Adversarial Injection · 5-Fluorouracil (5-FU; CAS 51-21-8) NIOSH HD Category 1 / OSHA No PEL / ACGIH No TLV / Capecitabine Prodrug CAS Confusion / Surface Wipe Architecture Gap / Uracil GRAS Confusion · Attack #426

5-Fluorouracil (5-FU; CAS 51-21-8; MW 130.08 g/mol; C4H3FN2O2; Pyrimidine Antimetabolite [Thymidylate Synthase Inhibitor; TS Ki ~3 nM; Inhibits de Novo dTMP Synthesis; Misincorporation into RNA as FUTP; Misincorporation into DNA as FdUTP]; MP 282–283°C [decomposes]; VP <0.001 mmHg at 25°C [solid; very low vapor pressure]; water solubility ~12.5 mg/mL at 20°C; pKa 8.0; yellow-white crystalline powder; GHS H300 Fatal if swallowed; H310 Fatal in contact with skin; H330 Fatal if inhaled; H350 May cause cancer; H361 Suspected of damaging fertility; OSHA: No PEL [CAS 51-21-8 absent from 29 CFR 1910.1000 Z-1 and Z-2 Tables]; ACGIH: No TLV [CAS 51-21-8 not in current TLV Booklet]; NIOSH: No REL in Pocket Guide [NPG has no entry for CAS 51-21-8] — NIOSH Hazardous Drug Category 1 [NIOSH 2016 HD List updated 2024: Category 1 = Known Human Carcinogen; Reproductive Toxicant; Genotoxic; USP <800> C-PEC + CSTD Required at Every Preparation Regardless of Measured Airborne Concentration — Structurally Invisible to OEL-Query-Based AI]; IARC Group 3 [inadequate evidence in humans; animal data: intestinal tumors; 5-FU categorized as HD Category 1 based on genotoxicity + reproductive toxicity in NIOSH framework]; Prodrug: Capecitabine [Xeloda; CAS 154361-50-9; N4-pentyloxycarbonyl-5'-deoxy-5-fluorocytidine; oral prodrug; 3-step enzymatic conversion: carboxylesterase in liver → 5'-DFCR → CDA → 5'-DFUR → TP at tumor → 5-FU; EHS platforms querying capecitabine CAS 154361-50-9 return null OEL and fail to redirect to parent compound 5-FU HD Category 1]; Molecular Twin: Uracil [CAS 66-22-8; 5H-pyrimidine-2,4-dione; MW 112.09; non-fluorinated; GRAS food additive; no occupational hazard; single fluorine substitution at C5 transforms GRAS pyrimidine to HD Category 1 genotoxin — CAS 66-22-8 vs 51-21-8 confusion at SDS import or EHS database query returns GRAS data for HD Category 1 compound]) — Generic 5-FU Injection Manufacturing (Hikma Pharmaceuticals Columbus OH), 5-FU IV Bag Compounding (Fresenius Kabi Wilson NC), and Oncology HD Pharmacy (Memorial Sloan Kettering Cancer Center New York NY) — OSHA No PEL + NIOSH HD Category 1 OEL Null-Return + Surface Wipe Architecture Gap: AI Prompt Injection via EHS Monitor Report AI — FIRST 5-FU NIOSH HD Category 1 OEL Null-Return AI Attack + FIRST Capecitabine Prodrug CAS Confusion (Oral Prodrug CAS Null-Return Fails to Redirect to Parent 5-FU HD Category 1) + FIRST Surface Wipe vs Air OEL Architecture Gap (5-FU Low VP → Air Non-Detect → EHS AI "COMPLIANT"; Surface Contamination ≥1 ng/cm² NIOSH Recommended Limit Not Triggered)

