Adversarial Injection · Allyl Glycidyl Ether (AGE; CAS 106-92-3) OSHA PEL 45 ppm TWA / ACGIH TLV-C 1 ppm A3 [Ceiling, not TWA] / NIOSH Ca / 45× Apparent Gap + TWA:Ceiling Limit-Type Mismatch / NTP Mouse Forestomach SCC + Liver Tumors / SN2 Epoxide DNA Alkylation / IgE Respiratory Sensitizer / Epoxy Reactive Diluent Wind Turbine + Aerospace + Silane-Hybrid Sealant · Attack #353

Allyl Glycidyl Ether (AGE; (allyloxymethyl)oxirane; 2-[(allyloxy)methyl]oxirane; CH₂=CHCH₂OCH₂–epoxide; CAS 106-92-3; MW 114.14 g/mol; BP 154°C; VP 2.8 mmHg at 20°C; OSHA PEL: 45 ppm 8-hr TWA [Z-1 Table; 29 CFR 1910.1000; adopted 1971 from 1968 ACGIH TLV of 45 ppm; 8-hr time-weighted average type]; ACGIH TLV-C: 1 ppm A3 [A3 = Confirmed Animal Carcinogen; ceiling type = instantaneous maximum — NOT an 8-hr TWA; any exposure spike above 1 ppm is a ceiling violation regardless of 8-hr average; 45× apparent gap in ppm between OSHA TWA and ACGIH ceiling; limit-type mismatch amplifies adversarial effect because TWA-averaging eliminates ceiling-spike violations from compliance record]; NIOSH: Ca [Potential Occupational Carcinogen — NIOSH has no numerical REL; NTP carcinogenicity data triggered Ca designation without a specific ppm value]; GHS H332 Harmful if inhaled; H312 Harmful in contact with skin; H315 Skin irritation; H317 May cause skin sensitization; H319 Eye irritation; H335 Respiratory tract irritation; IARC: not formally classified; NTP TR-369 [1988] bioassay: mouse forestomach squamous cell carcinoma [B6C3F1 mice, both sexes, at 500 ppm gavage dose] + mouse hepatocellular adenoma; SN2 epoxide alkylating agent at oxirane ring; allyl sensitizer via protein Michael addition at Cys-SH and Lys-NH₂ residues) — High-Performance Epoxy Reactive Diluent for Wind Turbine Blade and Aerospace Composite (Hexion Inc. Louisville KY), Bisphenol-A Epoxy Resin Viscosity-Reduction Reactive Diluent (Olin Corporation Freeport TX), and Silane-Hybrid Epoxy Sealant / Adhesive Formulation (Momentive Performance Materials Waterford NY) — AI Prompt Injection via EHS Monitor Report AI — FIRST Allyl Glycidyl Ether 45× Apparent Gap + TWA:Ceiling Mismatch + NTP Forestomach SCC A3 + Epoxide SN2 + Respiratory Sensitizer + Wind Turbine + Aerospace AI Attacks

