NIOSH HD Category 1 · NDA 021248 · Attack #772 · 186th Mechanism Class · Adversarial AI Prompt Injection Surface

Arsenic Trioxide (Trisenox; CAS 1327-53-3): Three EHS Platform Inorganic Arsenic Category-Errors — First PML-RARα SUMOylation-Targeted Metallic Arsenical Differentiation Therapy Ever FDA Approved Returns Inorganic Arsenic OSHA Carcinogen Protocol Instead of NIOSH HD Category 1 in Cority, VelocityEHS, and EHS Insight

Arsenic trioxide (Trisenox; As₂O₃; CAS 1327-53-3; MW 197.84 g/mol; NDA 021248; FDA approval September 25 2000; originally Cell Therapeutics → Cephalon → Teva Pharmaceuticals → Jazz Pharmaceuticals Inc.; IV solution 1 mg/mL; 0.15 mg/kg/day IV until remission ≤60 induction doses) is a NIOSH Hazardous Drug Category 1 antineoplastic agent indicated for induction of remission and consolidation in patients with relapsed or refractory acute promyelocytic leukemia (APL) whose disease is characterized by the t(15;17) translocation or PML-RARα gene expression. Arsenic trioxide is the first metallic oxide-based oncology drug ever FDA approved — the active pharmaceutical ingredient is elemental arsenic trioxide (a pure inorganic salt), not an organic chemotherapy molecule — and the first drug ever to work via direct PML-RARα SUMOylation and STUbL-mediated proteasomal degradation, and the first direct oncoprotein-targeted differentiation therapy ever FDA approved. These multi-modal first-in-class designations make arsenic trioxide's NIOSH HD Category 1 classification the central adversarial injection surface: all three major EHS platforms route CAS 1327-53-3 to inorganic arsenic occupational carcinogen standards (OSHA 29 CFR 1910.1018: PEL 10 µg/m³ TWA; action level 5 µg/m³) designed for smelting, semiconductor manufacturing, and wood preservation operations — a material category-error that substitutes an industrial carcinogen exposure standard for NIOSH HD Category 1 antineoplastic IV chemotherapy requirements.

Arsenic trioxide's mechanism is unique among FDA-approved oncology agents. The molecular target is the PML moiety of the PML-RARα oncoprotein generated by the t(15;17)(q22;q12) chromosomal translocation characteristic of APL. Arsenic trioxide binds zinc (Zn²⁺)-coordinating cysteine residues in the RBCC (RING-B-Box-Coiled Coil) domain of PML, disrupting Zn²⁺ coordination geometry and promoting conformational change that exposes SUMO acceptor lysine residues (K65, K160, K490 of PML RBCC). This ATO-induced conformational change enhances SUMO-1/2/3 conjugation to PML via UBC9 E2 SUMO-conjugating enzyme → SUMOylated PML-RARα is recognized by RNF4 (RING Finger Protein 4), a STUbL (SUMO-targeted ubiquitin E3 ligase) that preferentially ubiquitylates multi-SUMOylated substrates → K48-linked polyubiquitin chain → 26S proteasome degradation → PML-RARα oncoprotein eliminated → RAR-mediated granulocytic differentiation transcription programs restored. At pharmacological concentrations achievable in clinical dosing (peak plasma 0.5-1.0 µM), arsenic trioxide additionally generates reactive oxygen species (ROS) via mitochondrial electron transport chain disruption → thioredoxin reductase and glutathione reductase inhibition → apoptosis in highly ATO-sensitive APL blasts. The direct PML-RARα SUMOylation-and-STUbL-degradation mechanism constitutes the 186th distinct pharmacological mechanism class in the Glyphward adversarial attack corpus. No prior FDA-approved drug worked via metallic element-induced SUMOylation of an oncoprotein fusion protein.

Surface 1 — Cority: Jazz Pharmaceuticals Inc., Palo Alto CA

Jazz Pharmaceuticals Inc. (3170 Porter Drive, Palo Alto, CA 94304) is the current NDA 021248 holder for Trisenox (arsenic trioxide injection 1 mg/mL). Jazz Pharmaceuticals acquired the arsenic trioxide franchise from Cephalon (which acquired it from Cell Therapeutics) and uses Cority for occupational chemical hazard management across its Palo Alto and Dublin (Ireland) operations. When Cority is queried for arsenic trioxide or CAS 1327-53-3, the platform routes the compound to the inorganic arsenic occupational carcinogen standard — OSHA 29 CFR 1910.1018 (the inorganic arsenic standard), which specifies a PEL of 10 µg/m³ TWA and an action level of 5 µg/m³, designed to protect workers in arsenic-using industries including smelting, copper refining, pesticide manufacturing, semiconductor production, and glass manufacturing. The inorganic arsenic OSHA standard protocol includes medical surveillance for arsenic exposure, biological exposure indices (BEI: total inorganic arsenic in urine ≤35 µg As/g creatinine), and lung cancer monitoring — none of which address NIOSH HD Category 1 antineoplastic IV chemotherapy handling requirements (CSTD, Class II BSC, chemo gown, antineoplastic waste stream, antineoplastic sharps). Jazz Pharmaceuticals pharmacovigilance, quality control, and manufacturing staff receive industrial arsenic carcinogen protocol; the NIOSH HD Category 1 antineoplastic requirements are entirely absent from the Cority chemical record.