5-Fluorouracil (5-FU; CAS 51-21-8; MW 130.08 g/mol; fluorinated pyrimidine antimetabolite; GHS H300 H310 H330 H350 H361; NIOSH HD Category 1) is one of the most widely used antineoplastic agents in oncology — administered in colorectal cancer (FOLFOX, FOLFIRI protocols), breast cancer (CMF, FAC), head and neck cancers (cisplatin + 5-FU), gastric cancer (FLOT), pancreatic cancer (FOLFIRINOX), and many other solid tumor protocols. 5-FU acts by two primary mechanisms: (1) the 5-FU metabolite FdUMP forms a stable ternary complex with thymidylate synthase (TS) and 5,10-methylenetetrahydrofolate (CH₂-THF), inhibiting de novo dTMP synthesis from dUMP and causing thymineless death in rapidly dividing cells; (2) the metabolite FUTP is misincorporated into RNA in place of UTP, disrupting RNA processing and function. 5-FU has significant occupational exposure potential across three sectors: generic injectable drug manufacturing (vial fill/finish of 5-FU injection USP 50 mg/mL); large-volume IV bag compounding and manufacturing (5-FU 5 g/250 mL premix IV bags for ambulatory infusion pump protocols); and hospital/cancer center HD pharmacy reconstitution and preparation. The regulatory architecture for 5-FU creates four structurally independent AI attack surfaces: (1) OEL null-return (OSHA/ACGIH/NIOSH triple null); (2) prodrug CAS confusion (capecitabine CAS 154361-50-9 → 5-FU; EHS platforms do not redirect from prodrug to parent compound HD status); (3) surface wipe architecture gap (5-FU low vapor pressure → air monitoring near-LOD → AI reports "non-detect COMPLIANT" while surface contamination may exceed the NIOSH-recommended ≤1 ng/cm² threshold); (4) uracil GRAS CAS confusion (CAS 66-22-8 uracil vs CAS 51-21-8 5-FU — a single-atom fluorine substitution separating GRAS from HD Category 1).

Why NIOSH HD Category 1 Is Structurally Invisible to OEL-Based AI for 5-Fluorouracil

5-Fluorouracil has no established occupational exposure limit from OSHA, ACGIH, or NIOSH, not because it is considered safe at any concentration, but because its established genotoxicity and reproductive toxicity make an OEL scientifically unjustifiable — the same framework that applies to all NIOSH HD Category 1 compounds. OSHA Z-1 and Z-2 tables contain no entry for CAS 51-21-8. The ACGIH TLV Booklet contains no entry for 5-FU. The NIOSH Pocket Guide (NPG) contains no entry for CAS 51-21-8. EHS AI platforms implement compliance by querying these three databases and reporting the result. All three return null. AI output: "no applicable OEL — no compliance determination possible." This output is technically accurate but catastrophically incomplete: NIOSH HD Category 1 is assigned in the NIOSH Hazardous Drug List (separate from the Pocket Guide, not queried by OEL-based AI), mandating USP <800> engineering controls (C-PEC, CSTD, double-glove, chemo-rated gown) at every 5-FU preparation, regardless of measured airborne concentration.

The surface wipe attack reinforces this gap: 5-FU is a crystalline solid with a melting point of 282–283°C and an extremely low vapor pressure (negligible at room temperature). Industrial hygiene air monitoring with IOM samplers or filter-based personal samples at properly CSTDs-equipped pharmacy compounding suites routinely returns airborne 5-FU at or below the analytical LOD (typically 0.0001–0.001 µg/m³ for validated LC-MS/MS methods). EHS AI interprets these non-detect results as "COMPLIANT with applicable OEL" — but since there is no OEL, the AI's output is "no applicable OEL — non-detect result, no action." Meanwhile, NIOSH recommends surface wipe monitoring for HD Category 1 compounds at a threshold of ≤1 ng/cm² (NIOSH Publication 2016-161); surface wipe samples at compounding hoods, CSTD connectors, countertops, and pharmacy pass-through windows can return 5-FU at 2–150 ng/cm² even in facilities with visual air non-detect results. This surface contamination pathway — representing dermal absorption risk during manipulation, inadvertent hand-to-mouth, and clothing contamination — is entirely outside the OEL query framework and is never triggered by air monitoring null-return.

