Risk Migration¶

Version: v1 · 2026-08-24 · History
Prime #: 1150
Origin domain: Systems Thinking & Cybernetics
Subdomain: safety and reliability → Systems Thinking & Cybernetics

Core Idea¶

Risk migration is the structural pattern in which an intervention applied to reduce a hazard at one site, in one actor, or in one phase does not eliminate the hazard but relocates it — to another site, actor, phase, or subsystem — often where it is harder to see, weaker controls apply, or accountability is diluted. The intervention changes where the loss falls without changing the underlying generative pressure that produces it. The structural commitment is that some quantity of demand-for-failure is conserved across the boundary the intervention drew, and an unmodelled return-path carries it across that boundary.

The pattern is distinct from a deliberate, priced trade with a counterparty. Risk migration is unintended displacement: a single agent intervenes on one part of a coupled system without modelling the routes by which the hazard could re-emerge elsewhere. It is structural because the displacement happens by the geometry of the system rather than by anyone's choice — the intervention removed a sink without removing the source, and the flow finds the next path of least resistance. Three conditions make migration likely: a conserved or partially conserved generative pressure behind the hazard (demand, energy, motivation, throughput) that the intervention does not absorb; a permeable boundary between the protected zone and a less-protected one (an unmonitored actor, an unregulated jurisdiction, a downstream phase, a substitute pathway); and bounded local attention, so that the protected site is measured and the migration destination is not. Where all three hold, removing the hazard from one place reliably grows it somewhere else, often by a similar magnitude.

How would you explain it like I'm…

The Squeezed Balloon

If you squeeze one end of a long balloon, the air doesn't go away — it just bulges out somewhere else. Lots of dangers work like that: stop something bad in one spot and it pops up in another, often where nobody's looking. You didn't get rid of the trouble; you just moved it.

Danger Just Moves

Risk migration is when you fix a danger in one place but it doesn't actually disappear — it moves somewhere else, often where it's harder to see or where there are weaker safeguards. Like squeezing a balloon: the air just bulges out a different spot. The thing pushing the danger (the demand, the pressure, the energy) is still there; you only blocked one exit, so it finds the next easiest path. This is different from making a deal where someone agrees to take the risk on purpose — here nobody chose it; it slipped across the boundary by itself because the people fixing one spot didn't watch where it could pop out next.

Hazard Relocated, Not Removed

Risk migration is the pattern where an intervention aimed at reducing a hazard at one site, actor, or phase doesn't eliminate the hazard but relocates it — to another site, actor, phase, or subsystem, often where it's harder to see or less controlled. The intervention changes where the loss falls without changing the underlying pressure that generates it; some amount of "demand for failure" is conserved across the boundary the intervention drew, and an unmodelled return-path carries it across. It's distinct from a deliberate, priced trade with a counterparty: this is unintended displacement, where one agent intervenes on part of a coupled system without modelling the routes by which the hazard re-emerges. Three conditions make it likely: a conserved or partly conserved generative pressure the intervention doesn't absorb; a permeable boundary to a less-protected zone; and bounded local attention, so the protected site is measured but the destination isn't. Where all three hold, removing the hazard from one place reliably grows it elsewhere, often by a similar magnitude.

Risk migration is the structural pattern in which an intervention applied to reduce a hazard at one site, in one actor, or in one phase does not eliminate the hazard but relocates it — to another site, actor, phase, or subsystem — often where it is harder to see, weaker controls apply, or accountability is diluted. The intervention changes where the loss falls without changing the underlying generative pressure that produces it. The structural commitment is that some quantity of demand-for-failure is conserved across the boundary the intervention drew, and an unmodelled return-path carries it across that boundary. The pattern is distinct from a deliberate, priced trade with a counterparty: risk migration is unintended displacement — a single agent intervenes on one part of a coupled system without modelling the routes by which the hazard could re-emerge elsewhere. It is structural because the displacement happens by the geometry of the system rather than by anyone's choice: the intervention removed a sink without removing the source, and the flow finds the next path of least resistance. Three conditions make migration likely: a conserved or partially conserved generative pressure behind the hazard (demand, energy, motivation, throughput) that the intervention does not absorb; a permeable boundary between the protected zone and a less-protected one (an unmonitored actor, an unregulated jurisdiction, a downstream phase, a substitute pathway); and bounded local attention, so the protected site is measured and the migration destination is not. Where all three hold, removing the hazard from one place reliably grows it somewhere else, often by a similar magnitude.

