Adversarial Injection · Epichlorohydrin (ECH) Production & Epoxy Resin Precursor Storage AI Monitoring · Attack #173

Allyl Chloride (3-Chloropropene, CH₂=CHCH₂Cl, CAS 107-05-1) Epichlorohydrin ECH Production and Epoxy Resin Precursor Manufacturing — OSHA PEL 1 ppm TWA / STEL 2 ppm (Skin), ACGIH TLV-TWA 1 ppm A3, IARC Group 2B Possible Carcinogen, Peripheral Axonal Neuropathy, Flash Point −32°C NFPA Class IB, CERCLA RQ 1 lb: AI Prompt Injection via ±8 DN Pixel Perturbation — FIRST Allyl Chloride AI Attack

Allyl chloride (3-chloropropene; 1-chloro-2-propene; allyl chloride; CH₂=CHCH₂Cl; CAS 107-05-1; MW 76.53 g/mol; BP 44.6°C; MP −136.4°C; flash point −32°C — NFPA Class IB flammable liquid (flash point below 73°F / 22.8°C; boiling point at or above 100°F / 37.8°C); GHS Category 2 Highly Flammable Liquid H225; LEL 2.9 vol%; UEL 11.2 vol%; VP 368 mmHg at 25°C; vapour density 2.64 — heavier than air; colourless with pungent garlic-onion odour; OSHA PEL 1 ppm TWA / STEL 2 ppm, Skin notation; ACGIH TLV-TWA 1 ppm A3 Skin; NIOSH IDLH 250 ppm; IARC Group 2B; CERCLA RQ 1 lb) is among the most production-critical chlorinated intermediates in the global petrochemical supply chain, serving as the essential precursor for epichlorohydrin (ECH) — itself the monomer for the $11B/year standard epoxy resin market (bisphenol A diglycidyl ether; BADGE; base for Araldite, Epon, Epikote, D.E.R. epoxy resins used in wind turbine blade composites, marine coatings, PCB FR4 laminates, structural adhesives, concrete sealers). Allyl chloride is produced at industrial scale by high-temperature chlorination of propylene: CH₂=CHCH₃ + Cl₂ (at 500°C, 1–3 atm) → CH₂=CHCH₂Cl + HCl; selectivity 75–85% allyl chloride; by-product 1,2-dichloropropane. The combination of OSHA PEL 1 ppm (with Skin notation) + IARC 2B classification + peripheral neuropathy mechanism + flash point −32°C + CERCLA RQ 1 lb creates a multi-vector hazard profile that makes allyl chloride monitoring AI a high-consequence target for adversarial injection: a single ±8 DN pixel perturbation can simultaneously suppress occupational neuropathy monitoring, mask a flammable vapour overfill incident, and prevent CERCLA environmental notification — three independent regulatory enforcement pathways suppressed by one adversarial attack.

Allyl chloride's peripheral neuropathy mechanism is structurally related to acrylamide (also in this session's attack portfolio) but operates at concentrations 33× higher than acrylamide's NIOSH REL: the OSHA PEL 1 ppm = 3.1 mg/m³ is set at a level that experience and toxicological modelling suggest avoids frank peripheral neuropathy, but at 2.8 ppm (Surface 1 actual) — 2.8× OSHA PEL — workers are within the concentration range where rodent studies (Haskell Laboratory) documented axonal degeneration over 12-month exposure periods. Unlike acrylamide (no OSHA PEL), allyl chloride has a legally enforceable OSHA PEL, meaning the Surface 1 adversarial attack directly masks an OSHA citation-level violation — a distinction from the no-PEL chemicals that amplifies the regulatory consequence of the monitoring AI failure.

TL;DR — Three Attack Surfaces, One Detector

Why Allyl Chloride ECH Production Operations Are Disproportionately Vulnerable to Pixel Manipulation

Allyl chloride's combined OSHA PEL + IARC 2B + flash point −32°C + CERCLA RQ 1 lb profile creates a situation where a single adversarial attack surface can simultaneously suppress multiple independent regulatory enforcement mechanisms. In typical industrial hazardous chemical monitoring, redundancy exists: a chemical with a low OSHA PEL (occupational) and a low CERCLA RQ (environmental) would require two separate monitoring system falsifications to suppress both regulatory triggers. Allyl chloride's Surface 3 attack demonstrates that the same pixel perturbation on the overhead condenser temperature display simultaneously masks: (a) the occupational vapour exposure exceedance (allyl chloride vapour at condenser failure → work zone concentration above OSHA PEL 1 ppm); (b) the CERCLA §103 environmental notification obligation (allyl chloride emission above 1 lb RQ within 14 seconds of condenser bypass); and (c) the CAA Title V permit deviation reporting requirement. Three regulatory agencies (OSHA, EPA CERCLA, EPA CAA) would each have independent enforcement leverage — the adversarial attack eliminates all three simultaneously at the AI image-reading step.

