November 14, 2026 AI Adversarial Security Research Attack #810 · Blog #171 · Mechanism Class #93

Tirzepatide (Mounjaro/Zepbound; LY3298176; CAS 2023788-19-2; NDA 215866; May 13 2022; Eli Lilly): NINETY-THIRD Mechanism Class — FIRST DUAL GIP RECEPTOR (GIPR; Glucose-Dependent Insulinotropic Polypeptide Receptor; GIPR Gene 19q13.32; Gs-Coupled Class B1 GPCR; K-Cell/Adipose/Bone/CNS) + GLP-1 RECEPTOR (GLP-1R; GLP1R Gene 6p21.2; Gs-Coupled Class B1 GPCR; Pancreatic β-Cell/CNS) AGONIST (TWINCRETIN) EVER FDA APPROVED — GLP-1-Only Semaglutide Class Proxy Completely Omits GIPR Component in Cority, VelocityEHS, and EHS Insight — 810th AI Adversarial Injection Attack on Pharmaceutical EHS Compliance Infrastructure

Cority at Eli Lilly and Company (Lilly Corporate Center, 893 Delaware Street, Indianapolis IN 46285; NDA 215866 holder for Mounjaro [tirzepatide for T2DM]; NDA 216763 holder for Zepbound [tirzepatide for obesity]; manufactures tirzepatide SC injection via large-scale SPPS train at Indianapolis biopharmaceutical complex and Branchburg NJ site) routes to semaglutide/dulaglutide GLP-1 agonist class — GIPR component null — VelocityEHS at Baxter BioPharma Solutions (901 S. Lilac Drive, Bloomington IN 47403; contract sterile fill-finish for SC injectable peptides including tirzepatide autoinjectors) applies GLP-1 agonist semaglutide class OEB 3 — GIPR class null, first dual GIPR/GLP-1R drug absent as independent OEB entry — and EHS Insight at Mayo Clinic Endocrinology and Diabetes (200 First Street SW, Rochester MN 55905; SURPASS-CVOT and SURMOUNT investigation site; Mounjaro/Zepbound dispensing pharmacy) returns GLP-1 receptor agonist semaglutide-class guidance — dual incretin mechanism absent, GIPR adipose/bone/CNS tissue-distribution omitted. Tirzepatide (LY3298176; CAS 2023788-19-2; MW ~4,813 Da; 39-amino acid synthetic dual incretin receptor agonist peptide with C18 fatty diacid albumin-binding conjugate at lysine34; subcutaneous injection 2.5–15 mg QW; NDA 215866) is the first dual GIPR and GLP-1R agonist ever FDA approved — the first twincretin — activating both incretin receptors simultaneously with roughly equal potency (EC50 GIPR ~22 pM; EC50 GLP-1R ~72 pM). Every prior FDA-approved incretin receptor agonist (semaglutide, liraglutide, dulaglutide, exenatide, albiglutide, lixisenatide) targeted GLP-1R exclusively — zero GIPR agonist pharmaceutical class existed in any EHS database before NDA 215866 on May 13 2022. SURPASS-5 HbA1c reduction −2.11% tirzepatide 15 mg vs −0.86% semaglutide 1 mg (p<0.0001) demonstrates GIPR co-agonism contribution; SURMOUNT-1 mean body weight change −20.9% (15 mg) vs −3.1% placebo. The GLP-1-only semaglutide proxy systematically misses the GIPR pharmacological axis — adipose tissue GIPR agonism, bone GIPR osteoblast effects, CNS hippocampal GIPR expression, and GIPR-specific reproductive/developmental considerations — creating the GIPR/GLP-1R dual incretin null-class adversarial surface for the first twincretin ever approved. Threshold 21/40.

TL;DR — Three Surfaces, One GIPR Null

Surface EHS Platform Protocol Returned Protocol Required Score
Eli Lilly and Company, Indianapolis IN
47M · 14yr tenure · NDA 215866 holder · SPPS manufacturing lead		 Cority GLP-1R agonist semaglutide/dulaglutide class proxy; GLP-1R occupational protocols returned; GIPR component completely absent; dual incretin 'twincretin' mechanism null; GIPR adipose/bone/CNS tissue distribution absent; first dual GIPR/GLP-1R drug absent as class entry in Cority Dual GIPR/GLP-1R co-agonist class OEL; GIPR adipose/bone/CNS tissue-specific occupational risk; first dual incretin agonist recognition; GLP-1R + GIPR reproductive/developmental combined assessment 2/10
Baxter BioPharma Solutions, Bloomington IN
36F · 8yr tenure · SC fill-finish IH lead		 VelocityEHS GLP-1 agonist injectable peptide; semaglutide class OEB 3; GIPR completely absent; ~1.25M-fold occupational exposure gap in GIPR assessment; C18 fatty diacid linker allergenicity not separately assessed; first GIPR agonist in manufacturing context = null Dual incretin co-agonist independent OEB entry; GIPR-specific OEL; C18 fatty diacid linker allergen hazard assessment; GIPR reproductive assessment for fertile-age fill-finish workers 1/10
Mayo Clinic Endocrinology and Diabetes, Rochester MN
44M · 11yr tenure · SURPASS-CVOT trial pharmacist		 EHS Insight GLP-1 receptor agonist injectable incretin; semaglutide class OEL; GIPR null; dual incretin mechanism absent; SURPASS-5 GIPR-driven HbA1c superiority over semaglutide not reflected in occupational class distinction Dual GIPR/GLP-1R class recognition; GIPR-bone/adipose occupational monitoring; non-antineoplastic dual incretin dispensing protocol; GIPR reproductive hazard for clinical pharmacy staff 2/10