Structural Signature¶

a conserved generative pressure behind a hazard — a local intervention that blocks one path without absorbing the pressure — a permeable boundary between protected and less-protected zones — a return path along which the hazard re-emerges — a measurement asymmetry instrumenting only the protected zone — a conservation invariant: the local win is matched by a loss elsewhere

The pattern is present when each of the following holds:

A generative pressure. Some quantity of demand-for-failure — demand, energy, motivation, adversary effort, throughput — that produces the hazard and is at least partially conserved.
A non-absorbing intervention. A control applied at one site that blocks a path or removes a sink without reducing the generative pressure itself.
A permeable boundary. A drawn boundary between the protected zone and a less-protected one — an unmonitored actor, an unregulated jurisdiction, a downstream phase, a substitute pathway — that the pressure can cross.
A return path. A route by which the un-absorbed pressure re-emerges as hazard on the far side of the boundary — substitution, regulatory arbitrage, niche colonization, stress concentration.
A measurement asymmetry. Bounded local attention instruments the protected site and leaves the migration destination unmeasured, so relocation reads as elimination.
A conservation invariant. Because the pressure was not absorbed, the reduction at the protected site is matched by a rise at the destination — relocation, not elimination.

The components compose so that the diagnostic move is a conservation check: the structure separates elimination (pressure absorbed) from relocation (only the path changed), and predicts that the only non-migrating interventions are those that absorb the pressure or contain it at the system boundary rather than at an internal sub-boundary.

What It Is Not¶

Not risk itself. risk is the standing exposure to a hazardous outcome; risk migration is a dynamic by which an intervention relocates that exposure rather than removing it. Risk is the quantity; this prime is a conservation law about how it moves.
Not systemic risk. systemic_risk is the property of a hazard propagating to collapse the whole; risk migration is the relocation of a hazard across a boundary, which may or may not become systemic.
Not propagation. propagation is the spreading of an effect along couplings; migration specifically conserves a generative pressure and reroutes it to a less-monitored zone, with a measurement asymmetry that reads relocation as elimination.
Not deliberate risk transfer. risk_transfer is a priced, contractual handoff to a willing counterparty; migration is unintended displacement with no party choosing the boundary or the destination.
Not escape and leakage. escape_and_leakage is the loss of a contained quantity through a barrier; migration is the rerouting of an un-absorbed generative pressure along a return path the intervention left open.
Common misclassification. Celebrating "the problem went away here" as elimination. Catch it with a conservation check: if the generative pressure was not absorbed, the local win must be matched by a loss at an unmeasured destination — instrument site B before declaring victory.

Broad Use¶

The pattern recurs wherever a partial control is installed on a coupled flow. In process and aviation safety, removing one vulnerable control surface shifts workload to an adjacent task, and defending one accident scenario raises the probability of an adjacent one — the mechanism by which layered safeguards fail.^[1] In traffic engineering, restricting one route displaces congestion to adjacent routes, and signalising one dangerous intersection increases crashes a block away.^[2] In public health and drug policy, interdicting one substance shifts use to substitutes, often more harmful, as suppression of one opioid drove heroin and then fentanyl.^[3] In financial regulation, tightening capital rules on regulated banks drives equivalent intermediation into shadow banking and private credit — the regulatory-arbitrage pattern.^[4] In ecology, removing apex predators releases mesopredators, and eradicating one weed lets the next colonist take the niche.^[5] In software, optimising one bottleneck reveals the next and fixing one race condition surfaces another. In cybersecurity, hardening one attack surface pushes adversary effort to softer surfaces — endpoints, supply chain, social engineering.^[6] In antimicrobial resistance, suppressing one pathogen with one antibiotic opens niches for resistant strains.^[7] And in mechanics, stress relieved at one geometric site concentrates at another, as in stress shielding around implants.^[8]

Clarity¶

Naming risk migration as a structural move separates four things commonly merged in safety and policy talk: elimination (the generative pressure is absorbed), relocation (only the path changed), transfer (someone deliberately and contractually took it), and concealment (it is unchanged but no longer measured). Many proudly celebrated interventions are relocations dressed up as eliminations, because measurement stayed inside the protected zone. Forcing the four apart is what lets an analyst tell a genuine reduction from a displacement that only looks like one.