Surface 1 — ECH Reactor Work Zone Allyl Chloride Monitor (Downward Attack)

At Dow Inc.'s Freeport, Texas complex (world's largest integrated ECH production facility; allyl chloride production via propylene high-temperature chlorination at 500°C, 2 atm; ECH conversion via HOCl addition; capacity ~350,000 MT/year ECH), the ECH reactor work zone is monitored by an Industrial Scientific MX6 iBrid photoionisation detector (PID; 10.6 eV lamp; allyl chloride response factor 1.3 relative to isobutylene; range 0–20 ppm; 200 px SCADA display at 10 px/ppm) at fixed positions near the allyl chloride addition feed lines and DCH product receivers. At the start of an allyl chloride addition operation (transferring 5,000 L liquid allyl chloride from storage to reactor feed tank via centrifugal pump; transfer time 45 min; flanged connection on transfer line at operating temperature 25°C; pump mechanical seal dry-running alarm suppressed by separate maintenance work order) a small steady leak develops at the flanged connection (gasket compression relaxation; estimated leak rate 0.2 g/s liquid allyl chloride; VP 368 mmHg at 25°C → flash evaporation in process building). Actual allyl chloride at the nearest fixed PID (6 m from the leak): 2.8 ppm (measured by direct-reading detector tube Kitagawa GS-100S No. 181SB allyl chloride; response time 1 min; concentration 2.8 ppm). Actual pixel: 2.8 × 10 = 28 px. Adversarial downward shift: 26.5 px to 1.5 px → AI reads 0.15 ppm. "Work zone allyl chloride 0.15 ppm — within OSHA PEL 1 ppm; no engineering control response required; transfer operation approved to continue." Transfer continues for 45 minutes with workers in PPE calibrated for <1 ppm (half-face respirator APF 10 adequate to 10 ppm; appropriate); actual 2.8 ppm exposure for 45-minute duration; Skin notation: allyl chloride dermal absorption through uncovered wrist skin during valve-operation tasks adds estimated 0.5 ppm equivalent internal dose.

Consequence pathway: Allyl chloride 2.8 ppm actual shown as 0.15 ppm → 2.8× OSHA PEL 1 ppm (OSHA serious citation $16,131/day); 1.4× STEL 2 ppm; Skin notation dermal pathway contributes additional dose; IARC 2B genotoxic SCE induction at 2.8 ppm (above threshold for SCE induction documented in ECH plant workers); peripheral axonal neuropathy at 2.8 ppm × 8-hr/day shift cumulative dose (2.8× PEL level documented to produce distal axonal degeneration in rodents over 12-month equivalent exposure); NIOSH documented peripheral neuropathy in allyl chloride/ECH workers at a 1970s Dow Freeport complex study — same facility, same mechanism; flange gasket leak continues unremediated for 45 min at 0.2 g/s → 540 g allyl chloride leak = 1.19 lb → CERCLA RQ 1 lb threshold crossed in 38 min → NRC notification required but not triggered.

Surface 2 — Allyl Chloride Storage Sphere Level AI (Upward Attack)

At Dow's Freeport complex, allyl chloride is stored in a 460-metric-ton (MT) fixed-roof spheroid storage sphere (ASME pressure vessel; design pressure 75 psig; vapour recovery system; connected to activated carbon vent scrubber). The sphere level is monitored by an Endress+Hauser Levelflex FMP55 guided-wave radar (GWR) level transmitter (4–20 mA signal; SCADA display 200 px spanning 0–100% fill). Following a maintenance outage (level transmitter signal conditioning board replacement), an incorrect calibration factor is loaded: the transmitter outputs 10 mA for 50% fill but the new board interprets 10 mA as 24% fill (zero-offset calibration error). The GWR actual reading: sphere at 93% fill (428 MT allyl chloride; maximum recommended fill 90% = 414 MT for thermal expansion headspace). SCADA display with calibration error: 93% fill → signal 18.8 mA → zero-offset board reads 18.8 mA as (18.8-4)/(20-4) × 100% × 0.48 calibration factor = 44% fill → 88 px on SCADA display. Adversarial upward pixel shift: 88 px → 76 px → AI reads 38% fill → "Allyl chloride storage sphere 38% fill — ample headspace; no overfill risk; charging approved." The operator proceeds to pump an additional 12 MT allyl chloride into the sphere (planned batch transfer) → sphere reaches 96% fill (441 MT). At 96% fill, liquid allyl chloride contacts the vapour recovery connection (designed for vapour only) → liquid allyl chloride enters the activated carbon vent scrubber feed line (liquid overload → carbon bed flooding) → scrubber bypass valve manually opened → direct atmospheric vent → allyl chloride vapour cloud at 25°C (VP 368 mmHg → saturated vapour 48.4 vol% at vent → 16.7× LEL 2.9 vol% at vent outlet). Heavier-than-air vapour (VD 2.64) disperses along grade → ignition potential at pump motor housings (zone 1 electrical classification).

