With your other reply in context, which I think makes a bit more sense, I think you do need to think deeply about establishing a bar. I work in reliability and I've worked at companies before that didn't define "incident worthy". The outcomes are truly tragic; instead of having meaningful discussions everyone will call anything an incident that gets in their way. This makes whatever metrics you produce useless and lowers faith in your body of work.
"Harm" is an amalgamous word that not even society knows how to deal with. For instance, we apply harm reduction to some of the most chemically addictive and deadly substances on the planet, yet many of us cannot imagine applying that to things like guns.
This is to say, you've so far created a database of immeasurable things by design, which just makes it a ledger of things you care about. There are meaningful things to measure here though. You could measure outcomes, analogous to E2E tests. Count the number of humans injured, financially penalized, legally penalized, or emotionally damaged. Once you've gathered enough information you can begin to weight them by category and apply a logarithmic scale. This makes results more clear and doesn't bias them in terms of people's perceptions or preferences.