A second clarification follows: "the problem went away here" is a partial sentence, and the analyst's habit should be to ask where else before claiming success. This converts a single-site evaluation question into a flow-conservation question. By insisting that an intervention's effect be assessed across the whole coupled system rather than at the protected site alone, the frame defuses the most common error — reading a local win as a global one — and replaces it with a conservation check: if the generative pressure was not absorbed, the win at the protected site must be matched by a loss somewhere the measurement net did not reach.

Manages Complexity¶

Risk migration compresses a sprawling catalogue of unintended-consequence failures across safety, regulation, ecology, software, and public health into one schema: an intervention at site A, an unmodelled boundary between A and B, a generative pressure that survives the intervention, and a return-path along which the hazard re-emerges at B. Once the schema is in hand, an analyst can read a novel intervention and ask four diagnostic questions — what is the generative pressure, what boundary did the intervention draw, what routes cross that boundary, and what does the measurement net at site B look like.

The compression matters because without it each migration appears as an idiosyncratic anomaly — "regulators didn't foresee shadow banking," "engineers didn't predict the stress at the adjacent rivet," "epidemiologists didn't expect fentanyl" — when all three are the same structural failure to model the flow. By reducing them to one schema with four questions, the frame turns a series of surprises into instances of a single predictable pattern, and it tells the analyst what to instrument: the predicted migration destination, which is precisely the site that bounded local attention would otherwise leave unmeasured. That single redirection of measurement is what converts a recurring "we never saw it coming" into a routine "we instrumented site B in advance."

Abstract Reasoning¶

Treating migration as a unit enables substrate-independent reasoning about whether an intervention removes or relocates hazard. The asymmetric test: an intervention that absorbs the generative pressure — reducing demand, dissipating energy, satisfying motivation — cannot produce migration, while an intervention that only blocks one path while leaving generative pressure intact reliably does. This converts dozens of separate engineering and policy disputes into one question: which kind of intervention did we just apply? It also yields a structural impossibility result: in a system with conserved generative pressure and permeable boundaries everywhere, no local intervention can eliminate hazard — only redistribute it — so the only effective interventions are those that absorb (reduce demand, dissipate energy, change preferences, raise the global price of the hazard-producing activity) or that contain at the system boundary rather than at an internal sub-boundary.

The frame also predicts a characteristic anti-pattern: when an organisation reports a safety win, the post-event analyst should look for the matched rise at the adjacent site, and the absence of such a search is itself a diagnostic. The reasoning is genuinely substrate-neutral because the conservation-of-generative-pressure mechanic applies to demand, energy, motivation, and throughput alike, and the prime includes clean biological and ecological instances (mesopredator release, resistance emergence) alongside the human ones.^[9] Its vocabulary — risk, intervention — carries a mild policy flavour, which places it at the structural end of a mixed-structural classification, but the load-bearing structure is bare conservation-flow geometry rather than anything institution-specific.

Knowledge Transfer¶

The structural interventions transfer cleanly because the roles map across substrates: the generative pressure maps to demand, adversary effort, evolutionary pressure, mechanical load, or traffic volume; the permeable boundary maps to an unregulated jurisdiction, a softer attack surface, an adjacent niche, an adjacent rivet, or a parallel route; the return path maps to substitution, regulatory arbitrage, niche colonisation, or stress concentration; and the measurement asymmetry recurs identically wherever the protected zone is instrumented and the destination is not. Because the roles correspond, the absorptive fix — act on the generative pressure or at the system boundary, not at an internal sub-boundary — is the same move in every domain.