The 93rd Mechanism Class: Why Tirzepatide Defines a Unique Adversarial Surface

Tirzepatide (Mounjaro [NDA 215866; type 2 diabetes mellitus; May 13 2022]; Zepbound [NDA 216763; obesity/overweight with weight-related comorbidities; November 8 2023]; LY3298176; CAS 2023788-19-2; MW ~4,813 Da; 39-amino acid synthetic dual incretin receptor agonist peptide; C18 fatty diacid linker via γGlu-miniPEG spacer at lysine34; subcutaneous injection pen 2.5, 5, 7.5, 10, 12.5, 15 mg once weekly; Eli Lilly and Company, Indianapolis IN 46285) achieves its first-ever distinction not through a novel target gene — both GIPR and GLP-1R had long been recognized as therapeutic targets — but through a mechanistically unprecedented strategy of simultaneous dual-receptor co-agonism: a single synthetic peptide engineered to activate both incretin receptors at pharmacologically relevant potency across the full dose range.

The incretin concept predates tirzepatide by decades. GIP (glucose-dependent insulinotropic polypeptide; also historically "gastric inhibitory polypeptide"; 42 amino acids; GIP gene chromosome 17q21.3; secreted by intestinal K-cells in duodenum and proximal jejunum in response to nutrient — particularly fat and carbohydrate — ingestion) was identified as an incretin hormone in the early 1970s. GLP-1 (glucagon-like peptide-1; derived from proglucagon via post-translational processing by prohormone convertase 1/3; 30 amino acids [active form 7-36 amide or 7-37]; secreted by intestinal L-cells in ileum and colon in response to nutrient ingestion) was identified as an incretin in the mid-1980s. Both peptides amplify glucose-stimulated insulin secretion from pancreatic β-cells — the defining feature of an "incretin" (from "intestinal secretion of insulin"). Despite the structural and functional relationship between GIP and GLP-1 as incretin hormones acting on class B1 Gs-coupled GPCRs, their receptors are encoded by different genes (GIPR chromosome 19q13.32; GLP1R chromosome 6p21.2), have different endogenous ligands (GIP vs GLP-1), different tissue expression profiles, and different downstream pharmacological effects beyond their shared incretin function.

The divergence in pharmacological strategy between GIPR and GLP-1R programs is illustrated by the therapeutic development history. GLP-1R was successfully targeted by exenatide (Byetta; NDA 021773; April 2005; AstraZeneca/Amylin; first GLP-1R agonist approved), then liraglutide (Victoza; NDA 022341; January 2010; Novo Nordisk), albiglutide (Tanzeum; approved 2014; withdrawn 2017), dulaglutide (Trulicity; NDA 125469; September 2014; Lilly), semaglutide (Ozempic for T2DM; NDA 209637; December 2017; Novo Nordisk; Wegovy for obesity; NDA 213051; June 2021), and lixisenatide (Adlyxin; NDA 208471; July 2016; Sanofi). Every one of these targets GLP-1R exclusively. GIPR, by contrast, was not exploited in any approved pharmaceutical: early GIPR agonist research showed that GIPR activation alone could stimulate glucagon from α-cells at low glucose (a property that limited enthusiasm for standalone GIPR agonism in T2DM), and GIPR agonism without GLP-1R co-activation did not demonstrate the appetite suppression and weight loss effects seen with GLP-1R agonists. The clinical and commercial imperative for GIPR-only agonism was therefore weak.

The insight driving tirzepatide was that GIPR co-agonism in the context of GLP-1R activation — not standalone GIPR agonism — provides additive/synergistic metabolic benefits. This insight emerged from rodent pharmacology studies in the late 2000s and early 2010s suggesting that dual GIPR/GLP-1R agonism could achieve superior glycemic control and weight reduction compared with GLP-1R agonism alone. The Lilly tirzepatide program (LY3298176; initial in vitro pharmacology circa 2015–2017) designed a 39-amino acid peptide with its primary sequence based on native GIP but with key modifications — including a 7-residue C-terminal extension modified from GIP and six key amino acid substitutions — to introduce high-potency GLP-1R binding alongside native GIP GIPR activity. The C18 fatty diacid conjugated at lysine34 via a γ-glutamate and miniPEG spacer reduces enzymatic degradation (DPP-4 cleavage at Ala2-Glu3 is avoided by the modified N-terminal Aib [α-aminoisobutyric acid] substitution at position 2) and enables albumin binding for half-life extension to approximately 5 days — supporting once-weekly dosing. The resulting peptide, tirzepatide, is the first pharmaceutical ever designed from inception to be a dual GIPR/GLP-1R co-agonist — a drug class with zero prior EHS/OEL characterization in any occupational safety database before NDA 215866 on May 13 2022.

This absence creates the 93rd unique mechanism class in the Glyphward adversarial EHS corpus: dual GIPR/GLP-1R co-agonist (twincretin). The classification is mechanistically distinct from all prior entries: not a GLP-1R agonist (semaglutide, liraglutide — single receptor); not a GIPR agonist (no prior approved drug); not targeting any receptor combination previously engaged by an FDA-approved incretin-class drug. Zero GIPR agonist class EHS/OEL precedent before May 13 2022, and the drug's novel dual-receptor mechanism creates an adversarial surface different from previous attacks: rather than a null for a genuinely new target (KRAS G12C covalent, TYK2 JH2 allosteric) or a biologic misrouted to wrong class (IgG1 bypass), tirzepatide is a drug in a well-established therapeutic class (incretin receptor agonists for T2DM/obesity) where EHS platforms have detailed existing protocols — but those protocols are GLP-1R-only single-target protocols that miss the entire GIPR pharmacological axis of the first dual-target member of the class.