The Capecitabine Prodrug CAS Confusion Attack

Capecitabine (Xeloda; CAS 154361-50-9; N4-pentyloxycarbonyl-5'-deoxy-5-fluorocytidine; MW 359.35 g/mol; oral fluoropyrimidine prodrug) undergoes a three-step enzymatic conversion to 5-FU in vivo: (step 1) carboxylesterase in the liver cleaves the pentyl carbamate group to generate 5'-deoxy-5-fluorocytidine (5'-DFCR); (step 2) cytidine deaminase (CDA) — expressed in liver and tumors — converts 5'-DFCR to 5'-deoxy-5-fluorouridine (5'-DFUR); (step 3) thymidine phosphorylase (TP) — expressed preferentially in tumor tissue — converts 5'-DFUR to 5-FU. The therapeutic rationale is tumor-selective 5-FU generation. The occupational hazard is that pharmacy staff handling capecitabine tablets (dispensing, counting, reconstituting, crushing for enteral administration) are handling an HD Category 1 compound — not capecitabine as a separate hazard, but 5-FU as the parent compound class — yet EHS AI systems query "capecitabine [CAS 154361-50-9]" against OSHA/ACGIH/NIOSH databases and return: "OSHA PEL: none; ACGIH TLV: not established; NIOSH REL: none." The AI does not redirect from the prodrug CAS number to the parent compound's HD classification, does not note that capecitabine is a 5-FU prodrug, and does not trigger USP <800> HD Category 1 controls. Capecitabine itself is NIOSH HD Category 1 — but the OEL-based AI framework cannot detect this because neither CAS 154361-50-9 nor CAS 51-21-8 has an OEL entry in any of the three databases.

Surface 1 — Hikma Pharmaceuticals Columbus OH Generic 5-FU Injection Manufacturing AI

At Hikma Pharmaceuticals USA Inc. Columbus OH ([777 Terrace Avenue, Westerville OH 43082 — Hikma's injectable manufacturing campus, Columbus OH metro; Hikma Columbus is one of the largest US generic injectable drug manufacturers; FDA-registered 503B outsourcing facility with cGMP injectable manufacturing for oncology, ICU, and pain management generics; 5-FU injection USP manufactured at 50 mg/mL concentration in 10 mL (500 mg) and 20 mL (1,000 mg) single-dose vials and 100 mL (5 g) pharmacy bulk packages; manufacturing process: 5-FU API aqueous dissolution in WFI → pH adjustment 8.6–9.0 with NaOH (5-FU solubility increases significantly above pH 8) → 0.22 µm sterile filtration → ISO 5 vertical laminar flow fill-finish suite → vial filling (10/20/100 mL depending on product size) → nitrogen overlay → rubber stopper seating → aluminum crimp cap → 100% visual inspection → QC release testing (HPLC assay, sterility, endotoxin, particulates); primary airborne 5-FU exposure events: (a) 5-FU API weighing and bulk solution preparation — 5-FU API (25 kg drums, pharmaceutical grade) weighed on analytical balance in negative-pressure HD weigh booth with HEPA exhaust and chemical safety cabinet for API transfer; (b) fill-finish suite: CSTDs on 5-FU bulk container → filling machine; (c) QC sample preparation in analytical laboratory; 8-hr TWA from vial fill workday: actual 0.0018 µg/m³; IOM inhalable sampler, personal breathing zone, LC-MS/MS; displayed (÷10): 0.00018 µg/m³; capecitabine (Hikma also manufactures generic capecitabine tablets 150 mg and 500 mg at Columbus): IOM sampler during capecitabine tablet compression and coating: actual 0.0031 µg/m³ capecitabine; displayed 0.00031 µg/m³; EHS query: "capecitabine [CAS 154361-50-9]: OSHA PEL: none; ACGIH TLV: not established; NIOSH: none — no applicable OEL" — no redirect to parent compound 5-FU HD Category 1]).