The documented transfers are concrete and bidirectional. Generative- pressure analysis links harm-reduction reasoning in drug policy (the substitute is worse than the substance) to predator-removal reasoning in ecology (mesopredator release) and to capital-flight reasoning in financial regulation, all of which prescribe designing the intervention to absorb pressure or accepting that it will migrate. Boundary mapping links cybersecurity's "harden one surface and the adversary moves to another" to "patch one vulnerability class and research displaces to another," with the shared response of modelling adversary effort as a budget that flows along the boundary of resistance. The stress-shielding pattern in orthopaedic implants gives a clean engineering language for the regulator's shadow-banking problem: relieving load at one site concentrates it at the adjacent site that now bears it. Flow-conservation accounting links the policy-evaluation failure of measuring only at the protected site to the structural fix of instrumenting the predicted migration destinations — substitute markets, adjacent jurisdictions, downstream phases. A city that installs a roundabout and cuts crashes eighty percent at that intersection while the borough-level injury rate stays flat — because crashes rose on the parallel routes drivers now take — exhibits the same four-part schema (pressure, boundary, route, measurement) as Basel capital rules driving intermediation into private credit, an ICU eliminating central-line infections while downstream catheter infections rise to fill the count,^[10] and a forest service eradicating one invasive while the second-place invader colonises the cleared niche. The transfer is largely structural — the conservation mechanic is the same in every substrate — but mixed rather than pure, because the prime's vocabulary carries a faint policy flavour even as its biological and mechanical instances confirm that the underlying geometry is substrate-neutral.

Examples¶

Formal/abstract¶

Mesopredator release in ecology is the clean substrate-neutral instance. Treat the generative pressure as the prey-consumption demand in a food web: a fixed energetic throughput must flow somewhere. An apex predator suppresses a mid-level predator (the mesopredator), which in turn suppresses small prey.^[11] The intervention is removing the apex predator — eradication or habitat loss — which blocks the apex's predation path without absorbing the system's consumption throughput. The permeable boundary is the trophic level: nothing prevents the released mesopredator from expanding. The return path is competitive release — the mesopredator population irrupts and its predation on small prey rises, often above the level the apex predator's direct predation had imposed. The conservation invariant is exact in energetic terms: the throughput the apex predator captured does not vanish but reroutes through the mesopredator. The measurement asymmetry is that managers monitor the apex-predator target and the charismatic small prey, not the mesopredator's expansion, so the rebound is read as anomaly. The diagnostic the structure dictates: before celebrating apex-predator control, instrument the predicted migration destination — the mesopredator level — and recognize that only interventions that absorb the throughput (restoring whole-web regulation, reducing the resource base) avoid mere relocation.

Mapped back: The trophic cascade instantiates every role — conserved generative pressure (consumption throughput), non-absorbing intervention (apex removal), permeable boundary (trophic level), return path (competitive release), measurement asymmetry, conservation invariant — with no human practice involved, confirming the geometry is substrate-neutral.

Applied/industry¶

In financial regulation, tightening capital and leverage rules on regulated banks is a control applied at one site. The generative pressure is the standing demand for credit intermediation and yield, which the rule does not absorb; the permeable boundary is the regulatory perimeter separating banks from non-bank lenders; the return path is regulatory arbitrage — intermediation migrates into shadow banking, private credit, and money-market funds where the rules are weaker; the measurement asymmetry is that supervisors instrument the regulated banks and not the migration destination, so the system reads "banks are safer" while aggregate systemic risk merely relocated. The conservation check the prime dictates: instrument the predicted destination (non-bank credit) in advance, and recognize that only pressure-absorbing measures (reducing the leverage demand itself, or containing at the system boundary rather than the bank sub-boundary) avoid migration. The identical structure governs public-health drug policy: interdicting one opioid does not absorb the underlying demand, so use migrates to substitutes — the suppression of prescription opioids driving heroin and then more lethal fentanyl, with overdose harm rising at the unmonitored destination.^[3] And in enterprise cybersecurity, hardening one attack surface does not absorb adversary effort (a conserved budget), so the adversary's effort migrates to softer surfaces — endpoints, supply chain, social engineering — and the fix is to model adversary effort as a flow and instrument the surfaces it will move to.

Mapped back: Across financial regulation, drug policy, and cybersecurity the same roles recur — a conserved generative pressure, a non-absorbing local control, a permeable boundary, a return path, and a measurement asymmetry — and the same intervention transports: do a conservation check, instrument the migration destination in advance, and absorb the pressure or contain at the system boundary rather than an internal sub-boundary.