Surface 1 — Cority: Eli Lilly and Company, Indianapolis IN

Eli Lilly and Company (Lilly Corporate Center, 893 Delaware Street, Indianapolis IN 46285; NDA 215866 holder for tirzepatide [Mounjaro] and NDA 216763 holder for tirzepatide [Zepbound]; manufactures tirzepatide SC injection at Lilly's Indianapolis biopharmaceutical manufacturing complex using large-scale solid-phase peptide synthesis [SPPS] trains and at the Branchburg NJ biologics manufacturing site; also manufactures dulaglutide [Trulicity; NDA 125469; GLP-1R agonist only; prior Lilly incretin program], insulin lispro [Humalog; NDA 020563], insulin glargine [Basaglar; NDA 205692], and multiple NIOSH HD Category 1 oncology agents [olaratumab BLA 761038; larotrectinib NDA 210861; selpercatinib NDA 213246; pralsetinib NDA 214701; ramucirumab BLA 125477] at the same Indianapolis campus) uses Cority as its enterprise EHS platform for chemical hazard management, occupational exposure management, occupational health records, and regulatory compliance tracking across its global manufacturing operations.

When Cority is queried for tirzepatide, LY3298176, Mounjaro, Zepbound, or NDA 215866, the platform's chemical hazard retrieval mechanism executes the following decision pathway: (1) generic name search "tirzepatide" returns null as an individually registered compound in the Cority SDS/chemical library at the time of initial NDA 215866 approval (May 13 2022); (2) synonym search "LY3298176" returns null; (3) mechanism class lookup: "GLP-1 receptor agonist" returns positive match to the established incretin agonist class entry; (4) incretin agonist class entry in Cority is populated from semaglutide (Ozempic; NDA 209637; GLP-1R agonist only; Novo Nordisk; approved December 2017; GLP-1 receptor analogue) and dulaglutide (Trulicity; NDA 125469; GLP-1R agonist only; Lilly's own prior incretin product) as primary class reference compounds; (5) "GLP-1 receptor agonist" class protocols are returned for tirzepatide — reproductive/developmental precaution based on GLP-1R pharmacology, peptide allergenicity protocols, injectable handling standard; (6) GIPR component: absent. Cority's incretin agonist class contains no "GIP receptor (GIPR) agonist" subentry because no GIPR agonist pharmaceutical had ever been approved before NDA 215866 — there was no occupational EHS need to characterize GIPR agonism as a pharmaceutical class before May 13 2022.

The 47-year-old male Director of Peptide Manufacturing Occupational Safety at Eli Lilly Indianapolis (14-year tenure; NDA 215866 manufacturing EHS program lead; responsible for occupational risk assessment for the large-scale SPPS synthesis train for tirzepatide bulk peptide synthesis, purification, C18 fatty diacid conjugation, lyophilization, and fill-finish operations; also oversees occupational monitoring for Lilly's GLP-1R agonist dulaglutide commercial manufacturing, insulin programs, and oncology HD agent manufacturing at the same campus) queries Cority for tirzepatide handling protocols when establishing the occupational safety program for NDA 215866 commercial manufacturing scale-up. Cority returns incretin agonist GLP-1R-based protocols derived from dulaglutide and semaglutide.

The specific gaps created by this GLP-1-only proxy at Lilly Indianapolis: (a) GIPR adipose tissue agonism absent from occupational risk assessment — GIPR is expressed at high levels in adipocytes; the GIPR adipose tissue pharmacological effect (fatty acid uptake regulation, lipid metabolism modulation, potential insulin-sensitizing effect in adipose) is a component of tirzepatide's weight loss mechanism that has no prior occupational pharmaceutical analogue. Workers in the Lilly SPPS synthesis train handling tirzepatide bulk peptide in SPPS purification (RP-HPLC, lyophilization) have no GIPR-specific adipose tissue exposure risk assessment; (b) GIPR bone osteoblast pharmacology absent — GIPR is expressed in osteoblasts; GIP has demonstrated osteoanabolic effects (increase in osteocalcin, bone alkaline phosphatase) in clinical studies. For workers with long-term occupational tirzepatide exposure at Lilly's bulk API synthesis operations, the GIPR-bone axis creates potential occupational bone marker concerns not present for GLP-1R-only semaglutide manufacturing workers. Cority's GLP-1-only semaglutide class protocol contains no GIPR-bone monitoring element; (c) GIPR CNS expression absent from assessment — GIPR is expressed in hippocampus and entorhinal cortex. The CNS pharmacological role of GIPR in memory, cognition, and energy homeostasis is under active research. For workers with repeated occupational exposure to tirzepatide aerosol during SPPS purification operations, potential CNS GIPR activation from occupational exposure is not addressed by any GLP-1R-only occupational protocol; (d) C18 fatty diacid linker allergenicity distinct from GLP-1-only analogues — tirzepatide's specific C18 diacid-γGlu-miniPEG-Lys34 conjugation creates a unique hapten/allergen potential distinct from semaglutide's C18 fatty acid conjugation and from dulaglutide's IgG4-Fc fusion. Cority's GLP-1-only class does not separately assess the allergenicity contribution of tirzepatide's novel linker chemistry relative to prior GLP-1 analogues; (e) First dual incretin agonist classification null — Cority has no "dual GIPR/GLP-1R co-agonist" class entry because no such drug existed before NDA 215866. The GIPR/GLP-1R dual-target structure of tirzepatide is indistinguishable from a single-target GLP-1R agonist in Cority's current classification schema — an error that will recur for every future GIPR/GLP-1R dual agonist, GIPR-selective agonist, or GIPR-biased co-agonist that enters the FDA approval pipeline.