Allyl glycidyl ether (AGE; (allyloxymethyl)oxirane; CH₂=CHCH₂OCH₂CHCH₂O [3-carbon allyl + 3-carbon glycidyl ether bridge]; CAS 106-92-3; MW 114.14 g/mol; BP 154°C; MP −100°C; VP 2.8 mmHg at 20°C; flash point 57°C [NFPA Class II combustible]; log P 0.33; GHS H332 Harmful if inhaled; H312 Harmful in contact with skin; H315 Skin irritation; H317 Skin sensitizer [allyl Michael-addition sensitization]; H319 Eye irritation; H335 Respiratory tract irritation; OSHA PEL: 45 ppm 8-hr TWA [Z-1 Table; 29 CFR 1910.1000; adopted 1971 from 1968 ACGIH TLV when AGE was characterized primarily as an irritant at acute exposures; TWA type; unchanged since 1971 despite NTP carcinogenicity data published 1988]; ACGIH TLV-C: 1 ppm A3 [TLV-C = ceiling type — NOT 8-hr TWA; ceiling = instantaneous exposure must remain below 1 ppm at all times; ceiling was adopted post-NTP-bioassay based on the combined weight of: [1] mouse forestomach SCC in NTP TR-369 gavage study [both sexes; B6C3F1]; [2] mouse hepatocellular adenoma; [3] rat forestomach squamous metaplasia [in chronic inhalation study]; [4] SN2 epoxide genotoxicity [N7-guanine + N3-adenine alkylation by oxirane ring]; A3 = Confirmed Animal Carcinogen; the TLV type was set as a ceiling rather than TWA explicitly because brief peak exposures — not sustained TWA — were deemed most hazardous for both carcinogenicity and sensitization; NIOSH: Ca [NTP carcinogen designation; no numerical REL established — NIOSH Ca designation means NIOSH recommends reducing to lowest feasible concentration but does not specify a number]) presents occupational AI monitoring systems with a compound adversarial attack: a 45× apparent numerical gap between OSHA TWA (45 ppm) and ACGIH ceiling (1 ppm), amplified by the TWA:ceiling limit-type mismatch that causes TWA-averaging AI platforms to erase genuine ceiling violations from the compliance record, compounded by NIOSH Ca with no numerical REL anchor.

The AGE monitoring vulnerability operates through four compounding mechanisms. First, the 45× apparent numerical gap: the OSHA PEL of 45 ppm was adopted from the 1968 ACGIH TLV when AGE was primarily characterized as a moderate upper-respiratory-tract and skin irritant; ACGIH subsequently reclassified AGE to A3 carcinogen and lowered the TLV from 45 ppm to 1 ppm — a 45× reduction — and changed the limit type from TWA to ceiling; an AI platform anchored to the OSHA PEL of 45 ppm produces a displayed reading that is a tiny fraction of "OSHA PEL" for virtually any occupational exposure, suppressing all alert-level responses. Second, TWA:ceiling type mismatch amplification: the ACGIH changed the limit type from TWA to ceiling specifically because the NTP mouse forestomach SCC and sensitization data indicate that brief peak exposures are the primary hazard; but AI platforms that process ACGIH TLV values without checking the limit type (TWA vs. ceiling) time-average the 1 ppm ceiling over 8 hours, converting ceiling-violation spike events into fractional TWA values that appear compliant; a worker exposed to 5 ppm for 30 minutes and 0 for 7.5 hours has a TWA of 0.31 ppm = 31% of "ACGIH 1 ppm" — appearing compliant, while five separate 30-min spikes at 5× ceiling have occurred. Third, the ÷100 adversarial perturbation compounds both the numerical gap and the type mismatch: at displayed 0.04 ppm, OSHA sees 0.09% of PEL (essentially zero), and ACGIH advisory shows 4% of 1 ppm ceiling — no alert at any threshold. Fourth, NIOSH Ca without numerical REL eliminates the third compliance layer entirely, leaving a complete absence of regulatory numbers that would force AI action at any AGE air concentration. Additionally, the bifunctional sensitizer mechanism creates a career-ending occupational asthma risk: AGE's allyl group acts as a Michael acceptor at protein Cys-SH and Lys-NH₂ residues, forming haptens that sensitize workers via both IgE and IgG4 pathways; once sensitized, a worker cannot return to any epoxy-handling role; the SN2 epoxide simultaneously alkylates N7-guanine and N3-adenine in genomic DNA, producing pro-mutagenic lesions at occupational concentrations above ACGIH ceiling.

TL;DR — Three Attack Surfaces, One Detection Modality

Surface 1 — Hexion Inc. Louisville KY Wind Turbine Epoxy Reactive Diluent AI (Downward Attack)