Structural Tensions¶

T1 — Conservation versus Dissipation (sign/direction). The prime assumes the generative pressure is conserved across the boundary, but in reality conservation is partial — some interventions genuinely dissipate pressure even while relocating part of it. The failure mode is conservation absolutism: treating every local win as pure relocation and refusing interventions that net-reduce harm because they did not absorb all of it. The boundary is with vaccine_escape, where the pressure (selection) is genuinely conserved. Diagnostic: measure the pressure before and after at both sites; if the destination rise is smaller than the source fall, the pressure was partly dissipated and the intervention had real net value.

T2 — Absorb versus Contain (scopal). The frame says only absorbing the pressure or containing at the system boundary avoids migration, but absorption (reduce demand) and system-boundary containment are often infeasible or far costlier than local controls. The failure mode is paralysis-by-purity: refusing all sub-boundary interventions because they migrate, leaving the hazard wholly unaddressed. Diagnostic: is a pressure-absorbing intervention actually available at acceptable cost? If not, a migrating local control plus instrumentation of the destination may dominate doing nothing — the question is the destination's measurement, not the migration itself.

T3 — Predicted Destination versus Unforeseen Path (measurement). The remedy is to instrument the predicted migration destination in advance, but the return path the pressure actually takes may be one the analyst did not model — the flow finds the next least-resistance path, which may not be the obvious one. The failure mode is destination tunnel vision: instrumenting the anticipated site B while the pressure escapes to an unmodeled site C. Shared structure with sanctuary_effect's boundary mapping. Diagnostic: enumerate all permeable boundaries, not just the salient one; an instrumented destination that stays flat may mean the pressure went somewhere you are not watching.

T4 — Local Accountability versus System View (scalar). Each local actor optimizes their own protected zone and is measured on it, so migration is rational at the local level even when destructive globally. The failure mode is local-optimum lock-in: every site reports a win while the system-level hazard is unchanged, and no actor is accountable for the destination. This is the local-global tension shared with unevenness_waste. Diagnostic: who measures the aggregate across all sites? If accountability stops at the protected zone, relocation will reliably be reported as elimination.

T5 — Intervention Timing versus Adaptive Return (temporal). Migration is not instantaneous — the return path takes time to develop (regulatory arbitrage builds, niches colonize, adversaries re-tool), so an early measurement at the destination reads clean before the pressure arrives. The failure mode is premature-success declaration: celebrating elimination during the lag before migration completes. Boundary with withdrawal_rebound's timescale separation. Diagnostic: has enough time elapsed for the return path to develop? A destination that is quiet immediately after the intervention is not yet evidence of non-migration.

T6 — Deliberate Transfer versus Unintended Displacement (coupling). The prime carefully distinguishes unintended migration from a priced, contractual transfer, but the same move can be both — an actor may deliberately migrate risk to an unmonitored party and disguise it as elimination. The failure mode is concealment-as-migration: treating a strategic offload as an innocent structural displacement, missing the agency behind it. Boundary with agency_problem and risk concealment. Diagnostic: did anyone benefit from the relocation and choose the boundary? Unintended displacement has no beneficiary selecting the path; deliberate transfer does.

Structural–Framed Character¶

Risk migration sits on the structural side of the middle of the structural–framed spectrum, a mixed-structural prime with an aggregate of 0.4. Its load-bearing mechanic is a conservation law — a generative pressure that is not absorbed must reroute across a permeable boundary along a return path — and conservation-of-flow geometry is genuinely substrate-neutral, which is what keeps the prime on the structural side of a vocabulary that leans toward policy.