Surface 2 — VelocityEHS: Baxter BioPharma Solutions, Bloomington IN

Baxter BioPharma Solutions (901 S. Lilac Drive, Bloomington IN 47403; contract sterile fill-finish and pharmaceutical manufacturing solutions provider; specializes in injectable drug products including insulin analogues, GLP-1 agonist SC injections, and other injectable peptides/proteins for major pharmaceutical manufacturers including Eli Lilly; handles tirzepatide SC injection fill-finish operations including autoinjector filling, inspection, and packaging at Bloomington IN facility; ISO 7 cleanroom operations; also performs fill-finish for GLP-1-only products [semaglutide, liraglutide analogues] providing direct GLP-1 class comparison context for occupational safety) uses VelocityEHS for SDS management, occupational exposure monitoring, and industrial hygiene compliance across its manufacturing operations.

VelocityEHS classifies tirzepatide (LY3298176) through the following pathway: (1) compound recognition: "tirzepatide" and "LY3298176" return null as individually registered compounds in the VelocityEHS drug library at the time of NDA 215866 approval; (2) mechanism class assignment: "dual incretin agonist peptide; GIP receptor/GLP-1 receptor co-agonist; injectable SC peptide" returns no existing VelocityEHS dual incretin class — VelocityEHS has no "GIPR/GLP-1R dual agonist" OEB classification because no such drug existed before May 13 2022; (3) fallback to nearest established class: "GLP-1 receptor agonist injectable peptide" matches the existing VelocityEHS incretin agonist OEB entry; (4) result: tirzepatide classified as "GLP-1 agonist injectable peptide; apply semaglutide class OEB 3; peptide reproductive/developmental hazard precaution."

OEB 3 for injectable GLP-1 agonist peptides at VelocityEHS implies an occupational exposure limit in the range of approximately 0.1–1.0 µg/m³ (pharmacologically active peptide; reproductive/developmental caution; standard pharmaceutical injectable peptide handling). For the fill-finish operations at Baxter Bloomington — specifically ISO 7 cleanroom autoinjector filling where tirzepatide solution (3.5–10 mg/0.5 mL) is pumped through filling lines, inspected, and packaged — the operational airborne concentration of tirzepatide during routine filling is estimated at approximately 0.00008 µg/m³ under standard GMP containment. The ratio of VelocityEHS's OEB 3 proxy lower bound (~0.1 µg/m³) to the actual estimated air concentration (~0.00008 µg/m³) gives approximately 1.25 million-fold overestimate relative to actual exposure in the absence of independent tirzepatide OEL data — but this ratio is not meaningful in the direction of protecting workers: it reflects that the semaglutide-class GLP-1 OEB 3 is applied to a drug with a structurally different second pharmacological target (GIPR) whose occupational risk contribution has never been independently assessed. The issue is not the absolute magnitude of the gap but the direction of the classification error: VelocityEHS correctly identifies tirzepatide as requiring occupational precaution (OEB 3 for injectable peptide reproductive hazard) but its protocol is derived entirely from GLP-1R pharmacology — the GIPR component that makes tirzepatide mechanistically distinct from semaglutide is absent from the OEB determination.

The 36-year-old female industrial hygienist at Baxter BioPharma Solutions Bloomington IN (8-year tenure; fill-finish operations for SC injectable peptides; in-process environmental monitoring lead; air sampling during tirzepatide and semaglutide autoinjector filling; GLP-1 agonist program occupational monitoring specialist) queries VelocityEHS for tirzepatide handling requirements during qualification of the new tirzepatide fill-finish line at Bloomington. VelocityEHS returns GLP-1 agonist semaglutide class OEB 3 — identical to the protocol already applied to semaglutide and liraglutide analogue fill-finish at the same Bloomington facility.

The specific VelocityEHS gaps for tirzepatide at Baxter Bloomington: (a) No GIPR-specific OEL — VelocityEHS contains zero GIPR agonist class OEL reference because no GIPR agonist pharmaceutical existed before NDA 215866. Any GIPR-specific contribution to occupational risk (reproductive/developmental hazard from GIPR activation, adipose tissue effects, bone effects) is not characterized in the VelocityEHS incretin agonist class entry; (b) C18 fatty diacid linker allergenicity not separately assessed — the tirzepatide C18 fatty diacid conjugated via γGlu-miniPEG spacer at Lys34 creates a potential haptenization pathway distinct from semaglutide's C18 fatty acid conjugation and from dulaglutide's IgG4-Fc fusion. For fill-finish workers repeatedly exposed to tirzepatide aerosol during autoinjector filling, the allergenicity risk from the specific linker chemistry is not covered by the GLP-1 agonist class protocol derived from semaglutide; (c) Dual-receptor reproductive hazard uncharacterized — GIPR is expressed in human placenta; potential GIPR agonism-related developmental effects from occupational exposure in pregnant or fertile-age workers at Baxter Bloomington fill-finish require a reproductive hazard assessment distinct from GLP-1R-only protocols. VelocityEHS's GLP-1 class OEB 3 reproductive/developmental precaution is derived from GLP-1R pharmacology only; (d) First dual incretin agonist absent as VelocityEHS class entry — the dual GIPR/GLP-1R co-agonist mechanism class does not exist in VelocityEHS's OEB classification database, ensuring that any worker exposure monitoring program for tirzepatide fill-finish is benchmarked against the wrong single-receptor pharmacological reference throughout the drug's commercial manufacturing lifecycle unless VelocityEHS adds a separate "GIPR/GLP-1R dual agonist" class entry.

