why a residual harm will not be further prevented, compensated, transferred, or repaired at present.

Distinct from parent: The parent includes many response policies; this variant focuses on the ethically risky case of choosing acceptance.
Use when: A system has remaining harm that decision makers believe cannot feasibly be eliminated or remedied now; Silent non-action would be less legitimate than explicit acceptance with authority, reasons, review triggers, and affected-party visibility.
Typical domains: engineering safety, public policy, medicine, environmental management
Common mechanisms: residual risk acceptance signoff, harm bearer agreement

Non-Economic Loss Recognition · domain variant · candidate

A variant that prevents residual harms from being ignored merely because they are hard to price, such as cultural, ecological, dignity, trust, or place-based loss.

Distinct from parent: The parent includes monetary and non-monetary harms; this variant focuses on preserving non-economic loss as a named object of governance.
Use when: Residual harm includes goods that cannot be fully restored or valued through market price; A purely monetary ledger would erase or underweight the most important loss channels.
Typical domains: climate policy, cultural heritage, healthcare, community recovery
Common mechanisms: loss and damage register, restorative remedy plan

Near names: Residual Harm Governance, Residual Loss Accounting, Loss Allocation Governance, Damage Bearer Assignment, Uncompensated Loss Management.