The diagnostics split cleanly. The decisive one is human-practice-bound, scored at zero: the conservation mechanic runs in physical and biological substrates with no human practice anywhere in them. Mesopredator release is the cleanest instance — an apex predator removed, consumption throughput rerouted through a released mid-level predator, the conservation invariant exact in energetic terms — and stress shielding around an orthopaedic implant is another, where load relieved at one geometric site concentrates at the adjacent one. Neither involves an interpreter; the displacement happens by the geometry of the coupled system, not by anyone's reading of it. The remaining diagnostics sit at the midpoint and carry the faint policy flavor. The vocabulary half-travels: "risk" and "intervention" import a mild regulatory-safety lexicon, even as the underlying terms (pressure, boundary, return path, conservation) are bare. Evaluative weight is moderate — "migration" names an unintended displacement to be caught, a hazard relocated rather than removed — and institutional origin sits at the systems-engineering / safety tradition without being constitutive. Invoking the prime half-imports a frame (do a conservation check, instrument the predicted destination) and half-recognizes a flow already present.

The prime's substrate reasoning lands the grade exactly: the conservation-of-generative-pressure mechanic applies to demand, energy, motivation, and throughput alike, and the clean biological and ecological instances confirm the geometry is substrate-neutral even though the vocabulary carries a policy tint. That is the mixed-structural signature — a real conservation law that travels across physical, biological, and human substrates, dressed in a home lexicon it has not fully shed but which the non-human instances prove is inessential.

Substrate Independence¶

Risk migration is a strongly substrate-independent prime — composite 4 / 5 on the substrate-independence scale. Its domain breadth is maximal: the conserved-pressure-flow displacement recurs with the same structural force across process and aviation safety (defending one accident scenario raising an adjacent one), traffic engineering (restricting one route displacing congestion), drug policy (interdicting one substance driving use to fentanyl), financial regulation (capital rules driving intermediation into shadow banking), ecology (mesopredator release, weed succession), software (each bottleneck revealing the next), cybersecurity (hardening one surface pushing effort to softer ones), antimicrobial resistance, and mechanics (stress shielding around an implant). The structural-abstraction component is high because the load-bearing object is a conservation invariant — generative pressure displaced rather than removed across a permeable boundary — that commits to no medium and applies to demand, energy, motivation, and mechanical load alike; the clean non-human instances (mesopredator release, stress shielding) carry every role with no interpreter present, demonstrating the geometry is genuinely medium-neutral. Transfer evidence is maximal and documented: the same conservation check and the same remedy (instrument the predicted destination, absorb the generative pressure rather than just blocking the site) move unchanged across physical, biological, and institutional substrates. Only a faint regulatory-safety tint in the words "risk" and "intervention" — inessential, as the biological cases prove — keeps the composite at 4.

Composite substrate independence — 4 / 5
Domain breadth — 5 / 5
Structural abstraction — 4 / 5
Transfer evidence — 5 / 5

Relationships to Other Abstractions¶

Current abstraction Risk Migration Prime

Parents (2) — more general patterns this builds on

Risk Migration is a kind of, typical Propagation Prime

Loosely a constrained kind of spread (a hazard re-emerges along a return path), but the dossier argues propagation does not prevail — migration adds conservation and drawn-boundary relocation and measurement asymmetry that propagation lacks.
Risk Migration presupposes Risk Prime

Risk migration operates on a pre-existing hazard exposure — it relocates a conserved generative pressure across a boundary.

Children (2) — more specific cases that build on this

Risk Transfer Without Reduction Domain-specific is a kind of Risk Migration

Risk Transfer Without Reduction is the climate-adaptation specialization of risk migration, adding a voiceless destination and a maladaptation verdict to an unreduced displaced hazard.
Vaccine Escape Prime decompose Risk Migration

's T1 names vaccine_escape as the case where the pressure (selection) is genuinely conserved — a biological instance of risk migration's conservation mechanic.

Hierarchy paths (4) — routes to 4 parentless roots

Risk Migration → Propagation

Show alternative paths (3)

Neighborhood in Abstraction Space¶

Risk Migration sits among the more crowded primes in the catalog (33^rd percentile for distinctiveness): several abstractions describe nearly the same structure, so a description that fits it will tend to fit its neighbors too — transporting it usually means disambiguating within this family rather than landing on it exactly.

