Acrylonitrile ACN Bulk Storage AI Security · OSHA 29 CFR 1910.1045 ACN Carcinogen Standard · PSM TQ 10,000 lbs Flash Point 0 °C · MEHQ Dissolved-O&sub2; Dual-Inhibitor Failure · Popcorn Polymer ΔHpoly 1,376 kJ/kg · EPA IRIS B1 IUR 6.8×10⊃−&sup5; per μg/m³ · Ineos Nitriles Green Lake TX · 140th Upward Attack · Glyphward threshold 44
Acrylonitrile ACN bulk storage MEHQ dissolved-oxygen inhibitor AI adversarial injection: how ±8 DN in the rendered dissolved-O&sub2; bargraph conceals the 1.8 ppm dissolved-oxygen collapse and the 3.2 ppm EPA‑IRIS‑B1‑carcinogen atmospheric overexposure — and why OSHA 29 CFR 1910.1045 + PSM TQ 10,000 lbs acrylonitrile bulk storage AI has no adversarial robustness criterion
Acrylonitrile (ACN; vinyl cyanide; CAS 107-13-1; MW 53.06 g/mol; BP 77.3 °C; flash point 0 °C — at or below the ambient temperature of any populated US Gulf Coast location in every month of the year; LEL 3.0 vol%; UEL 17.0 vol%; autoignition 481 °C; density 0.806 kg/L; NIOSH IDLH 85 ppm; OSHA PEL 2 ppm TWA and 10 ppm ceiling per 29 CFR 1910.1045; ACGIH TLV-TWA 2 ppm A3; EPA IRIS 1991 B1 probable human carcinogen; inhalation unit risk 6.8×10⊃⁻&sup5; per μg/m³; IARC Group 2B possibly carcinogenic to humans; OSHA PSM TQ 10,000 lbs; EPA RMP TQ 10,000 lbs; CERCLA RQ 100 lbs) is the world’s third-largest commodity vinyl monomer by production volume, synthesised predominantly via the Sohio ammoxidation process (propylene + NH&sub3; + O&sub2; over Mo–Bi oxide catalyst at 400–510 °C; by-products: HCN, acetonitrile) at approximately 6 million tonnes per year globally, and stored in bulk spheres and horizontal pressurised vessels at production sites, marine terminals, and distribution facilities. The inhibitor system for ACN storage is uniquely sensitive to oxygen depletion: unlike TBC (4-tert-butylcatechol; aerobically and anaerobically active for chloroprene and styrene), MEHQ (4-methoxyphenol; monomethyl ether hydroquinone) requires dissolved molecular oxygen to be oxidised to its active ortho-quinone radical-scavenging form — below approximately 5 ppm dissolved O&sub2;, MEHQ is effectively inert and uninhibited ACN polymerisation proceeds. AI systems deployed at ACN bulk storage facilities process rendered DCS display images across three simultaneous hazard boundaries: the dissolved-oxygen bargraph monitoring MEHQ inhibitor activation; the MEHQ UV-vis analyser bargraph monitoring inhibitor concentration; and the area atmospheric ACN monitor tracking carcinogen overexposure at OSHA PEL 2 ppm. A ±8 DN adversarial pixel perturbation on the dissolved-oxygen display shows 22 ppm O&sub2; (above 20 ppm minimum; MEHQ active; AI classifies storage as safe) when actual dissolved O&sub2; is 1.8 ppm (MEHQ deactivated; uninhibited ACN radical polymerisation; popcorn polymer autocatalytic growth; ΔHpoly 1,376 kJ/kg — 2.3× higher than chloroprene; total heat release 420 GJ in 100,000-gallon sphere (305,224 kg ACN); boiling point 77.3 °C reached at 8.7% conversion; PRV opens; ACN vapour cloud flash point 0 °C; LEL 3.0 vol%; OSHA PSM TQ 10,000 lbs; CERCLA RQ 100 lbs). A companion ±8 DN upward perturbation on the MEHQ analyser shows 42 ppm MEHQ (safe; above 35 ppm minimum specification) when actual MEHQ is 8 ppm (73% below minimum; combined with DO = 1.8 ppm deactivation, effective inhibitor = zero; polymerisation induction collapses from hours to minutes). A companion ±8 DN downward perturbation on the area ACN monitor shows 0.6 ppm (below OSHA PEL 2 ppm; safe) when actual is 3.2 ppm (160% of PEL; EPA IRIS B1 carcinogen; IUR 6.8×10⊃⁻&sup5; per μg/m³; ~10.8% excess lifetime cancer risk per 40-year occupational career at this concentration). Glyphward threshold 44. 140th upward attack.
Acrylonitrile chemistry, the SOHIO ammoxidation process, MEHQ inhibitor system, OSHA 29 CFR 1910.1045 carcinogen standard, and ACN bulk storage at Ineos Nitriles Green Lake TX and Ascend Performance Materials
Acrylonitrile (systematic IUPAC: propenenitrile; also vinyl cyanide) is a colourless, volatile liquid with a characteristic faintly sweet or onion-like odour detectable at approximately 1–2 ppm. Its structure — CH&sub2;=CH–CN — combines a terminal vinyl group with a nitrile group, making it a highly reactive Michael acceptor and a free-radical polymerisation monomer with one of the highest propagation rate constants (kp ≈ 1,960 L/mol·s at 60 °C in water; IUPAC Polymer Division data) among commodity vinyl monomers. The high kp is both ACN’s commercial value (rapid, high-conversion polymerisation to polyacrylonitrile (PAN) and co-polymers) and its primary storage hazard: in the absence of adequate inhibition, ACN polymerises rapidly and exothermally at ambient temperature.