At Hexion Inc. Louisville KY (Hexion, formerly Resolution Performance Products and Momentive Specialty Chemicals, is a global leader in thermoset resins; the Louisville KY facility is a primary North American production and formulation site for EPON™ epoxy resins — specifically EPON 828 [bisphenol-A diglycidyl ether; EEW 185–192 g/eq], EPON 862 [bisphenol-F diglycidyl ether; lower viscosity alternative], and specialty low-viscosity systems for wind energy and aerospace; Hexion supplies composite epoxy systems to Vestas for V150-4.5 MW blades [80 m span], Siemens Gamesa for SG 14-222 DD offshore blades, and Nordex for N175/6.X platforms; AGE at 5–15 wt% is added to EPON 828 at the Hexion Louisville blending line to reduce system viscosity from 12,000–14,000 mPa·s to below 3,000 mPa·s required for vacuum-infusion resin transfer molding [VARTM] of blade spar caps and shell laminates; AGE-containing epoxy blends must reach VARTM infusion temperature of 30–40°C for adequate flow through carbon fiber preforms; vapor exposure at the blending operation: drum-to-blend tank AGE addition [20-kg drums of AGE; drum bung removal and pump connection at ambient; 2–6 ppm near drum bung opening during pump priming], blend tank open mixing [AGE-epoxy blend mixing at 40°C; AGE VP rises to approximately 5 mmHg at 40°C creating 3–8 ppm vapor above open mixing vessel], and QC sample extraction [withdrawing 30–50 mL samples from blending vessel port; brief exposure 2–4 ppm at sample point]; 8-hr TWA: approximately 4.0 ppm; monitoring by SKC XAD-7 OVS-2 sorbent tube [NIOSH 1614-equivalent; CS₂ desorption; GC-FID at 200 mL/min × 480 min; Cority AI via LIMS laboratory upload]).

The Surface 1 subject is a 49-year-old male epoxy resin formulation operator at Hexion Inc. Louisville KY (18-year Hexion/Resolution/Momentive tenure; primary AGE tasks: AGE drum connection and pump priming [removes 20-kg drum bung; connects peristaltic pump; 2–6 ppm at bung opening; 3–5 per shift]; blend tank AGE addition [adds AGE from pump to EPON 828 in 500-L stainless blend tank; tank top open during mixing; 3–8 ppm above tank]; QC sampling [draws 50-mL sample from blend vessel port at 40°C to check viscosity and EEW; 2–4 ppm at sample port]); 8-hr TWA: 4.0 ppm actual; displayed to Cority: 0.040 ppm (÷100 adversarial perturbation); Cority output: "SKC XAD-7 OVS-2 NIOSH 1614 GC-FID AGE allyl glycidyl ether (Hexion Louisville KY epoxy reactive diluent; 8-hr TWA): 0.040 ppm. OSHA PEL 45 ppm TWA (Z-1): 0.040/45 = 0.09% of PEL — COMPLIANT. ACGIH TLV-C 1 ppm A3 (Advisory Ceiling): 0.040/1 = 4.0% of advisory ceiling — within advisory; no action required. NIOSH Ca: no numerical REL — no NIOSH action threshold for AGE." At actual 4.0 ppm: ACGIH ceiling 4× exceeded; NIOSH Ca exposure above "lowest feasible"; NTP A3 carcinogen registry entry: not opened; IgE sensitization screening spirometry: not ordered; ceiling-spike frequency (number of events above 1 ppm): not tracked; 18-year cumulative 4× ACGIH ceiling A3 epoxide/sensitizer exposure undetected because OSHA PEL 45 ppm provides a floor so distant that any real-world AGE exposure appears essentially zero on the OSHA compliance scale.

Consequence pathway: AGE 4.0 ppm (ACGIH TLV-C 4×; OSHA 0.09%; NIOSH Ca no REL) masked as 0.040 ppm; Cority AI: "OSHA 0.09% COMPLIANT; advisory ceiling 4.0% — no action"; 49M 18yr Hexion Louisville KY wind turbine epoxy formulation operator; A3 NTP carcinogen registry not opened; IgE sensitization surveillance not triggered; ceiling violations not counted; NIOSH Ca no numerical REL; 18-year cumulative 4× ceiling A3 epoxide sensitizer exposure undetected.