Family — Boundary Enclosure & Control Evasion (8 primes)

Nearest neighbors

Computed from structural-signature embeddings · 2026-09-10

Not to Be Confused With¶

The nearest existing prime by embedding is risk, at near-identical similarity, and the two must be kept sharply apart. Risk is the standing structure of exposure — a hazard, a probability distribution over outcomes, and a magnitude of loss. It is a static description of how exposed something is. Risk migration is not a description of exposure but a conservation law about how exposure moves under intervention: when a control blocks one path without absorbing the generative pressure behind the hazard, the exposure does not vanish but reroutes to a less-monitored zone. Risk answers "how exposed are we, here, now?"; risk migration answers "when we intervened here, where did the exposure go?" The practitioner who holds only risk can quantify exposure at each site but has no machinery to predict that reducing it at the protected site will grow it at an unmeasured destination — which is the single most common way a celebrated safety win turns out to be an illusion.

A second genuine confusion is with risk_transfer, the candidate prime naming the deliberate, priced handoff of risk to a willing counterparty (insurance, hedging, indemnity clauses). Both move risk from one party to another, but the defining contrast is agency and intentionality. Risk transfer has a beneficiary who chooses the boundary and a counterparty who is compensated for accepting the exposure; it is a contractual, accounted-for redistribution. Risk migration is unintended displacement: no one chose the destination, no one was compensated, and the relocation happens by the geometry of the coupled system rather than by anyone's decision. The distinction is load-bearing because it determines where to look for the problem. In transfer, the exposure is known and on someone's books; in migration, it is precisely off the books — at the unmonitored destination the measurement net never reached. The dangerous hybrid is a strategic offload disguised as innocent structural displacement, which is why the practitioner must always ask whether anyone benefited from the relocation and selected the path.

A third confusion is with propagation. Propagation is the spreading of an effect along the couplings of a system — a disturbance traveling outward through a network. Risk migration is narrower and carries an extra invariant: a conserved generative pressure that is not dissipated but rerouted, plus a measurement asymmetry that makes the relocation read as elimination. Propagation can dissipate as it spreads (a shock attenuating across hops); migration's signature is that the pressure is at least partially conserved, so the local reduction is matched by a rise elsewhere. Propagation describes the spread of an effect; migration describes the relocation of a hazard under an intervention that failed to absorb its source. A practitioner who frames a displacement as mere propagation may expect attenuation and miss that the full hazard has simply moved to where no one is watching.

For a practitioner these distinctions route the response. If the task is to quantify standing exposure, it is risk; if someone deliberately and contractually handed exposure to a compensated counterparty, it is risk_transfer; if an effect is spreading and attenuating along couplings, it is propagation; and if a non-absorbing local intervention has rerouted a conserved generative pressure to an unmonitored zone where relocation reads as elimination, it is risk migration — the only one whose remedy is a conservation check and pre-instrumentation of the predicted destination.

Solution Archetypes¶

Solution archetypes in the catalog that build on this prime — directly (this prime is a source ingredient) or as a related prime.

Built directly on this prime (6)

Also a related prime in 9 archetypes

Attrition Contest Exit Design: Turn a costly “who can endure longer” contest into a bounded decision with visible burn rates, exit criteria, settlement channels, and face-saving off-ramps.
Cascade Pathway Management: Manage chain reactions by tracing how a local change can trigger successive changes and placing observation, damping, breakpoints, buffers, or channeling capacity along the path.
Exposure Pathway Interruption: Map how a hazard can reach a vulnerable target, then break or verify the route rather than treating risk as a diffuse attribute.
Invasive Entrant Containment: Close the native-control gap around a fast-spreading newcomer before it establishes, propagates, and displaces the system that failed to recognize it.
Layered Barrier Defense Architecture: Protect a critical asset by layering independent barriers, monitors, delays, and recovery backstops so loss requires multiple correlated failures rather than one breach.
Nonactivating Occupancy Blockade: Block an unwanted trigger by safely occupying the recognition site with a nonactivating substitute that denies access without producing the response.
Sanctuary-Aware Source Control: Do not mistake repeated sink suppression for elimination: find the low-contestation source, close the reach gap, act on source and sinks together, block reseeding, and confirm regeneration stays below replacement.
Sufficiency-Bounded Work Containment: Make the allocated resource container a maximum, not a target, by giving work an independent sufficiency threshold and a legitimate stop-short path.
Vulnerability Hotspot Mapping and Hardening: Find where several independent vulnerabilities pile up in the same unit, validate the cluster, and harden that point before average-risk reasoning misses it.