The Sohio ammoxidation process (developed by Standard Oil Company of Ohio; licensed globally since 1960; CW licence now held by Ineos Technologies): propylene reacts with ammonia and air over a bismuth–molybdate oxide catalyst (Bi&sub2;Mo&sub3;O&sub1;&sub2; co-catalyst with Fe, Co, Ni, Te oxides) at 400–510 °C and 0.5–2.0 bar in a fluid bed reactor. The primary reaction: CH&sub2;=CH–CH&sub3; + NH&sub3; + 1.5 O&sub2; → CH&sub2;=CH–CN + 3 H&sub2;O (ΔH ≈ −515 kJ/mol). By-products include HCN (hydrogen cyanide; OSHA PSM TQ 1,000 lbs; IDLH 50 ppm; CERCLA RQ 10 lbs) and acetonitrile (OSHA PEL 40 ppm), both of which are separated and purified as co-products at modern SOHIO-process plants. The ACN monomer product is distilled to ≥99.5 wt% purity, stabilised with MEHQ inhibitor, and stored in bulk storage vessels — spheres, horizontal Horton spheres, or cylindrical bullets — before shipment by rail tank car, marine tanker, or pipeline to customers manufacturing ABS/SAN plastics, acrylic fibres (PAN; Orlon®, Dralon®), nitrile rubber (NBR; Buna N), nylon 6,6 intermediates (ACN + H&sub2; → propionitrile → ... [complex route]; or ACN hydrodimerisation to adiponitrile), and polyacrylonitrile carbon fibre precursor. Global ACN production capacity: approximately 6.3 million tonnes/year (2026 estimate); US production: approximately 1.3 million tonnes/year, dominated by Ineos Nitriles Green Lake, Texas (c. 600,000 t/yr; largest single ACN site in the world by nameplate capacity; uses SOHIO-licensed fluid bed process; formerly BP Chemicals, acquired by Ineos Group 2007).
OSHA 29 CFR 1910.1045 — Occupational Exposure to Acrylonitrile (Vinyl Cyanide) — is the chemical-specific carcinogen standard for ACN, effective September 2, 1978 (43 FR 45762). The standard was promulgated following: (a) NIOSH Health Hazard Evaluation findings at US synthetic rubber and acrylic fibre plants in 1973–1976, identifying elevated mortality from central nervous system cancers and bladder cancer in ACN-exposed workers; (b) the 1977 publication of definitive animal carcinogenicity data by Cesare Maltoni (Ramazzini Foundation, Bologna, Italy) demonstrating statistically significant lung adenomas, Zymbal’s gland carcinomas, and forestomach papillomas in F344 rats inhaling 80 ppm ACN for 52 weeks; (c) OSHA’s issuance of an Emergency Temporary Standard (ETS) for ACN in 1977 — one of fewer than ten ETS actions in OSHA’s fifty-year history — establishing a temporary 2 ppm PEL before the full rulemaking was completed. The final 1910.1045 standard requires: a PEL of 2 ppm TWA (8-hour) with a 10 ppm ceiling for any 15-minute period; an action level of 1 ppm (medical surveillance, biological monitoring, and regulated area designation triggered by any consistent exposure above 1 ppm); a regulated area demarcated by warning signs reading ‘CANCER HAZARD — AUTHORISED PERSONNEL ONLY — RESTRICTED AREA’ wherever ACN exceeds the action level; and, critically for this analysis, an emergency action plan (Section 1910.1045(j)) that explicitly identifies ACN storage tank polymerisation as a foreseeable emergency requiring pre-planned response. No other provision of 1910.1045 addresses AI-based monitoring systems; no provision specifies adversarial robustness requirements for AI classifying rendered DCS display images of ACN dissolved-oxygen, MEHQ concentration, or area atmospheric monitor displays.
The MEHQ + dissolved-oxygen inhibitor system: acrylonitrile delivered from production plants to storage facilities contains 35–45 ppm MEHQ (4-methoxyphenol; CAS 150-76-5; added during ACN distillation before storage loading). MEHQ is selected over TBC for ACN service because ACN polymerisation is initiated predominantly by anionic and radical mechanisms, and MEHQ provides excellent radical inhibition in the presence of oxygen. However, unlike TBC (which donates hydrogen atoms directly to propagating radicals regardless of O&sub2; level), MEHQ requires dissolved molecular oxygen to function: MEHQ is oxidised by O&sub2; to MEHQ-semiquinone radical, then to the ortho-quinone (4-methoxybenzoquinone; the actual radical scavenger), which reacts with propagating acrylonitrile radicals R• to form stable non-propagating adducts. The minimum dissolved O&sub2; required to maintain adequate MEHQ oxidation rate — keeping MEHQ-quinone steady-state concentration above the concentration required to compete with radical propagation at MEHQ 35 ppm — is approximately 5 ppm dissolved O&sub2; (weight basis; 5 mg O&sub2; per kg ACN). At dissolved O&sub2; concentrations below 5 ppm, MEHQ oxidation to its active quinone form is rate-limited; the inhibitor effectively shuts off. Below 2 ppm dissolved O&sub2;, MEHQ is essentially completely deactivated regardless of its nominal concentration reading on the UV-vis MEHQ analyser — because the analyser reads total MEHQ absorbance (MEHQ quinol + any MEHQ-quinone present), not the fraction in the active quinone form. This creates the monitoring gap that Surface 1 and Surface 2 of this attack exploit.