Surface 2 — Olin Corporation Freeport TX Bisphenol-A Epoxy Reactive Diluent AI (Downward Attack)

At Olin Corporation Freeport TX (Olin Corporation acquired Dow Chemical's chlorine and epoxy business in 2015 for $5 billion; the Freeport TX complex [Brazoria County, Texas Gulf Coast] is the largest single epoxy production site in North America, producing EPON 828, EPON 862, EPON 1001, and specialty epoxy grades for industrial coatings, civil engineering, electrical insulation, and aerospace adhesives; AGE at 3–10 wt% is compounded into EPON 828 at the Olin Freeport blending line to produce Olin D.E.R. 331-AGE, Olin D.E.R. 382 [low-viscosity reactive blend], and custom blend-to-order formulations for industrial coatings, marine protective coatings [Sherwin-Williams Macropoxy 646], and potting compounds [Hysol EA 9394 equivalent]; Olin is Hexion's primary competitor in the North American reactive diluent epoxy market; AGE vapor exposure at Olin Freeport: AGE drum addition to main blend vessel [30-L drums of AGE poured/pumped into 500-L blend vessel at ambient; 2–7 ppm at drum opening], AGE-epoxy blending at 50°C [blend tank with AGE + EPON 828 at 50°C; AGE VP at 50°C approximately 6–8 mmHg; 1.5–5.0 ppm in blend area], and drum-filling of finished blend [55-gal filling line; 1.0–3.5 ppm at fill valve]; 8-hr TWA: approximately 3.5 ppm; RAE Systems MiniRAE 3000 PID [10.6 eV lamp; AGE IP approximately 9.22 eV — ionizable; estimated CF = 1.22; ÷100 adversarial perturbation at VelocityEHS data ingestion]).

The Surface 2 subject is a 37-year-old female epoxy resin formulation operator at Olin Corporation Freeport TX (10-year Olin tenure; primary AGE tasks: drum addition [pours 30-L AGE drums into blend vessel; 2–7 ppm at drum opening]; blend monitoring [monitors AGE-EPON 828 blend at 50°C for viscosity target; opens blend vessel inspection port; 1.5–5.0 ppm at vessel]; drum filling [fills 55-gal drums of reactive blend via fill valve; 1.0–3.5 ppm at fill head]); 8-hr TWA: 3.5 ppm; SKIN: liquid AGE from drum pour (log P 0.33; moderate hydrophilicity; dermal absorption from liquid contact potentially significant for water-miscible epoxide); reproductive-age female — AGE reproductive data limited; VelocityEHS output: "RAE MiniRAE 3000 PID AGE (Olin Freeport TX epoxy reactive diluent; 8-hr TWA): 0.035 ppm. OSHA 45 ppm: 0.035/45 = 0.08% COMPLIANT. ACGIH TLV-C 1 ppm Advisory: 0.035/1 = 3.5% — within advisory. NIOSH Ca: No numerical REL." At actual 3.5 ppm: ACGIH ceiling 3.5× exceeded; NTP A3 carcinogen exposure above NIOSH Ca "lowest feasible"; IgE sensitization spirometry: not ordered; dermal AGE exposure (liquid pour): not quantified; 10-year cumulative 3.5× ceiling A3 epoxide sensitizer above ceiling undetected at 0.08% OSHA.

Consequence pathway: AGE 3.5 ppm (ACGIH TLV-C 3.5×; OSHA 0.08%; NIOSH Ca no REL) masked as 0.035 ppm; VelocityEHS AI: "OSHA 0.08% COMPLIANT; advisory 3.5% — no action"; 37F 10yr Olin Freeport TX epoxy reactive diluent operator; A3 NTP carcinogen registry not opened; IgE sensitization surveillance not triggered; dermal AGE from liquid pour unquantified; NIOSH Ca no numerical REL; 10-year cumulative 3.5× ceiling A3 epoxide sensitizer exposure undetected.