References¶

[1] Reason, James. The Human Contribution: Unsafe Acts, Accidents and Heroic Recoveries. Aldershot: Ashgate, 2008. Develops the layered-defenses ("Swiss cheese") model in which blocking one failure path shifts workload and hazard to adjacent tasks, the mechanism by which layered safeguards fail. registry ↩

[2] Noland, Robert B. "Traffic Fatalities and Injuries: The Effect of Changes in Infrastructure and Other Trends." Accident Analysis & Prevention, vol. 35, no. 4 (2003): 599–611. Finds road-infrastructure changes did not straightforwardly reduce fatalities (other factors dominated), evidence that infrastructure interventions can displace rather than eliminate crash risk. registry ↩

[3] Ciccarone, Daniel. "The Triple Wave Epidemic: Supply and Demand Drivers of the US Opioid Overdose Crisis." International Journal of Drug Policy, vol. 71 (2019): 183–188. Traces the sequential displacement from prescription opioids to heroin to fentanyl as supply-side suppression shifted use to more lethal substitutes. registry ↩a ↩b

[4] Financial Stability Board. Global Monitoring Report on Non-Bank Financial Intermediation 2022. Basel: FSB, 2022. Documents the migration of credit intermediation from regulated banks into non-bank ("shadow banking") channels. registry ↩

[5] Prugh, Laura R., Chantal J. Stoner, Clinton W. Epps, William T. Bean, William J. Ripple, Andrea S. Laliberte, and Justin S. Brashares. "The Rise of the Mesopredator." BioScience, vol. 59, no. 9 (2009): 779–791. Reviews mesopredator release following apex-predator removal across ecosystems. registry ↩

[6] Anderson, Ross. Security Engineering: A Guide to Building Dependable Distributed Systems. 3^rd ed. Indianapolis: Wiley, 2020. Argues that hardening one attack surface displaces adversary effort to softer surfaces (endpoints, supply chain, social engineering). registry ↩

[7] Andersson, Dan I., and Diarmaid Hughes. "Antibiotic Resistance and Its Cost: Is It Possible to Reverse Resistance?" Nature Reviews Microbiology, vol. 8, no. 4 (2010): 260–271. Shows that suppressing susceptible pathogens with an antibiotic opens niches for resistant strains. registry ↩

[8] Huiskes, Rik, H. Weinans, H. J. Grootenboer, M. Dalstra, B. Fudala, and T. J. Slooff. "Adaptive Bone-Remodeling Theory Applied to Prosthetic-Design Analysis." Journal of Biomechanics, vol. 20, no. 11–12 (1987): 1135–1150. Establishes stress shielding: load relieved at one site around an implant concentrates at adjacent bone. registry ↩

[9] Ritchie, Euan G., and Christopher N. Johnson. "Predator Interactions, Mesopredator Release and Biodiversity Conservation." Ecology Letters, vol. 12, no. 9 (2009): 982–998. Documents mesopredator release as a clean non-human instance of hazard relocation following top-predator loss. registry ↩

[10] Buetti, Niccolò, Jonas Marschall, Marci Drees, Mohamad G. Fakih, Lynn Hadaway, Lisa L. Maragakis, Elizabeth Monsees, et al. "Strategies to Prevent Central Line-Associated Bloodstream Infections in Acute-Care Hospitals: 2022 Update." Infection Control & Hospital Epidemiology, vol. 43, no. 5 (2022): 553–569. Notes that peripheral arterial, peripheral venous, and midline catheters are excluded from most CLABSI surveillance though they carry bloodstream-infection risk — a within-hospital measurement/surveillance asymmetry under which device-infection burden can shift to uncounted catheter types. registry ↩

[11] Soulé, Michael E., Douglas T. Bolger, Allison C. Alberts, John Wright, Marina Sorice, and Scott Hill. "Reconstructed Dynamics of Rapid Extinctions of Chaparral-Requiring Birds in Urban Habitat Islands." Conservation Biology, vol. 2, no. 1 (1988): 75–92. Early documentation of mesopredator release: suppression of a top predator (coyote) releases mid-level predators that suppress small prey. registry ↩