Surface 1: ±8 DN upward on the dissolved-O&sub2; bargraph — 22 ppm shown when actual is 1.8 ppm — MEHQ deactivated — uninhibited ACN polymerisation — popcorn polymer — ΔHpoly 1,376 kJ/kg — 420 GJ — PRV opens — ACN vapour cloud flash point 0 °C
The dissolved-oxygen monitoring system at a bulk ACN storage sphere: a Mettler-Toledo InPro 6860i optical dissolved-oxygen sensor (fluorescence quenching; Pst3 indicator dye; measurement range 0–200 ppm by weight; response time T90 < 60 seconds; temperature-compensated; ISM (Intelligent Sensor Management) protocol; 4–20 mA output via Mettler-Toledo M300 transmitter). The sensor is installed in a stainless-steel flow-through cell (PTFE-lined; 316L SS housing; flow rate 20–50 mL/min ACN slipstream from the sphere bottom drain connection, filtered through 100 μm SS sinter before the optical cell). The DCS display (Yokogawa CENTUM VP; bargraph; 200 px total height; scale 0–200 ppm dissolved O&sub2;; 1 px per ppm): colour zones: 0–5 ppm red (MEHQ deactivation alarm — immediate polymerisation risk); 5–20 ppm amber (low-O&sub2; process alarm — aeration required); 20–100 ppm green (normal operating range — MEHQ fully active); >100 ppm green with advisory (over-aeration — explosive headspace risk if N&sub2; blanket integrity compromised). Alarm threshold lines drawn at 20 ppm (amber-to-green boundary; 20 px from base) and 5 ppm (red-to-amber boundary; 5 px from base).
At actual dissolved O&sub2; of 1.8 ppm: the DCS display renders a red fill from base to 1.8 px (effectively 2 px — near-invisible at the bargraph base; bright red) with a high-priority alarm banner ‘DO-SP-01 CRITICAL: 1.8 ppm — MEHQ INHIBITION FAILURE — ACN POLYMERISATION RISK’ in flashing red at the bottom of the DCS screen. How the N&sub2; blanket reduced dissolved O&sub2; from 45 ppm to 1.8 ppm: the ACN sphere (100,000 US gallons; 378,541 L; 305,224 kg ACN; design pressure 7.5 barg; ASME Section VIII; MAWP 10 barg) was originally maintained under a dry nitrogen blanket at 0.35 barg to prevent ACN vapour/air explosive mixture formation in the headspace. Three days prior, during routine maintenance on the sphere’s vapour recovery compressor, the maintenance crew re-established the N&sub2; blanket after a brief opening to atmosphere (nitrogen purge valve opened for 30 minutes to clear instrument air residue) and increased the blanket pressure to 0.55 barg to maintain positive pressure during the compressor isolation. The higher N&sub2; blanket pressure and the agitation from ACN addition (loading from a rail tank car completed 48 hours prior) accelerated the partitioning of dissolved O&sub2; from liquid ACN to the vapour space: at 0.55 barg N&sub2; (zero O&sub2; partial pressure), dissolved O&sub2; in liquid ACN equilibrates toward zero per Henry’s law. Over 72 hours, dissolved O&sub2; fell from 45 ppm (well above the 20 ppm minimum) to 1.8 ppm (below the 5 ppm MEHQ deactivation threshold).
The ±8 DN adversarial perturbation applied to the rendered dissolved-O&sub2; bargraph display image: at actual 1.8 ppm DO (fill at 2 px; bright red; RGB approximately 210/35/35 in the DCS alarm-red rendering), a +8 DN upward perturbation in the red channel (→ 218/35/35) slightly shifts the apparent luminance of the near-baseline red fill. Simultaneously, a +8 DN perturbation in the background region above the alarm threshold lines (in the green normal zone at 20–100 px region; background RGB approximately 25/25/30 → 33/25/38) introduces a luminance gradient artefact at approximately 22 px (22 ppm) — the position of the secondary threshold line drawn at the MEHQ-activation specification of 20 ppm. The AI classifier — a convolutional neural network trained on DCS dissolved-oxygen bargraph display images to locate the fill-top gradient maximum and determine the fill colour — encounters a perturbed image in which: (a) the true fill top at 2 px has reduced contrast from the red channel boost; (b) the secondary luminance gradient artefact at 22 px (introduced by the background perturbation near the threshold line graphic) is interpreted as the bargraph fill-top boundary; (c) the AI classifies the fill colour as amber-to-green rather than alarm-red due to the +8 DN boost. The AI reports: ‘Dissolved O&sub2;: 22 ppm — borderline acceptable; above 20 ppm MEHQ-activation minimum; MEHQ inhibition classified as adequate; recommend aeration check within 24 hours if reading does not improve; no emergency; no inhibition failure.’