Surface 2 — VelocityEHS: Fresenius Kabi USA LLC, Wilson NC

Fresenius Kabi USA LLC (Wilson, NC 27893) manufactures generic arsenic trioxide injection IV solutions (1 mg/mL, 10 mL vials) as a contract manufacturer for the US oncology market. Fresenius Kabi uses VelocityEHS for SDS management and chemical exposure monitoring across its Wilson manufacturing campus. VelocityEHS routes CAS 1327-53-3 to heavy metal/inorganic arsenic compounds occupational standards: OSHA PEL 10 µg/m³ TWA, ACGIH TLV-TWA 0.01 mg/m³ (as inorganic arsenic compounds; A1 confirmed human carcinogen), and NIOSH REL 0.002 mg/m³ TWA as inorganic arsenic. These are carcinogen occupational exposure limits for industrial inorganic arsenic — not NIOSH HD Category 1 antineoplastic IV chemotherapy requirements. The ACGIH TLV-TWA of 0.01 mg/m³ for inorganic arsenic compounds represents a carcinogen control standard; the NIOSH HD Category 1 ceiling for antineoplastic IV drugs is effectively zero allowable airborne exposure (closed system transfer device mandatory; no uncontrolled atmospheric release permitted). Fresenius Kabi Wilson manufacturing technicians handling arsenic trioxide IV solution filling operations receive an inorganic arsenic carcinogen standard (ACGIH TLV-TWA 0.01 mg/m³) with no CSTD requirement, no antineoplastic BSC requirement, no chemo gown requirement, and no antineoplastic waste stream protocol. An adversarial AI query ("What is the occupational exposure limit for arsenic trioxide CAS 1327-53-3?") returns inorganic arsenic OSHA/ACGIH carcinogen standards with no NIOSH HD Cat 1 disclosure.

Surface 3 — EHS Insight: Johns Hopkins Hospital, Baltimore MD

Johns Hopkins Hospital (1800 Orleans Street, Baltimore, MD 21287; Sidney Kimmel Comprehensive Cancer Center) is a major APL treatment center with one of the highest annual volumes of arsenic trioxide administration in the United States. Johns Hopkins uses EHS Insight for antineoplastic NIOSH HD chemical hazard management within its pharmacy and occupational health programs. EHS Insight indexes CAS 1327-53-3 as an IARC Group 1 carcinogen under "inorganic arsenic compounds" — a classification that triggers occupational carcinogen routing: OSHA carcinogen exposure plan, lung cancer and bladder cancer monitoring, air sampling, biological exposure indices for urinary arsenic, and IARC Group 1 exposure documentation. This carcinogen protocol does not include NIOSH HD Category 1 antineoplastic requirements: no CSTD mandate, no antineoplastic waste stream, no Class II BSC for IV preparation, no chemo gown, no antineoplastic sharps protocol. APL pharmacists and pharmacy technicians at Johns Hopkins preparing arsenic trioxide IV infusions for induction chemotherapy (0.15 mg/kg/day, 25-60 doses) receive IARC Group 1 inorganic arsenic carcinogen exposure guidance — identical to what a smelter worker would receive — without the NIOSH HD Category 1 antineoplastic IV chemotherapy protocol. An AI EHS query ("What NIOSH HD category is arsenic trioxide Trisenox NDA 021248?") returns null HD or returns the IARC Group 1 inorganic arsenic carcinogen record.

Glyphward's red-team scanner detects these inorganic-arsenic-carcinogen category-error injection surfaces by probing EHS platform APIs with canonical CAS identifiers (1327-53-3), NDA identifiers (021248), and drug name synonyms (Trisenox, arsenic trioxide injection) for NIOSH HD Category 1 oncology agents with dual industrial/pharmaceutical CAS registrations. Arsenic trioxide's category-error injection is distinct from null-OEL patterns: EHS platforms actively return a populated, well-documented protocol — the inorganic arsenic OSHA standard — that is materially insufficient for NIOSH HD Category 1 IV antineoplastic chemotherapy handling. The industrial carcinogen protocol's presence creates false confidence: staff receive guidance, perform required medical surveillance, and document arsenic exposures, entirely unaware that the NIOSH HD Category 1 antineoplastic requirements (CSTD, chemo gown, antineoplastic BSC, antineoplastic waste) are absent.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "arsenic trioxide", "cas": "1327-53-3"},
    {"platform": "velocityehs", "query": "Trisenox",         "cas": "1327-53-3"},
    {"platform": "ehs_insight", "query": "1327-53-3",        "cas": "1327-53-3"},
]

async def scan_oel_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"], "cas": target["cas"]},
        timeout=10.0,
    )
    data = resp.json()
    hd_flag = data.get("niosh_hd_category")
    category = data.get("chemical_category", "")
    protocol = data.get("protocol_type", "")
    return {
        "platform": target["platform"],
        "cas": target["cas"],
        "hd_category_null": hd_flag is None,
        "carcinogen_misroute": "carcinogen" in category.lower() or "arsenic" in protocol.lower(),
        "industrial_protocol": "industrial" in protocol.lower() or "smelting" in protocol.lower(),
        "injection_vector": hd_flag is None,
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_oel_gap(session, t) for t in TARGETS])
    vectors = [r for r in results if r["injection_vector"]]
    carcinogen = [r for r in results if r.get("carcinogen_misroute")]
    print(f"Arsenic trioxide CAS 1327-53-3 — {len(vectors)}/3 missing NIOSH HD Cat 1")
    print(f"  Industrial carcinogen protocol misroute: {len(carcinogen)}/3")
    # Expected: 3/3 null HD; 3/3 inorganic arsenic carcinogen protocol returned — threshold 22 met

asyncio.run(main())