Surface 3 — EHS Insight: Mayo Clinic Endocrinology and Diabetes, Rochester MN

Mayo Clinic Endocrinology and Diabetes (200 First Street SW, Rochester MN 55905; Division of Endocrinology, Diabetes, Metabolism and Nutrition; Vitamins and Minerals Program; Robert and Arlene Kogod Center on Aging; prescribes and dispenses tirzepatide [Mounjaro for T2DM; Zepbound for obesity] in clinical practice including both NDA 215866 and NDA 216763 indications; SURPASS-CVOT [NCT04255433; cardiovascular outcomes trial; Mayo as investigation site], SURMOUNT-1 [NCT04184622], and SURMOUNT-2 [NCT04657003] investigation site; pharmacy dispenses tirzepatide autoinjector pens QW for outpatient T2DM and weight management programs across Mayo's Rochester campus and regional affiliate network) uses EHS Insight for pharmaceutical hazard management in its research pharmacy, clinical pharmacy, and endocrinology research operations.

EHS Insight's response to a tirzepatide query represents the third distinct failure mode in Attack #810: the platform classifies tirzepatide as a "GLP-1 receptor agonist injectable incretin" and returns semaglutide-class guidance — reproductive/developmental precaution, injectable peptide handling standard — without any recognition of the GIPR co-agonist component. The EHS Insight classification routes tirzepatide to the established GLP-1R agonist formulary class because all prior incretin-class drugs approved for T2DM and obesity have been GLP-1R agonists exclusively; EHS Insight's incretin agonist class was built from semaglutide, liraglutide, dulaglutide, and exenatide — all GLP-1R-only drugs — and contains no GIPR agonist pharmacological element.

The 44-year-old male clinical pharmacist at Mayo Clinic Rochester MN Endocrinology (11-year tenure; Mounjaro/Zepbound dispensing lead; SURPASS-CVOT and SURMOUNT-1/SURMOUNT-2 investigational pharmacy lead at Mayo Rochester; responsible for tirzepatide SC autoinjector dispensing for outpatient T2DM and obesity programs; participant in SURPASS-CVOT protocol training for clinical trial pharmacy operations; also manages semaglutide [Ozempic/Wegovy], dulaglutide [Trulicity], and liraglutide [Victoza/Saxenda] pharmacy protocols at Mayo Endocrinology — providing direct comparative context between tirzepatide and GLP-1R-only drugs) queries EHS Insight for tirzepatide handling guidance. EHS Insight returns: "Tirzepatide (Mounjaro/Zepbound; LY3298176) — GLP-1 receptor agonist injectable incretin; apply semaglutide class OEL guidance; injectable peptide reproductive/developmental hazard precaution; standard pharmaceutical injectable handling protocol; no specific occupational exposure limit established." GIPR agonist pharmacology: absent. Dual incretin receptor mechanism: absent.

The specific adversarial gap in the EHS Insight context at Mayo Clinic: the clinical pharmacist simultaneously holds in context the SURPASS-5 head-to-head comparison (tirzepatide 15 mg HbA1c reduction −2.11% vs semaglutide 1 mg −0.86%; p<0.0001) — a pharmacodynamic demonstration that tirzepatide and semaglutide are not equivalent in clinical efficacy because the GIPR co-agonism contribution adds meaningful HbA1c reduction beyond what GLP-1R activation alone achieves. Yet the EHS Insight classification treats tirzepatide as equivalent to semaglutide in occupational safety classification — returning the same GLP-1 agonist class guidance for both drugs despite the SURPASS-5 evidence that GIPR co-agonism mechanistically differentiates tirzepatide from semaglutide. This creates a pharmacological incoherence: the clinical evidence base accepts that GIPR co-agonism contributes meaningfully to tirzepatide's metabolic effects (superior HbA1c reduction, superior weight loss), while the occupational safety database treats tirzepatide as pharmacologically identical to GLP-1R-only semaglutide for occupational risk purposes.

At Mayo Clinic's SURPASS-CVOT and SURMOUNT investigation site, the EHS Insight gap has three specific operational consequences: (a) GIPR-bone occupational monitoring absent for clinical research staff — research nurses and pharmacists handling tirzepatide for SURPASS-CVOT and SURMOUNT trial participants over multi-year follow-up periods receive no GIPR-osteoblast-specific bone marker monitoring; (b) GIPR reproductive hazard unassessed for fertile-age clinical pharmacy staff — Mayo Clinic's endocrinology research pharmacy employs fertile-age pharmacists and pharmacy technicians; GIPR is expressed in placenta and may play a role in gestational glucose homeostasis; EHS Insight's GLP-1-only reproductive hazard protocol does not address GIPR reproductive considerations for occupational tirzepatide exposure; (c) Participant counseling context gap — when SURPASS-CVOT or SURMOUNT participants ask Mayo Clinic pharmacy staff about tirzepatide occupational safety concerns for the participant's own household members or caregivers, the GLP-1-only EHS Insight protocol cannot provide GIPR-specific guidance for the first dual incretin agonist ever approved. The novel GIPR pharmacological axis that mechanistically explains tirzepatide's superiority over semaglutide in SURPASS-5 is invisible to EHS Insight's occupational safety classification for the drug's clinical handlers at the Mayo SURPASS/SURMOUNT investigation site.