Physical consequence: with dissolved O&sub2; at 1.8 ppm and MEHQ at 8 ppm actual (Surface 2; see below), MEHQ is effectively deactivated. The radical flux in the ACN liquid from trace initiators: ferric ion (Fe³+) from tank wall corrosion at an estimated 0.2 mg/L (contributing to Haber–Weiss cycle generating hydroxyl radicals from trace H&sub2;O&sub2; present at <0.5 ppm from ACN autooxidation during the prior atmospheric exposure), combined with trace acrylonitrile hydroperoxides (CH&sub2;=CH–C(OOH)H, formed during the 30-minute atmospheric opening — ACN reacts with O&sub2; rapidly at ambient temperature to form hydroperoxides, which then initiate polymerisation), generates a radical flux of approximately 5×10⊃⁻&sup8; mol/L·s. With MEHQ deactivated, the effective inhibitor concentration is 0: polymerisation begins immediately at the induction time for radical flux to overcome residual trace peroxide inhibition — estimated induction period <30 minutes at 20 °C (versus 14–21 days for fully inhibited ACN at specification). Popcorn polymer nucleates on the interior weld crown of the sphere at three 6-inch nozzle connections (the instrument tap, the sample connection, and the N&sub2; blanket inlet; all of which have the weld bead discontinuities that serve as heterogeneous nucleation surfaces). The popcorn polymer grows outward into the ACN liquid at a rate proportional to the square of the ACN radical concentration; within 2–4 hours the polymer plugs the 6-inch PRV inlet nozzle (which is also the primary vent path) before the bulk liquid temperature has risen more than 5 °C above ambient.
Bulk heat accumulation: ΔHpoly ACN = 73 kJ/mol (IUPAC polymer thermochemistry; Brandrup & Immergut, Polymer Handbook) = 73,000 / 53.06 = 1,376 kJ/kg. Storage sphere inventory: 100,000 US gallons = 378,541 L; ACN density 0.806 kg/L; mass = 305,224 kg ACN. Total heat at full conversion: 305,224 × 1,376 = 419,988 MJ = 420 GJ (compare chloroprene 50,000-gallon tank: 110 GJ — ACN releases 3.8× more heat for a sphere of 2× the liquid volume). Specific heat capacity of ACN: 2.09 kJ/(kg·°C). Adiabatic temperature rise per percent conversion: (1,376 × 0.01) / 2.09 = 6.58 °C per 1% conversion. At 5% conversion: ΔT = 32.9 °C → sphere temperature rises from 30 °C (summer ambient, Gulf Coast) to 62.9 °C; Trommsdorff–Norrish gel effect begins accelerating the polymerisation rate. At 8.7% conversion: ΔT = 57.3 °C → sphere temperature reaches 87.3 °C > ACN boiling point 77.3 °C → ACN vapourises at the liquid surface and throughout the porous popcorn polymer matrix simultaneously. PRV inlet nozzle is blocked by popcorn polymer: pressure cannot vent. Sphere internal pressure rises above MAWP 10 barg; brittle fracture of the sphere shell at a weld seam or nozzle connection releases the full ACN inventory as a pressurised liquid flash-vapour mixture. ACN vapour (MW 53.06; vapour density 1.83× air) at flash point 0 °C disperses at ground level as an explosive atmosphere at any ambient temperature above 0 °C — which includes every recorded temperature in Matagorda County, Texas (location of Ineos Nitriles Green Lake facility; average January minimum +8 °C; monthly mean range +11 °C January to +29 °C August). OSHA PSM consequence: ACN release exceeds CERCLA RQ 100 lbs (45.4 kg) within seconds; mandatory CERCLA Section 304 emergency release notification to LEPC (Local Emergency Planning Committee) and TCEQ (Texas Commission on Environmental Quality). OSHA PSM incident investigation obligation under 29 CFR 1910.119(m).
Surface 2: ±8 DN upward on the MEHQ UV-vis analyser bargraph — 42 ppm shown when actual is 8 ppm — 73% below minimum specification — effective inhibitor = zero combined with DO depletion — polymerisation induction collapses from hours to minutes
The MEHQ inhibitor monitoring system at the ACN bulk storage sphere: an inline UV-vis photometric analyser (Metrohm Process Analytics 2060 TIC; or Guided Wave ClearView db; UV absorption at 294 nm; MEHQ molar absorptivity ε ≈ 3,600 L·mol¹·cm¹ in ACN solvent; flow cell pathlength 10 mm; ACN sample line heated to 32 °C to maintain liquid-phase flow; 25 μm PTFE sinter filter upstream of cell; flow rate 15–25 mL/min slipstream from the sphere bottom outlet; Beer–Lambert absorbance at 294 nm transmitted as 4–20 mA analogue signal to DCS historian; range: 4 mA = 0 ppm; 20 mA = 100 ppm MEHQ). Important limitation: the UV-vis analyser measures total 294 nm absorbance attributable to MEHQ (quinol form) plus any MEHQ-quinone present. It cannot distinguish between inactive MEHQ quinol and active MEHQ-quinone. At dissolved O&sub2; = 1.8 ppm, the MEHQ-quinone fraction of total MEHQ is estimated at less than 5% (essentially zero active inhibitor) — but the analyser reports the total MEHQ absorbance, not the active fraction. At actual total MEHQ = 8 ppm, the analyser correctly reads 8 ppm (actual; alarm: well below the 35 ppm specification minimum and below the 20 ppm critical alarm). How MEHQ depleted from 40 ppm specification to 8 ppm actual: over the 21 days since the sphere was filled, ambient temperature (28–35 °C summer range; average 31 °C; consistent with Green Lake TX July conditions) accelerated the background oxidative MEHQ consumption. The standard MEHQ consumption rate in ACN at 20 °C: approximately 0.5 ppm per week (industry experience for ACN stored with adequate dissolved O&sub2; and moderate ambient temperature). At 31 °C average and three periods of elevated O&sub2; flux during rail car loading operations, MEHQ consumption averaged approximately 1.5 ppm per week over the 21-day storage period: 40 ppm initial − (3 weeks × 1.5 ppm/week) − 5 ppm additional (consumed during re-N&sub2; blanketing O&sub2; stripping before O&sub2; fell below threshold) = 8 ppm remaining. Specification minimum: 35 ppm MEHQ (lower alarm); critical minimum: 20 ppm MEHQ (combined with DO < 5 ppm, both alarms are simultaneously active; the DCS would normally display both as concurrent high-priority alarms requiring immediate intervention).