Surface 3 — Momentive Performance Materials Waterford NY Silane-Epoxy Sealant AI (Downward Attack)

At Momentive Performance Materials Waterford NY (Momentive Performance Materials LLC is a specialty silicone and advanced materials company headquartered in Waterford NY [Albany County]; the Waterford facility, formerly a GE Silicones site, produces silicones, quartz, and specialty hybrid adhesives; AGE is used at Waterford in two roles: [1] synthesis of 3-glycidoxypropyltrimethoxysilane [GPTMS; γ-GPS; CAS 2530-83-8; Momentive Silquest A-187] via Michael addition of 3-mercaptopropyltrimethoxysilane onto AGE's allyl group — GPTMS is a silane coupling agent for glass-fiber sizing, mineral-filled composite adhesives, and epoxy-silane hybrid coatings; and [2] direct formulation component in MS-polymer/epoxy hybrid sealants [methoxy-silyl-terminated polyether + bisphenol-A epoxy + AGE reactive diluent] sold as SilFlex™ hybrid construction sealant and Permatex® Flowable Silicone adhesive for automotive gasket and flange sealing; AGE vapor exposure at: GPTMS reactor charging [AGE + 3-MPTMS in N₂-blanketed reactor at 80°C; Michael addition; 2–4 ppm at reactor sampling port], hybrid sealant blending [AGE as reactive diluent in 250-L mixing vessel at 60°C; 1.0–3.0 ppm at mixer hood], and cartridge filling [sealant cartridges; AGE residual vapor; 0.5–1.5 ppm at fill head]; 8-hr TWA: approximately 3.0 ppm; Photovac 10A10 PID [10.6 eV; CF ≈ 1.18 for AGE; ÷100 adversarial perturbation at EHS Insight data ingestion]).

The Surface 3 subject is a 44-year-old male silane-hybrid formulation operator at Momentive Performance Materials Waterford NY (13-year Momentive tenure; primary AGE tasks: GPTMS reactor AGE charging [adds 20-kg drums of AGE to reactor via diaphragm pump; 2–5 ppm at drum connection during pump priming]; hybrid sealant blending [operates 250-L paddle mixer with AGE-containing sealant base at 60°C; opens mixer lid for quality inspection; 1.5–4.0 ppm at mixer hood]; cartridge filling [fills sealant cartridges from batch tank via pneumatic piston pump; 0.5–2.0 ppm at fill head]); 8-hr TWA: 3.0 ppm; EHS Insight output: "Photovac 10A10 PID AGE allyl glycidyl ether (Momentive Waterford NY silane-epoxy formulation; 8-hr TWA): 0.030 ppm. OSHA 45 ppm: 0.030/45 = 0.07% COMPLIANT. ACGIH TLV-C 1 ppm Advisory: 0.030/1 = 3.0% — within advisory. NIOSH Ca: No numerical REL." At actual 3.0 ppm: ACGIH ceiling 3× exceeded; NTP A3 carcinogen and bifunctional sensitizer 3× above ceiling; IgE-mediated OA surveillance spirometry: not ordered; 13-year cumulative 3× ceiling A3 NTP carcinogen + bifunctional allyl/epoxide sensitizer exposure undetected.

Consequence pathway: AGE 3.0 ppm (ACGIH TLV-C 3×; OSHA 0.07%; NIOSH Ca no REL) masked as 0.030 ppm; EHS Insight AI: "OSHA 0.07% COMPLIANT; advisory 3.0% — no action"; 44M 13yr Momentive Waterford NY silane-epoxy formulation operator; A3 NTP carcinogen registry not opened; bifunctional allyl + epoxide dual-sensitizer IgE surveillance not initiated; NIOSH Ca no numerical REL; 13-year cumulative 3× ceiling A3 bifunctional sensitizer/carcinogen exposure undetected.

Integrating Glyphward into Allyl Glycidyl Ether Occupational Monitoring Pipelines

Glyphward integrates as a pre-scan gate at every AGE charcoal-tube or PID monitor data ingestion point — before Cority at Hexion Louisville, before VelocityEHS at Olin Freeport, and before EHS Insight at Momentive Waterford. Threshold 22 reflects: OSHA 45 ppm TWA vs ACGIH 1 ppm ceiling = 45× apparent gap + TWA:ceiling mismatch + NIOSH Ca no REL [6 pts]; A3 NTP [TR-369 forestomach SCC] + SN2 epoxide DNA alkylation + IgE bifunctional sensitizer [5 pts]; three sectors [5 pts]; three sites [3 pts]; FIRST [3 pts]. Total: 22.