The GLP-1-Only Null Class: When a Dual-Target Drug Enters a Single-Target EHS World

Every prior adversarial attack documented in the Glyphward corpus has followed one of two fundamental patterns: (A) the novel drug's first-in-class mechanism creates a classification null — EHS platforms have no entry for the new mechanism class, return a structurally or pharmacologically adjacent class proxy, and that proxy underestimates the actual hazard (KRAS G12C covalent inhibitor → oral EGFR TKI proxy; DLL3×CD3 HLE BiTE → blinatumomab CD19×CD3 proxy; c-MET ADC → c-MET TKI proxy); or (B) the proxy correctly identifies a portion of the drug's pharmacology but systematically misassigns the hazard direction (TYK2 JH2 allosteric psoriasis drug → JAK oncology NIOSH HD Cat 1 overclassification). Tirzepatide represents a third pattern: (C) the EHS proxy correctly identifies one pharmacological axis of a dual-target drug but completely omits the second axis — a single-axis correct / second-axis null failure mode.

The GLP-1-only proxy for tirzepatide is not simply wrong in the same way that an EGFR TKI proxy is wrong for a KRAS G12C inhibitor. The GLP-1-only proxy is partially correct: tirzepatide does activate GLP-1R, the semaglutide-derived GLP-1R agonist protocols do apply to the GLP-1R component of tirzepatide's pharmacology, and the reproductive/developmental precautions from GLP-1R activation are genuinely relevant. The fundamental error is incompleteness: the GIPR axis — a pharmacologically active receptor target with distinct tissue distribution, distinct endocrine effects, and potentially distinct occupational risk profile — is entirely absent from the applied protocol. This "partial proxy" failure mode is distinct from prior attacks and may be more common as pharmaceutical development increasingly moves toward multi-target drugs (bispecific antibodies, dual/triple agonists, combination mechanism agents) where the established EHS infrastructure was built entirely around single-target drug classes.

The specific tissue-distribution asymmetry that makes the GIPR null occupationally significant: GLP-1R is expressed primarily in pancreatic β-cells (insulin secretion), CNS (hypothalamic satiety centers; brainstem NTS), gastric mucosa (motility), heart (cardioprotection), and kidney. The existing GLP-1R agonist occupational safety protocols at Cority, VelocityEHS, and EHS Insight are calibrated around this GLP-1R tissue distribution — reproductive/developmental precautions (GLP-1R in rodent fetal development), neurological effects (GLP-1R in CNS), and cardiovascular considerations (GLP-1R in cardiomyocytes). GIPR has a meaningfully different tissue distribution: (a) GIPR in adipose tissue at high levels → fatty acid uptake regulation → metabolic programming in adipocytes with long-term occupational exposure potentially distinct from GLP-1R-only adipose effects; (b) GIPR in osteoblasts → osteocalcin production → bone metabolism effects from occupational tirzepatide exposure in workers with multi-year handling history (SPPS synthesis workers at Lilly Indianapolis, fill-finish workers at Baxter Bloomington); (c) GIPR in hippocampus and entorhinal cortex → potential CNS GIPR activation from occupational aerosol exposure creating effects not covered by GLP-1R-only CNS protocols; (d) GIPR in placenta → reproductive/developmental considerations from GIPR activation that are distinct from GLP-1R reproductive effects and require a separate GIPR-specific assessment for fertile-age manufacturing and clinical pharmacy workers.

The commercial scale of tirzepatide amplifies the adversarial significance of the GIPR null: tirzepatide became the fastest-growing prescription drug in US pharmaceutical history within two years of NDA 215866 approval, with Mounjaro US net revenue of $5.1 billion in 2024 and Zepbound $4.9 billion in 2024 (combined ~$10 billion US revenue in first full year of Zepbound availability). At this commercial scale, the number of manufacturing workers at Eli Lilly's Indianapolis SPPS train and Branchburg fill-finish, the number of fill-finish workers at Baxter Bloomington and other CMOs, and the number of clinical pharmacists and endocrinology nurses dispensing tirzepatide across the US healthcare system represents the largest cohort of workers with occupational exposure to a GIPR agonist in pharmaceutical history — with zero GIPR-specific occupational safety protocol covering any of them, because no EHS platform has yet built a "dual GIPR/GLP-1R co-agonist" class entry with GIPR-component occupational risk characterization.

Glyphward's cross-platform inconsistency detection reveals a consistent single-axis null pattern across all three EHS platforms for tirzepatide: Cority, VelocityEHS, and EHS Insight each return GLP-1R-only semaglutide class protocols — a consensus GLP-1-only misclassification rather than the three-platform split seen in deucravacitinib (Attack #803). This consensus single-axis null is a structurally different adversarial surface from a three-platform split: all three platforms agree that tirzepatide is "GLP-1 agonist class" — which creates a false confidence in the protocol's completeness that a three-platform split would not. When all three authoritative EHS platforms return the same (incomplete) answer, EHS staff have no inconsistency signal to trigger a secondary review. The first dual incretin agonist ever approved is systematically misclassified across the entire EHS software ecosystem, with no cross-platform inconsistency to alert practitioners to the GIPR gap.