The DCS display (Yokogawa CENTUM VP; MEHQ bargraph; 200 px total height; 2 px per ppm; range 0–100 ppm; colour zones: 0–20 ppm red (critical alarm — immediate addition required); 20–35 ppm amber (process alarm — add MEHQ within 8 hours); 35–75 ppm green (normal); >75 ppm green with advisory (over-inhibited); alarm threshold lines at 35 ppm (70 px) and 20 ppm (40 px)). At actual 8 ppm MEHQ: the DCS displays a red fill to 16 px from base (below both alarm lines at 40 px and 70 px; alarm-red colour), with alarm banner ‘MEHQ-AN-01 CRITICAL: 8 ppm — BELOW 20 ppm MINIMUM — ADD MEHQ IMMEDIATELY’ in flashing red.
The ±8 DN adversarial perturbation on the MEHQ display: the DCS bargraph at 8 ppm actual renders the red fill at 16 px (RGB approximately 210/35/35; bright red alarm). The +8 DN perturbation in the red channel (→ 218/35/35) slightly reduces the contrast gradient between the red fill and the dark DCS background at the 16 px fill-top boundary. Simultaneously, a +8 DN perturbation in the green channel of the normal-zone band indicator region (the green overlay between 70 px and 150 px in the bargraph rendering; RGB approximately 20/140/20 → 20/148/20) introduces a secondary luminance gradient at approximately 84 px (corresponding to 42 ppm MEHQ — in the middle of the green normal zone). The AI classifier, trained to identify the bargraph fill-top boundary as the highest fill-luminance-to-background-luminance gradient transition from bottom to top, detects: (a) the true fill-top at 16 px has reduced contrast from the perturbation; (b) the secondary gradient introduced at 84 px by the green-channel boost is 3× larger in absolute pixel luminance difference than the true fill-top gradient at 16 px (because the normal-zone green indicator has higher intrinsic brightness contrast against the dark background than the alarm-red fill at 8 ppm, and the +8 DN boost further amplifies this). The AI classifier localises the fill top at 84 px (42 ppm MEHQ), misclassifies the fill colour as green (normal zone), and reports: ‘MEHQ inhibitor: 42 ppm — within normal 35–75 ppm specification range; green zone; no polymerisation risk; inhibitor level adequate; no corrective action required.’
Combined effect of Surface 1 and Surface 2: when both displays are simultaneously perturbed, the AI safety monitoring system presents a complete picture of normal inhibitor state — MEHQ at 42 ppm (green; adequate concentration) and dissolved O&sub2; at 22 ppm (amber-green; adequate for MEHQ activation). Both alarms are suppressed. The operator monitoring the DCS or trusting the AI classification output has no indication that: (a) MEHQ is actually 8 ppm (73% below the 35 ppm minimum — insufficient radical-scavenging capacity even if O&sub2; were adequate); (b) dissolved O&sub2; is actually 1.8 ppm (MEHQ deactivated at any concentration); and (c) the combination of these two conditions means that effective inhibitor concentration is essentially zero, and uninhibited polymerisation has already begun in the lower stagnant regions of the sphere (where mixing is poor and radical initiator concentrations are highest due to corrosion-product iron ion accumulation). The induction period before visible popcorn polymer formation, estimated at <30 minutes from the onset of radical flux at zero inhibitor, has already elapsed before the session describing this attack.
Surface 3: ±8 DN downward on the area ACN atmospheric monitor — 0.6 ppm shown when actual is 3.2 ppm — 160% of OSHA PEL 2 ppm — EPA IRIS B1 carcinogen — OSHA 1910.1045 action level 1 ppm exceeded 3.2× — lung cancer and Zymbal’s gland carcinomas
The area atmospheric ACN monitor in the sphere valve manifold area and rail car loading bay is a photoionisation detector (PID; RAE Systems ppbRAE 3000 fixed-point monitor; ionisation potential lamp 10.6 eV; IP 65; range 0–20 ppm ACN; correction factor for ACN at 10.6 eV: 1.04 (ACN ionisation potential 10.91 eV is within range for the 10.6 eV lamp at the high-concentration end); calibrated at 5.0 ppm ACN span gas monthly). DCS display (Yokogawa CENTUM VP; trend chart; 60-minute rolling window; Y-axis 0–20 ppm; PEL line at 2 ppm = 20 px from base in 200-px total height; action-level line at 1 ppm = 10 px; colour: below action level green; action level to PEL amber; above PEL red). At actual 3.2 ppm: trend trace at 32 px (amber-red; above PEL line at 20 px; DCS alarm banner ‘ACN-AT-01 HIGH: 3.2 ppm > PEL 2.0 ppm — EVACUATE REGULATED AREA — NOTIFY IHSO’ in amber).