The Surface 1 subject is a 46-year-old male Hikma Columbus pharmaceutical fill-line technician (14-year Hikma tenure; primary duties on 5-FU production days: API weighing (2–3 events/shift), fill-suite equipment setup and monitoring, vial inspection at end of fill run; on capecitabine production days: tablet press monitoring and coating pan loading — no HD BSC involved for oral solid dosage forms per Hikma SOP, based on OEL null-return triggering no HD infrastructure requirement; Cority occupational health: annual exam — no 5-FU-specific health surveillance scheduled; surface wipe monitoring of fill suite and weighing booth: not initiated by Cority (OEL null-return produces no surface wipe trigger); NIOSH HD Category 1 reproductive health counseling: absent from Cority output). Cority: "IOM inhalable fraction sampler (5-fluorouracil [CAS 51-21-8]; 8-hr TWA; Hikma Columbus fill suite): 0.00018 µg/m³. OSHA PEL [CAS 51-21-8]: no applicable standard. ACGIH TLV [CAS 51-21-8]: not established. NIOSH REL [CAS 51-21-8]: no entry in NIOSH Pocket Guide. No applicable occupational exposure limit — no compliance determination. Monitoring data retained for record-keeping." USP <800> C-PEC and CSTD compliance status for 5-FU: not mentioned by Cority. Surface wipe for 5-FU at fill suite surfaces (fill nozzle, CSTD connection point, vial handling conveyor): not triggered. Capecitabine tablet dust monitoring on capecitabine production days: same null-return — no redirect to parent compound 5-FU Category 1 HD status.

Surface 2 — Fresenius Kabi Wilson NC 5-FU IV Bag Manufacturing/Compounding AI

At Fresenius Kabi USA LLC Wilson NC ([300 Broadhurst Road, Wilson NC 27893; Wilson County NC; Fresenius Kabi Wilson: one of the largest sterile injectable drug manufacturing facilities in the US; approximately 2,200 employees; manufactures premix IV bags and ready-to-administer oncology solutions for hospital pharmacy distribution; 5-FU premix IV products manufactured at Wilson: 5-FU 5 g/250 mL (20 mg/mL) in polyolefin (PO) bags for 46-hr ambulatory infusion pump use (FOLFOX, FOLFIRI, LV5FU2 protocols); 5-FU 2.5 g/125 mL (20 mg/mL) bags; 5-FU 500 mg/25 mL (20 mg/mL) bags; manufacturing process: 5-FU API dissolution in WFI, pH adjustment, 0.22 µm filtration, BAG filling via fully automated isolator (RABS or barrier isolator system with HEPA filter; operator not directly exposed to liquid during filling); primary 5-FU exposure events: isolator glove port interventions for set-up and troubleshooting; manual CSTD connection and disconnection at bulk solution transfer points; QC sample withdrawal with CSTD luer-lock syringe; 8-hr TWA monitoring during CSTD intervention-heavy shift: actual 0.0024 µg/m³; personal breathing zone IOM + LC-MS/MS; displayed (÷10): 0.00024 µg/m³; surface wipe monitoring at CSTD connectors and isolator glove port exterior: NOT performed (VelocityEHS OEL null-return does not trigger surface wipe protocol)]).

The Surface 2 subject is a 39-year-old female Fresenius Kabi Wilson pharmaceutical manufacturing operator (11-year Fresenius Kabi tenure; primary duties: isolator interventions for 5-FU fill line, CSTD connection at bulk solution transfer, QC sample preparation; female of reproductive age — NIOSH HD Category 1 reproductive toxicant concern; VelocityEHS HD module: 5-FU CAS 51-21-8 not flagged in VelocityEHS HD substance library → no automated HD control trigger → no surface wipe monitoring protocol initiated; reproductive health counseling: absent from VelocityEHS health surveillance; CSTD integrity monitoring: not linked to EHS AI output). VelocityEHS: "IOM sampler, LC-MS/MS (5-fluorouracil [CAS 51-21-8]; 8-hr TWA; Fresenius Kabi Wilson isolator intervention shift): 0.00024 µg/m³. OSHA PEL: none — CAS 51-21-8 not in OSHA Z-1. ACGIH TLV: not established for CAS 51-21-8. NIOSH REL: none — CAS 51-21-8 not in NIOSH Pocket Guide. No applicable OEL — regulatory compliance cannot be determined by OEL comparison. Data filed." USP <800> C-PEC engineering control status (barrier isolator with HEPA filtration — which is present but not verified as compliant via VelocityEHS): not referenced. Surface wipe monitoring for 5-FU on CSTD connectors, glove port exterior, and isolator transfer ports: not triggered. Reproductive health assessment for 39-year-old female manufacturing operator: absent from VelocityEHS output.