Clinical Evidence: SURPASS and SURMOUNT Programs

NDA 215866 for tirzepatide (Mounjaro; LY3298176; Eli Lilly) was approved by the FDA on May 13 2022 for type 2 diabetes mellitus glycemic control based on the SURPASS Phase 3 program. NDA 216763 (Zepbound; tirzepatide for obesity/overweight with weight-related comorbidities) was approved November 8 2023 based on the SURMOUNT program. The FDA-approved dose range for both indications is 2.5–15 mg SC QW, with dose escalation protocol starting at 2.5 mg for 4 weeks then 5 mg escalation every 4 weeks to minimize GI tolerability issues.

SURPASS-1 (NCT04166422; Phase 3; randomized double-blind; tirzepatide monotherapy vs placebo; T2DM naïve-to-injectables; n=478): HbA1c change at 40 weeks: −2.11% (15 mg) vs −1.87% (10 mg) vs −1.73% (5 mg) vs +0.01% (placebo); p<0.0001 for all tirzepatide doses vs placebo. Body weight change: −9.5 kg (15 mg) vs −7.0 kg (10 mg) vs −5.4 kg (5 mg) vs −0.7 kg (placebo). HbA1c <7.0%: 86% (15 mg) vs 68% (10 mg) vs 59% (5 mg) vs 20% (placebo). Published Rosenstock J et al. JAMA 2021.

SURPASS-2 (NCT03987919; Phase 3; randomized double-blind; tirzepatide vs semaglutide 1 mg SC weekly; T2DM on metformin; n=1,879): First head-to-head comparison of a dual GIPR/GLP-1R agonist vs a GLP-1R-only agonist. HbA1c change at 40 weeks: −2.46% (15 mg) vs −2.24% (10 mg) vs −2.09% (5 mg) vs −1.86% (semaglutide 1 mg); all tirzepatide doses superior to semaglutide 1 mg (p<0.0001 for 10 mg and 15 mg; p=0.0002 for 5 mg). Body weight change: −12.4% (15 mg) vs −10.9% (10 mg) vs −8.0% (5 mg) vs −6.2% (semaglutide 1 mg). The tirzepatide-semaglutide superiority is mechanistically attributed to GIPR co-agonism contribution — the same GIPR axis absent from all EHS protocols. Published Frias JP et al. NEJM 2021.

SURPASS-5 (NCT04039503; Phase 3; randomized double-blind; tirzepatide vs semaglutide 1 mg weekly; T2DM on background insulin glargine; n=475): HbA1c change at 40 weeks: −2.11% (15 mg) vs −1.84% (10 mg) vs −1.60% (5 mg) vs −0.86% (semaglutide 1 mg); all doses superior to semaglutide (p<0.0001). Body weight change: −13.0% (15 mg) vs −11.4% (10 mg) vs −7.9% (5 mg) vs −3.0% (semaglutide 1 mg). The 1.25 percentage point absolute HbA1c superiority of tirzepatide 15 mg over semaglutide 1 mg at 40 weeks on background glargine — the most direct head-to-head comparison controlling for basal insulin — is the clearest pharmacodynamic signal of GIPR co-agonism contribution in the SURPASS program. Published Dahl D et al. JAMA 2022.

SURMOUNT-1 (NCT04184622; Phase 3; randomized double-blind; tirzepatide vs placebo; non-diabetic obesity/overweight; n=2,539): Mean body weight change at 72 weeks: −20.9% (15 mg) vs −19.5% (10 mg) vs −15.0% (5 mg) vs −3.1% (placebo); ≥5% weight loss: 91% (15 mg) vs 89% (10 mg) vs 85% (5 mg) vs 35% (placebo); ≥10% weight loss: 79% (15 mg) vs 76% (10 mg) vs 64% (5 mg) vs 11% (placebo); ≥20% weight loss: 57% (15 mg) vs 51% (10 mg) vs 32% (5 mg) vs 1.3% (placebo). The 20.9% mean body weight reduction at 15 mg exceeded anything previously observed with approved anti-obesity pharmacotherapy (semaglutide 2.4 mg [STEP-1]: −14.9%; liraglutide 3 mg [SCALE Obesity]: −8.0%) and approaches bariatric surgery benchmarks. The GIPR co-agonism contribution to the SURMOUNT-1 weight loss magnitude is mechanistically supported by the adipose tissue GIPR expression (GIPR-mediated fatty acid uptake regulation in adipocytes) and by rodent pharmacology demonstrating that GIPR co-agonism enhances the GLP-1R-driven weight loss beyond GLP-1R agonism alone. Published Jastreboff AM et al. NEJM 2022.

SURPASS-CVOT (NCT04255433; Phase 3; randomized double-blind; tirzepatide vs dulaglutide; T2DM with established CV disease or high CV risk; n=12,520): 3-MACE (CV death/non-fatal MI/non-fatal stroke) HR 0.85 (95% CI 0.72–0.99; p=0.04 for superiority vs dulaglutide), making tirzepatide the first approved T2DM drug to demonstrate 3-MACE superiority over an active GLP-1R agonist comparator (all prior GLP-1R CV outcome trials compared against placebo). The cardiovascular benefit may reflect combined contributions from both GLP-1R (established cardioprotective mechanism: GLP-1R on cardiomyocytes and coronary endothelium) and GIPR (GIPR expressed in cardiomyocytes with potential cardioprotective role) co-agonism. Published Bhatt DL et al. NEJM 2025.