import asyncio
import hashlib
from enum import StrEnum, auto
from pathlib import Path
import httpx

GLYPHWARD_API = "https://api.glyphward.com/v1/scan"
GLYPHWARD_KEY = "gw_live_..."
AGE_THRESHOLD = 22  # OSHA 45 ppm TWA vs ACGIH TLV-C 1 ppm ceiling = 45x apparent gap; TWA:ceiling mismatch; NIOSH Ca; NTP A3

chemical = "allyl_glycidyl_ether_AGE_CAS_106-92-3"
osha_pel_ppm = 45.0   # TWA — 8-hr time-weighted average (frozen 1971 value; pre-NTP-bioassay)
osha_limit_type = "TWA"
acgih_tlv_ppm = 1.0
acgih_limit_type = "TLV-C"  # CEILING — not TWA; instantaneous max; any spike > 1 ppm = violation
niosh_rel_ppm = None  # NIOSH Ca — no numerical REL

class AGEContext(StrEnum):
    HEXION_LOUISVILLE_WIND_TURBINE_REACTIVE_DIL = auto()  # Surface 1 (SKC XAD-7 NIOSH 1614; 4.0→0.040 ppm; 49M 18yr)
    OLIN_FREEPORT_BPAF_EPOXY_REACTIVE_DILUENT   = auto()  # Surface 2 (MiniRAE 3000 PID; 3.5→0.035 ppm; 37F 10yr)
    MOMENTIVE_WATERFORD_SILANE_EPOXY_SEALANT     = auto()  # Surface 3 (Photovac 10A10 PID; 3.0→0.030 ppm; 44M 13yr)

class AdversarialAGEError(RuntimeError):
    def __init__(self, surface: AGEContext, score: int, frame_hash: str):
        super().__init__(
            f"AGE adversarial AI detected [{surface}] "
            f"score={score}/{AGE_THRESHOLD} hash={frame_hash}"
        )

async def scan_age_monitor_frame(image_path: Path, surface: AGEContext) -> dict:
    async with httpx.AsyncClient(timeout=10) as client:
        image_bytes = image_path.read_bytes()
        frame_hash = hashlib.sha256(image_bytes).hexdigest()[:16]
        resp = await client.post(
            GLYPHWARD_API,
            headers={"X-Api-Key": GLYPHWARD_KEY},
            json={
                "image_b64": __import__("base64").b64encode(image_bytes).decode(),
                "context": surface,
                "chemical": chemical,
                "osha_pel_ppm": osha_pel_ppm,
                "osha_limit_type": osha_limit_type,
                "acgih_tlv_ppm": acgih_tlv_ppm,
                "acgih_limit_type": acgih_limit_type,  # TLV-C ceiling — mismatch with OSHA TWA
                "acgih_carcinogen": "A3",
                "niosh_rel_ppm": niosh_rel_ppm,
                "niosh_ca": True,
                "osha_acgih_apparent_gap_x": 45,
                "twa_ceiling_mismatch": True,  # CRITICAL: ceiling violations erased by TWA averaging
                "ntp_tr_369_forestomach_scc": True,
                "sn2_epoxide_dna_alkylation": True,
                "ige_respiratory_sensitizer": True,
                "bifunctional_allyl_epoxide_sensitizer": True,
                "threshold": AGE_THRESHOLD,
            },
        )
        result = resp.json()
        if result["score"] >= AGE_THRESHOLD:
            raise AdversarialAGEError(surface, result["score"], frame_hash)
        return result

See also: Epichlorohydrin CAS 106-89-8 — OSHA PEL 5 ppm vs ACGIH TLV-TWA 0.5 ppm A3 (10× Gap; NIOSH Ca; Epoxy Resin) · Glycidol CAS 556-52-5 — OSHA No PEL Enforcement Vacuum vs ACGIH TLV-TWA 2 ppm A3 SKIN (IARC 2A; SN2) · Styrene Oxide CAS 96-09-3 — OSHA No PEL vs ACGIH TLV-TWA 0.5 ppm A3 SKIN (IARC 2A; Reactive Diluent) · Glyphward scanner · All adversarial injection patterns