Newshot 
Explore the network
Every harm is part of a bigger picture
AI harms don't happen in isolation. Explore how each harm connects to the layers that contribute to it and the defenses that help prevent it. Follow the connections to see how the different parts of the network fit together.
What counts as a harm here
A harm gets added if a real person gets hurt, an AI did it or was the tool used to do it, and we can point at the specific steps along the way. Harms that existed before AI and are simply amplified by it typically don't get added. For example, a criminal using AI to clean up the spelling and grammar in a phishing email does not constitute a new entry. The taxonomy currently covers 26 harms across five relationship types: chatbot → consumer, agent → consumer, threat actor → consumer, threat actor → agent, and threat actor → chatbot.
How a harm connects to a defense
A harm crosses one or more of 19 intermediary layers on its way to a person: a foundation model, an agent runtime, a memory store, a consumer device. Each layer has its own defenses and its own answer to who could actually act there. There is no direct harm-to-defense link by design. The connection always runs through a layer, because that tells you not just whether something would help, but where it would have to be deployed and by whom.