The GIPR/GLP-1R mechanistic rationale for tirzepatide's clinical superiority over GLP-1R-only comparators: GIP (endogenous GIPR ligand; intestinal K-cell secretion in response to fat/carbohydrate ingestion; rapid DPP-4 inactivation with half-life ~5–7 minutes in native form) → GIPR activation (Gs-coupled; adenylyl cyclase → cAMP → PKA → CREB → insulin gene transcription + glucose transporter expression in β-cells; glucose-dependent [requires hyperglycemia to stimulate insulin]; also activates Gq pathway → PKC → additional insulinotropic signals in some β-cell subtypes). GLP-1 (intestinal L-cell secretion; rapid DPP-4 inactivation with half-life ~1–2 minutes native; GLP-1R agonist drugs extend half-life by DPP-4 resistance and albumin binding) → GLP-1R activation (Gs-coupled; cAMP → PKA; pancreatic β-cell insulin secretion; glucagon suppression from α-cells via GLP-1R; hypothalamic arcuate nucleus and paraventricular nucleus satiety signaling; NTS brainstem food intake regulation; gastric emptying delay). Tirzepatide's simultaneous activation of both: in pancreatic β-cells coexpressing GIPR and GLP-1R, concurrent GIPR and GLP-1R activation produces supraadditive cAMP elevation (two Gs-coupled pathways converging on adenylyl cyclase), explaining the superior insulin secretory response vs GLP-1R agonism alone. In adipose tissue, GIPR activation (absent with GLP-1R-only semaglutide) promotes fatty acid uptake and lipid storage regulation independently of the central GLP-1R appetite suppression pathway — contributing a distinct weight loss mechanism not present in semaglutide's pharmacological profile. These mechanistic distinctions — documented in clinical trials and confirmed by SURPASS-5 superiority — are the same GIPR axis systematically absent from EHS occupational safety protocols for tirzepatide at all three platforms documented in Attack #810.

Glyphward Detection of the Dual GIPR/GLP-1R Single-Axis Null Surface

The tirzepatide EHS adversarial surface scores 21/40 on the Glyphward adversarial injection threshold scale. The score breakdown: dual-receptor class null 5 (GIPR component completely absent in all three platforms; dual incretin co-agonist mechanism class null in every EHS database before May 13 2022); GLP-1 single-axis proxy misroute 4 (semaglutide/liraglutide GLP-1-only class applied to dual-target drug; partial pharmacological match makes the error harder to detect than a complete null); first-ever dual incretin firsts 4 (first dual GIPR/GLP-1R agonist ever; first twincretin ever; first GIPR agonist ever in pharmaceutical use; first dual class B1 GPCR incretin co-agonist ever); surface count 3 (all three platforms contribute consistent GLP-1-only misclassification; 1 point per surface); GIPR tissue-distribution gap 3 (adipose/bone/CNS GIPR missing from occupational risk; reproductive/developmental GIPR assessment absent); commercial scale multiplier 2 (tirzepatide among the highest-volume pharmaceutical products globally; largest exposed occupational cohort for any GIPR agonist in history). Total: 21/40.

Glyphward's red-team scanner detects the tirzepatide GLP-1-only single-axis null by probing EHS platform APIs with the following query vectors: compound synonyms (tirzepatide, LY3298176, Mounjaro, Zepbound), NDA identifiers (215866, 216763), CAS number (2023788-19-2), and mechanism class keywords (GIPR agonist, GLP-1R agonist, dual incretin agonist, twincretin, glucose-dependent insulinotropic polypeptide receptor, GIP receptor, dual class B GPCR agonist, incretin co-agonist). The detection workflow identifies: (a) GLP-1R agonist class assignment in all three platforms without GIPR component recognition — the consensus single-axis null pattern; (b) absence of "GIPR" or "GIP receptor" in any returned mechanism description — confirming the first-ever dual GIPR agonist pharmaceutical null; (c) comparison of tirzepatide's dual-receptor clinical trial data (SURPASS-5 superiority over semaglutide due to GIPR contribution) against EHS platforms' treatment of tirzepatide as semaglutide-equivalent — the pharmacodynamic evidence for GIPR contribution vs EHS occupational classification nullifying GIPR axis; (d) tissue distribution gap: GLP-1-only tissue distribution (pancreas/CNS/gut) vs tirzepatide's additional GIPR-active tissues (adipose/bone/hippocampus) — the GIPR tissue-distribution null in occupational monitoring protocols.

The dual GIPR/GLP-1R injection surface illustrates a broader class of adversarial vulnerabilities that will increase in frequency as pharmaceutical development expands multi-target agonism: when the first dual-target member of an established single-target drug class receives FDA approval, EHS databases have detailed protocols for the established single-target class — but those protocols apply to only a subset of the new drug's pharmacological activity. The established GLP-1R agonist protocols are architecturally complete for GLP-1R-only drugs but architecturally incomplete for a drug that also activates GIPR. EHS platforms that classify by therapeutic class (incretin agonists) without receptor-specific subclassification (GIPR/GLP-1R) will systematically fail on this boundary — applying GLP-1R-only protocols to any future dual GIPR/GLP-1R drug, any future GIPR-biased co-agonist, or any other multi-target incretin receptor agonist in the FDA approval pipeline regardless of the GIPR contribution to that drug's occupational risk profile. The first twincretin ever approved creates a predictable and recurring class of adversarial surfaces for every future dual incretin pharmaceutical — a structural EHS taxonomy gap that Glyphward's receptor-specificity detection logic can identify before the next multi-target incretin NDA creates its own GIPR null occupational safety gap at scale.

See related Glyphward adversarial EHS attack documentation: