procedural vulnerability