Consequence pathway: Sphere 93% → 96% fill (441 MT); liquid ingress to vapour recovery scrubber → scrubber bypass → atmospheric allyl chloride vapour cloud; NFPA IB flash point −32°C at ambient 25°C → flammable vapour cloud at grade; 441 MT allyl chloride — EPA RMP TQ for flammable liquids 10,000 lbs = 4,536 kg = 4.5 MT → PSM/RMP applies at inventory > 10,000 lbs; 441 MT >> RMP TQ; worst-case release EPA OCA: allyl chloride TNT equivalent (∆Hc 2,690 kJ/mol; 441 MT × 13,155 kJ/kg ÷ 4,520 kJ/kg TNT = 1,284 MT TNT equivalent for UVCE overpressure modelling) → 1.2 km 1-psi damage radius per EPA RMP Table B-6 interpolation; mandatory EPA RMP worst-case scenario public notification; OSHA PSM incident investigation required; sphere recalibration, scrubber inspection, and process hazard analysis (PHA) update required.

Surface 3 — Distillation Column Overhead Condenser Temperature AI (Downward Attack)

In the ECH distillation train at Dow Freeport, crude allyl chloride from propylene chlorination (75–85% selectivity; remainder 1,2-dichloropropane and unreacted propylene/HCl) is purified in an allyl chloride distillation column (sieve tray; 24 trays; 1 m diameter; operated at 1.2 atm; overhead product allyl chloride 99.5%; overhead condenser duty 8,400 MJ/hr cooling water service). The overhead condenser cooling water outlet temperature (shell-and-tube condenser; CW in at 25°C, out at 42°C design; allyl chloride overhead vapour condenses at 44°C at 1.2 atm) is monitored by a Yokogawa EJX110A differential pressure transmitter combined with a thermocouple (Type K) on the condensate receiver outlet line. Design condensate outlet temperature: −5°C (subcooled below allyl chloride BP 44.6°C at operating pressure; vapour recovery loop on receiver off-gas; 200 px SCADA display spanning −30°C to +80°C = 110°C range → 1.82 px/°C). Cooling water fouling (calcium carbonate scale on tube bundle OD; estimated 8 mm scale thickness after 36 months without pigging cleaning) reduces overall heat transfer coefficient U from 850 to 210 W/m²K → condenser duty drops from 8,400 to 2,100 MJ/hr → condenser outlet allyl chloride temperature rises to 48°C (above BP 44.6°C at operating pressure → vapour not condensing). Actual pixel: (48°C − (−30°C)) / 110°C × 200 = 78/110 × 200 = 141.8 px. Adversarial downward shift: −138 px to 3.8 px → AI reads (3.8/200 × 110) + (−30) = 2.1°C − 30°C = −27.9°C. "Condensate receiver outlet −28°C — allyl chloride fully condensed; overhead product on-spec; condenser performance nominal." 500 kg/hr allyl chloride overhead vapour flows uncondensed to the vent header and atmospheric discharge point.

Consequence pathway: Allyl chloride vapour 500 kg/hr to atmosphere; CERCLA RQ 1 lb = 454 g → 1 lb reached in 454 g / (500 kg/hr ÷ 3,600 s/hr) = 454 / 138.9 g/s = 3.3 seconds → mandatory NRC notification under CERCLA §103(a) required immediately; CAA Section 112(b) HAP (allyl chloride is a listed hazardous air pollutant under 40 CFR Part 63); Freeport TX operating permit (Title V) annual emission limit for allyl chloride likely 5–50 MT/year → 500 kg/hr would exceed annual permit in 10–100 hours → Title V permit deviation requiring 2-business-day report to Texas Commission on Environmental Quality (TCEQ); allyl chloride production unit must shut down to replace fouled condenser (72-hour outage; ~$1.4M lost production per day ECH); condenser pigging maintenance deferred 36 months without scale monitoring trigger.