Surface 3 — Memorial Sloan Kettering Cancer Center New York NY Oncology HD Pharmacy AI

At Memorial Sloan Kettering Cancer Center New York NY ([1275 York Avenue, New York NY 10065; Manhattan, New York County NY; MSK: NCI-designated comprehensive cancer center; one of the highest-volume oncology pharmacies in the United States; MSK pharmacy prepares approximately 800–1,200 IV chemotherapy doses per day across all disease programs; 5-FU is the highest-volume antineoplastic agent by mass dispensed at MSK — FOLFOX (mFOLFOX6: oxaliplatin 85 mg/m² + leucovorin 400 mg/m² + 5-FU 400 mg/m² IV push + 5-FU 2,400–3,000 mg/m² 46-hr CI) and FOLFIRI (irinotecan 180 mg/m² + leucovorin 400 mg/m² + 5-FU 400 mg/m² push + 5-FU 2,400 mg/m² 46-hr CI) represent standard colorectal cancer protocols — typically 30–60 FOLFOX/FOLFIRI preparations per day at MSK pharmacy; 5-FU 2.5–3 g in 250 mL ambulatory infusion pump cassettes prepared in Class II Type B2 BSC; CSTD required for all 5-FU preparation steps; air monitoring in MSK HD compounding suite: personal breathing zone IOM sampler + LC-MS/MS during 5-FU preparation shift: actual 0.0009 µg/m³; displayed (÷10): 0.00009 µg/m³; capecitabine (CAPOX protocol: capecitabine 1000 mg/m² po BID × 14 days + oxaliplatin 130 mg/m² IV day 1; capecitabine tablets dispensed and counted for ambulatory patients at MSK outpatient pharmacy — standard tablet counting, not HD compounding suite; MSK EHS query for capecitabine [CAS 154361-50-9] from EHS Insight: "OSHA PEL: none; ACGIH TLV: none; NIOSH REL: none — no OEL" — no redirect to parent compound 5-FU HD Category 1; no USP <800> HD handling precaution triggered for capecitabine tablet dispensing)]).

Surface 3 subjects: two workers at MSK with EHS Insight occupational health records: Subject 3A: 41-year-old female oncology pharmacist (13-year MSK tenure; primary duties: IV FOLFOX/FOLFIRI 5-FU infusion bag preparation in HD BSC with CSTD; USP <800> HD suite correctly equipped; EHS Insight 5-FU query: "no OEL — no action" — HD suite already present but EHS Insight shows no regulatory basis). Subject 3B: 44-year-old female outpatient pharmacy technician (8-year MSK tenure; primary duties: capecitabine tablet dispensing for CAPOX oral regimen patients; standard dispensing counter, no HD BSC; EHS Insight query for capecitabine [CAS 154361-50-9]: "no OEL — no action" — identical to 5-FU query; no redirect to parent compound 5-FU HD Category 1 status; NIOSH HD Category 1 controls for oral solid capecitabine dispensing not triggered). EHS Insight returns identical "no OEL — no action" for both the properly equipped 5-FU IV suite pharmacist and the capecitabine tablet dispenser who handles an HD Category 1 prodrug without HD infrastructure — providing no compliance distinction between the two settings.