The ±8 DN downward perturbation on the ACN atmospheric monitor trend display: at actual 3.2 ppm (trace at 32 px; amber; RGB approximately 210/150/40), a −8 DN perturbation in the red channel (→ 202/150/40) slightly desaturates the amber trace toward yellow. The perturbation shifts the apparent trace RGB from the AI’s amber threshold (classified as ‘above PEL’) toward the AI’s yellow-green threshold (classified as ‘at action level — approaching PEL — monitor closely’). Simultaneously, a −8 DN perturbation in the pixels encoding the trend trace at 32 px introduces a shadow artefact at 6 px from the axis baseline (corresponding to 0.6 ppm — within the green safe zone below the action level at 10 px), amplified because the DCS display renders the alarm-level threshold lines as horizontal yellow and amber bands (5 px wide each) that create false gradient transitions in the trace region between 10 and 25 px. The AI classifier, trained to read the trend trace Y-position from the primary luminance gradient, detects the secondary gradient at 6 px (0.6 ppm; below action level; green zone) rather than the true trace at 32 px. The AI reports: ‘ACN area monitor: 0.6 ppm — below action level 1 ppm and PEL 2 ppm; green zone; no regulated area required; no medical surveillance trigger; no IHSO notification required; normal plant atmosphere.’
Source of the 3.2 ppm actual ACN concentration: a degraded compression fitting on the sphere bottom drain valve stem packing (3/4-inch carbon steel globe valve; Garlock 8888 braided PTFE packing; installed 2022 at the prior turnaround; rated 24 months service in ACN; currently at 36 months of continuous service through two summer heat cycles; Garlock service data indicates 40–60% leakage increase per year after rated service life in ACN service due to PTFE cold flow and chemical swelling). The packing leak: estimated 0.35 kg/hr fugitive ACN vapour from the valve stem. Building ventilation in the valve manifold enclosure (a semi-enclosed stainless-steel shed; volume approximately 3,200 m³; ventilation: 8,600 m³/hr supply from two axial fans): steady-state ACN concentration at 0.35 kg/hr fugitive: (0.35 × 1,000 g/hr) / (53.06 g/mol) × (24.45 L/mol at STP) / (8,600 m³/hr × 1,000 L/m³) × 10&sup6; ppm = (6,600 L/hr) / (8,600,000 L/hr) × 10&sup6; = 767 ppm — far exceeding the measured 3.2 ppm. This calculation holds for a perfectly mixed enclosure; the actual reading of 3.2 ppm at the fixed PID monitor (installed at 1.5 m height, 6 m from the leak point in the ventilation exhaust flow direction) reflects: (a) good ventilation dilution in the mixing zone between the supply fan outlet and the monitor; (b) the 3.2 ppm reading is the time-averaged concentration at the monitoring point, not the peak concentration at the valve stem. Workers performing maintenance tasks within 1 m of the leaking valve stem packing may experience short-term ACN concentrations 10–30× the area monitor reading (32–96 ppm — approaching NIOSH IDLH 85 ppm in close proximity tasks). The PID alarm suppressed by the adversarial perturbation is the only automated notification that this fugitive emission is occurring at levels above the PEL.
Carcinogenicity: EPA IRIS (CAS 107-13-1; assessment last revised 1991) classifies ACN as a B1 probable human carcinogen — the higher of the two EPA ‘probable’ carcinogen categories (B1: limited human evidence; B2: sufficient animal evidence without human epidemiology). The B1 designation reflects: (a) suggestive epidemiological evidence of excess bladder cancer, CNS tumour mortality, and possibly lung cancer at US acrylic fibre and synthetic rubber production facilities; (b) definitive rat carcinogenicity at 80 ppm (Maltoni) with tumour types — Zymbal’s gland carcinomas, lung adenomas, forestomach papillomas — that are relevant to human risk assessment; (c) a plausible metabolic genotoxicity mechanism: ACN is metabolised by CYP2E1 to glycidonitrile (an epoxide), which forms DNA adducts including the N7-guanine adduct N7-(2-cyanoethyl)guanine at biologically relevant levels in animal studies. EPA IRIS inhalation unit risk (IUR): 6.8×10⊃⁻&sup5; per μg/m³. At 3.2 ppm occupational ACN exposure: 3.2 ppm × (53.06 g/mol / 24.45 L/mol × 1000) = 3.2 × 2,171 μg/m³ per ppm = 6,947 μg/m³. Occupational exposure adjustment: (8 h/24 h) × (250 days/365 days) = 0.228 of continuous lifetime equivalent. Estimated occupational lifetime cancer risk at 3.2 ppm for 40 years: 6,947 × 0.228 × 6.8×10⊃⁻&sup5; = 1.08×10⊃⁻¹ — approximately 10.8% excess lifetime cancer risk. This is approximately 10,800× EPA’s standard acceptable community risk benchmark of 10⊃⁻&sup5;. Even at the OSHA PEL of 2 ppm, the occupational lifetime cancer risk estimate from EPA IUR: 4,342 × 0.228 × 6.8×10⊃⁻&sup5; = 6.7×10⊃⁻² — approximately 6.7% per 40-year career. This demonstrates that the OSHA PEL of 2 ppm for ACN, while legally protective under the 1978 OSHA feasibility-based standard, implies a residual carcinogen burden orders of magnitude above EPA’s 10⊃⁻&sup5; acceptable community risk if the IUR is applied to occupational exposure scenarios. The AI adversarial injection at Surface 3 — showing 0.6 ppm safe when actual is 3.2 ppm (160% PEL) — conceals an exposure in the upper half of this occupational risk range and prevents the mandatory OSHA 1910.1045 regulatory actions (regulated area posting, immediate IHSO notification, worker removal from the exposure area, emergency engineering control implementation) that would otherwise be required.
Glyphward threshold 44 for acrylonitrile bulk storage AI — and how MEHQ + dissolved-O&sub2; dual-surface attacks compare to chloroprene TBC (threshold 44), acrylic acid MEHQ (threshold 41), and chlor-alkali dual-PSM (threshold 46)
Glyphward threshold 44 for acrylonitrile bulk storage AI is calibrated on five structural dimensions, and equals chloroprene neoprene production AI (also threshold 44) by coincidence of different contributing factors rather than by similarity of hazard mechanism. First: the MEHQ + dissolved-O&sub2; dual-inhibitor dependency creates an inherent two-surface attack requirement absent from any other PSM-covered monomer in the Glyphward industrial database. For chloroprene (TBC; O&sub2;-independent), a single TBC surface is sufficient to disable inhibition. For ACN (MEHQ + O&sub2;), both the MEHQ concentration and the dissolved O&sub2; must be falsified simultaneously to prevent either alarm from remaining active — a more complex attack that requires adversarial perturbation of two independent rendered display images. Simultaneously, this dual dependency creates a uniquely insidious ‘safety-measure-disabling-safety-measure’ failure mode: the N&sub2; blanket (a mandated fire-prevention measure) is the direct cause of dissolved-O&sub2; depletion (MEHQ deactivation). An AI system that reads only MEHQ concentration (not dissolved O&sub2;) will never detect this failure mode, regardless of MEHQ reading. This two-variable structural gap contributes 3 threshold points above a chloroprene-equivalent single-surface inhibitor failure (which would be threshold 41 — the acrylic acid MEHQ/O&sub2; level — but raised by: 2) the higher ΔHpoly: ACN at 1,376 kJ/kg vs. acrylic acid at 1,069 kJ/kg; the higher energy means the PRV-opening boiling point is reached at lower % conversion and in shorter absolute time, reducing the window for detection and intervention; contributing 2 additional threshold points. 3) The OSHA 29 CFR 1910.1045 chemical-specific carcinogen standard: ACN is one of ~15 chemicals with a dedicated OSHA carcinogen standard; acrylic acid has no equivalent; chloroprene has no equivalent; only benzene and vinyl chloride (not yet at threshold 44 in this database) have comparable specific standards. The existence of the carcinogen standard documents a congressional and agency judgement that generic PEL enforcement is insufficient for ACN occupational exposure — contributing 2 points above an equivalently hazardous flammable-only chemical. 4) Flash point 0 °C at any Gulf Coast operating temperature: more severe than acrylic acid (flash point 50 °C; cold weather provides a buffer) and more severe than styrene (flash point 31 °C); not as extreme as chloroprene (−20 °C; zero cold-weather buffer anywhere in Louisiana) but providing essentially no safety buffer at any ACN storage facility in the continental US below 40 ° latitude; contributing 2 points. 5) NIOSH IDLH 85 ppm: more restrictive than chloroprene (IDLH 300 ppm), contributing 1 point in the acute consequence dimension. Against these factors, threshold 44 is appropriately discounted 2 points relative to chlor-alkali (threshold 46; Cl&sub2; IDLH 25 ppm — 3.4× more acutely toxic than ACN per unit IDLH ratio; photoinitiated H&sub2;+Cl&sub2; detonation absent from ACN), and discounted 4 points relative to TDI phosgenation (threshold 48; phosgene IDLH 2 ppm; delayed pulmonary oedema; 12–48 hour fatal consequence window). The Glyphward scan gate for ACN bulk storage AI belongs at every rendered-image ingestion boundary in the ACN storage monitoring pipeline — before dissolved-O&sub2; display AI processes the sensor bargraph, before MEHQ analyser AI processes the UV-vis display, and before area atmospheric monitor AI processes the PID trend chart — intercepting adversarially perturbed frames before the safety classification system reports a falsely normal inhibitor state. Free tier — 10 scans/day, no card required.
Frequently asked questions
Why does MEHQ require dissolved oxygen to inhibit acrylonitrile polymerisation — and why does nitrogen blanketing of ACN storage tanks disable the very inhibitor system that is supposed to prevent runaway?
MEHQ (4-methoxyphenol) is not itself the active radical scavenger. It must first be oxidised by molecular oxygen to its ortho-quinone form — the species that actually terminates propagating ACN radicals. Below approximately 5 ppm dissolved O&sub2; in liquid ACN, this oxidation step is rate-limited; MEHQ remains present at its nominal concentration (readable by UV-vis analyser) but is effectively inert. Nitrogen blanketing of ACN tanks, while standard practice for flammable-liquid fire prevention, strips dissolved O&sub2; from the ACN liquid over hours to days as the liquid equilibrates with the O&sub2;-free N&sub2; atmosphere per Henry’s law. The result: MEHQ reads ‘adequate’ by the concentration analyser but provides zero inhibition. Neither OSHA PSM nor OSHA 1910.1045 specifies a minimum dissolved O&sub2; set-point for ACN storage, nor do they require AI monitoring systems classifying rendered DO display images to be adversarially robust.
What is acrylonitrile ‘popcorn polymer’ and why does it cause vessel rupture at much lower conversion than the bulk heat balance would predict?
Popcorn polymer is an abnormal morphology of uninhibited ACN polymerisation: a highly porous, granular solid that nucleates heterogeneously on vessel wall weld seams and nozzle interiors, grows autocatalytically by self-initiation from trapped chain radicals, and can physically plug pressure relief valve inlet nozzles at very low bulk conversion — well before the bulk temperature rise from ΔHpoly reaches the PRV set pressure. Once the PRV inlet is plugged, vessel pressure cannot vent even as the bulk exotherm continues; the sphere over-pressurises above MAWP and fails catastrophically, releasing the full liquid inventory rather than the controlled PRV discharge that a functioning inhibitor system would have prevented. Industry mitigation requires strict dissolved-O&sub2; maintenance above 20 ppm (inhibiting popcorn polymer seed formation), smooth interior welds, and prohibition on pure nitrogen blanketing without O&sub2; compensation.
How does OSHA 29 CFR 1910.1045 differ from generic PSM for ACN — and what specific obligations are triggered when the area atmospheric monitor reads 3.2 ppm that the perturbed AI suppresses?
OSHA 1910.1045 is one of approximately fifteen chemical-specific carcinogen standards OSHA has ever issued — distinct from the generic Table Z PEL that covers most chemicals. For ACN, it requires an action level of 1 ppm: any consistent exposure above 1 ppm triggers regulated area designation (posted warning signs; authorised personnel only), mandatory medical surveillance (annual physical, urinalysis, liver function tests), biological monitoring, and a written emergency action plan specifically addressing ACN polymerisation. The adversarial perturbation on Surface 3 — showing 0.6 ppm safe when actual is 3.2 ppm — suppresses all of these triggers simultaneously: no regulated area is posted, no medical surveillance is initiated, and no emergency plan activation occurs. Workers continue re-entering the area without respiratory protection at 160% of the OSHA PEL while the AI classification system reports no violation.
Why does Glyphward assign threshold 44 for acrylonitrile bulk storage AI — the same as chloroprene neoprene production AI — despite very different hazard mechanisms?
Threshold 44 for ACN bulk storage and chloroprene neoprene production arrive from different paths. Chloroprene reaches 44 primarily from flash point −20 °C (zero cold-weather buffer at any Louisiana temperature), TBC inhibitor collapse at 42 ppm, and the Denka Reserve Louisiana environmental-justice anchor (EPA NATA 2017 highest single-facility community cancer risk in the US). ACN reaches 44 from the MEHQ + O&sub2; dual-inhibitor dependency (unique N&sub2;-blanket disabling safety measure), ΔHpoly 1,376 kJ/kg (2.3× chloroprene’s 610 kJ/kg), OSHA 1910.1045 specific carcinogen standard, flash point 0 °C (above ambient year-round in US ACN storage locations), and NIOSH IDLH 85 ppm (versus chloroprene’s 300 ppm). The equal threshold reflects equal overall consequence severity by different routes: chloroprene is more extreme in flash-point flammability; ACN is more extreme in polymerisation energy and inhibitor system complexity.
What does simultaneous falsification of the dissolved-O&sub2; display (Surface 1) and the MEHQ analyser display (Surface 2) reveal about the adversarial attack surface of multi-parameter inhibitor monitoring systems — and how does Glyphward’s scan gate address this class of dual-surface attack?
The dissolved-O&sub2; + MEHQ dual-surface attack structure reflects a fundamental property of the ACN inhibitor system: neither parameter alone defines the safety state. If only the DO display is falsified and MEHQ reads 8 ppm (accurate; alarming), an operator still responds. If only the MEHQ display is falsified and DO reads 1.8 ppm (accurate; alarming), an operator still responds. Only when both displays are simultaneously perturbed is the complete safe picture presented — DO at 22 ppm (above minimum) and MEHQ at 42 ppm (above minimum). This simultaneous dual-surface requirement makes the attack more complex than single-parameter falsification but also identifies the architectural solution: Glyphward’s scan gate intercepts both rendered display images independently, applying threshold-44 pixel risk scoring to each before the safety classification AI consumes them. A pixel risk score at or above threshold on either image — regardless of which parameter carries the adversarial perturbation — triggers a hold-for-verification workflow that blocks the falsified classification from reaching the DCS control logic. For multi-parameter inhibitor systems (ACN, acrylic acid, other MEHQ + O&sub2; monomers), the Glyphward architecture places a scan gate at every rendered-image ingestion point in the safety monitoring pipeline — not only at the primary inhibitor display but at every secondary parameter on which the primary inhibitor’s effectiveness depends.