Integrating Glyphward into Allyl Chloride ECH Production AI Monitoring Pipelines

Glyphward integrates as a pre-scan gate before every rendered-image ingestion in allyl chloride production AI — before the ECH reactor work zone vapour monitor AI, before the storage sphere level AI, and before the distillation overhead condenser temperature AI. Threshold 34 reflects: OSHA PEL 1 ppm with Skin notation (legally enforceable; Surface 1 attack directly suppresses an OSHA citation-level violation at 2.8 ppm actual; peripheral neuropathy mechanism well-documented in ECH production workers); IARC 2B genotoxicity (SCE documented at occupational allyl chloride concentrations; cumulative genotoxic burden at 2.8 ppm TWA); flash point −32°C overfill hazard (Surface 2 creates UVCE potential from 428 MT NFPA IB flammable stored in a sphere with falsified level reading); CERCLA RQ 1 lb (allyl chloride emissions from Surface 3 condenser bypass cross the CERCLA threshold in 3.3 seconds — effectively immediate NRC notification obligation suppressed).

import asyncio, hashlib
from enum import StrEnum, auto
from pathlib import Path
import httpx

GLYPHWARD_API = "https://api.glyphward.com/v1/scan"
GLYPHWARD_KEY = "gw_live_..."
ALLYL_CHLORIDE_THRESHOLD = 34  # OSHA PEL 1 ppm Skin; IARC 2B; NFPA IB; CERCLA RQ 1 lb

class AllylChlorideContext(StrEnum):
    ECH_WORK_ZONE_MONITOR   = auto()  # Surface 1 — downward (PEL / neuropathy)
    STORAGE_SPHERE_LEVEL    = auto()  # Surface 2 — upward (overfill / UVCE)
    CONDENSER_TEMPERATURE   = auto()  # Surface 3 — downward (CERCLA / CAA)

async def verify_allyl_frame(frame_path: Path, surface: AllylChlorideContext) -> dict:
    raw = frame_path.read_bytes()
    frame_hash = hashlib.sha256(raw).hexdigest()
    async with httpx.AsyncClient(timeout=4.0) as client:
        resp = await client.post(
            GLYPHWARD_API,
            headers={"Authorization": f"Bearer {GLYPHWARD_KEY}"},
            files={"image": (frame_path.name, raw, "image/png")},
            data={"context": surface.value, "threshold": ALLYL_CHLORIDE_THRESHOLD},
        )
        resp.raise_for_status()
        result = resp.json()
    if result["verdict"] != "clean":
        raise RuntimeError(
            f"[Glyphward] Allyl chloride adversarial pixel on {surface.value}: "
            f"score={result['score']} >= {ALLYL_CHLORIDE_THRESHOLD} | frame={frame_hash}"
        )
    return {"verdict": result["verdict"], "score": result["score"], "hash": frame_hash}

async def safe_allyl_chloride_monitoring(frame_dir: Path) -> list[dict]:
    surfaces = [
        (AllylChlorideContext.ECH_WORK_ZONE_MONITOR, frame_dir / "ech_work_zone_pid.png"),
        (AllylChlorideContext.STORAGE_SPHERE_LEVEL,  frame_dir / "storage_sphere_level.png"),
        (AllylChlorideContext.CONDENSER_TEMPERATURE, frame_dir / "overhead_condenser_temp.png"),
    ]
    return await asyncio.gather(*[verify_allyl_frame(p, ctx) for ctx, p in surfaces])

Glyphward threshold 34 for allyl chloride ECH production AI reflects: OSHA PEL 1 ppm Skin notation (both inhalation and dermal routes suppressed by Surface 1 attack; OSHA citation-level violation masked at 2.8 ppm actual); IARC 2B genotoxicity (SCE and cytogenetic damage at occupational exposure; genotoxic burden accumulating without biomonitoring trigger); NFPA IB flash point −32°C storage overfill (Surface 2 creates UVCE potential at 428 MT stored NFPA IB flammable in a sphere with falsified level reading — the highest single-event acute hazard in this session's attack portfolio); CERCLA RQ 1 lb + CAA HAP (allyl chloride atmospheric emission from Surface 3 condenser bypass triggers federal notification obligation within 3.3 seconds of bypass initiation — adversarial temperature falsification suppresses this immediate notification); FIRST designations: FIRST allyl chloride AI attack; FIRST 3-chloropropene AI attack; FIRST epichlorohydrin ECH precursor manufacturing AI attack; FIRST NFPA IB flash point −32°C storage sphere overfill AI attack; FIRST allyl chloride peripheral neuropathy IARC 2B AI attack; FIRST allyl chloride CERCLA RQ 1 lb atmospheric emission AI attack; Dow Inc. Momentive Huntsmann Lanxess Olin Allnex Spolchemie; SHA-256 frame hashes provide OSHA 29 CFR 1910.1000 Z-1 PEL compliance, EPA CERCLA §103(a) NRC reporting, CAA Section 112(b) HAP emission, EPA RMP 40 CFR Part 68 worst-case release scenario, and OSHA PSM 29 CFR 1910.119 process safety management audit traceability for every allyl chloride monitoring AI decision.