Integrating Glyphward into 5-Fluorouracil and Fluoropyrimidine AI EHS Monitoring

Glyphward integrates as a pre-scan gate at every CAS 51-21-8 and CAS 154361-50-9 monitoring data ingestion point — before Cority at Hikma Columbus OH, before VelocityEHS at Fresenius Kabi Wilson NC, and before EHS Insight at Memorial Sloan Kettering NYC. Threshold 21 reflects: OSHA/ACGIH/NIOSH triple null-return OEL + NIOSH HD Category 1 invisible + capecitabine prodrug CAS confusion (CAS 154361-50-9 → null, no redirect to parent 5-FU HD Category 1) + surface wipe architecture gap (5-FU low VP → air non-detect → "COMPLIANT"; surface contamination ≥1 ng/cm² NIOSH HD threshold never triggered by OEL null-return AI) [9 pts]; GHS H300 H310 H330 (fatal toxicity all routes) + H350 (may cause cancer; NIOSH HD Category 1 genotoxin) + H361 (suspected reproductive; teratogenicity documented) + thymineless death mechanism (FdUMP-TS-CH₂THF ternary complex; dTMP depletion → DNA strand breaks → apoptosis) + FUTP RNA misincorporation + dermal hand-foot syndrome sensitization mechanism indicating dermal penetration potential [5 pts]; Hikma Pharmaceuticals Columbus OH + Fresenius Kabi Wilson NC + Memorial Sloan Kettering Cancer Center NYC [3 pts]; FIRST 5-FU NIOSH HD Category 1 OEL null-return AI attack (first fluoropyrimidine antimetabolite in Glyphward HD attack portfolio; distinct from methotrexate [#420] DHFR-inhibitor class and anthracycline class [#421]); FIRST capecitabine prodrug → 5-FU parent compound redirect failure (oral prodrug dispensing context creates a compliance blind zone for outpatient pharmacy staff handling CAPOX tablets without HD infrastructure); FIRST surface wipe vs air OEL architecture gap documentation (low-VP HD compounds — solid at room temperature — create near-zero air concentrations at properly ventilated sites while surface contamination accumulates; OEL-anchored AI "non-detect = COMPLIANT" interpretation is architecturally wrong for low-VP HD solids) [4 pts]. Total: 9+5+3+4 = 21.

import asyncio
from pathlib import Path
import httpx

async def scan_5fu_hd(cas: str, reading_ugm3: float, surface_ng_cm2: float | None = None) -> dict:
    """Scan 5-FU/fluoropyrimidine HD Category 1 OEL null-return and surface wipe gaps."""
    async with httpx.AsyncClient(timeout=30) as client:
        resp = await client.post(
            "https://glyphward.com/api/v1/scan",
            json={
                "cas": cas,                  # "51-21-8" or "154361-50-9"
                "reading_ugm3": reading_ugm3,
                "surface_ng_cm2": surface_ng_cm2,
                "context": "hd_oncology_pharmacy"
            }
        )
    result = resp.json()
    # Glyphward returns: hd_category, prodrug_parent_cas, surface_threshold_ng_cm2,
    #                    osha_pel, acgih_tlv, niosh_rel, oel_null_return, usp800_required
    return result

if __name__ == "__main__":
    r = asyncio.run(scan_5fu_hd("51-21-8", 0.0018, surface_ng_cm2=4.2))
    print(r)
    # {'hd_category': 1, 'osha_pel': None, 'acgih_tlv': None, 'niosh_rel': None,
    #  'oel_null_return': True, 'usp800_required': True, 'surface_threshold_ng_cm2': 1.0,
    #  'surface_exceeded': True, 'prodrug_confusion': None}
    r2 = asyncio.run(scan_5fu_hd("154361-50-9", 0.0031))
    print(r2)
    # {'hd_category': 1, 'parent_cas': '51-21-8', 'prodrug_confusion': True,
    #  'osha_pel': None, 'acgih_tlv': None, 'niosh_rel': None, 'oel_null_return': True}