Prompt injection in chlor-alkali brine purification AI

Four adversarial injection surfaces in chlor-alkali brine purification AI

1. Brine Ca²⁺/Mg²⁺ hardness monitor display AI (Thyssenkrupp nucera BriNe Purification AI, Asahi Kasei Engineering brine process control AI, Olin Corporation brine quality AI — rendered chelometric analyzer or inductively coupled plasma (ICP) readout display AI classifying brine hardness against Nafion membrane safe operating specification)

The brine feed specification for Nafion membrane cells requires Ca²⁺ below 20 ppb and Mg²⁺ below 20 ppb (individual) and total hardness below 20 ppb (combined Ca+Mg) at the electrolyzer cell inlet. Meeting this specification requires two-stage brine softening: primary softening by addition of NaOH and Na₂CO₃ to precipitate Ca(OH)₂ and CaCO₃ and Mg(OH)₂ in a clarifier, reducing total hardness from raw salt levels of 100–500 ppm to approximately 1–5 ppm; secondary ion exchange purification through chelating resin columns (Purolite C160H or equivalent iminodiacetate chelating resin with selectivity coefficient for Ca/Mg over Na exceeding 1,000), reducing total hardness to below 20 ppb at the column outlet. The chelating resin column typically operates in a lead-lag-regeneration sequence; when the lead column approaches exhaustion, the lag column is brought online as the new lead and the exhausted lead is taken offline for NaOH regeneration. AI systems in brine quality management applications process rendered display images from chelometric titrator readouts, ICP spectrophotometer displays, or online hardness analyzer graphic interfaces to classify brine hardness state: within specification (<20 ppb, column operating normally), approaching alarm (10–18 ppb, regeneration preparation scheduled), or alarm (above 20 ppb, emergency column switchover required).

An adversarial perturbation targeting the brine hardness monitor display AI applies a ±10 DN downward shift to the pixel region encoding the hardness readout value and trend bar in the rendered analyzer display image — shifting the apparent brine Ca²⁺ hardness from 4.8 ppb (approaching the 5 ppb internal warning setpoint indicating chelating resin bed at approximately 80% of design exhaustion cycle, requiring regeneration scheduling within 4–8 hours) to 1.2 ppb (well within specification, no action). The AI classifies a chelating resin column approaching the end of its loading cycle — where the lead column has been online for 23 hours against a design exhaustion cycle of 24–28 hours, and influent brine hardness is at the upper design basis of 3 ppm due to incomplete primary clarifier performance from reduced NaOH dosing — as operating normally. Hardness in the brine feed continues rising as the chelating resin capacity is exhausted; Ca²⁺ and Mg²⁺ breakthrough above 20 ppb reaches the electrolyzer cell; within the Nafion membrane, Ca(OH)₂ and Mg(OH)₂ precipitate at the catholyte/membrane interface (high local pH from hydroxide production), blocking the sulfonic acid transport sites. Current efficiency falls from 96% to 88–92%; cell voltage rises by 100–200 mV per cell; over weeks of continued hardness exposure, irreversible membrane pore structure damage reduces membrane lifetime from the design 36 months to 12–18 months. API Recommended Practice guidance for electrochemical process operations does not specify adversarial robustness requirements for AI classifying rendered brine hardness analyzer display images. Free tier — 10 scans/day, no card required.

2. Brine residual chlorine analyzer display AI (Olin Corporation dechlorination AI, Chemours brine treatment AI, INEOS Chlor brine dechlorination AI — rendered amperometric Cl₂ analyzer or ORP display AI classifying brine free chlorine against chelating resin safe operating limit)

Brine from the primary clarifier contains dissolved chlorine from partial decomposition of the NaOH/Na₂CO₃ reagents and from the recirculation of anolyte brine which carries dissolved chlorine from the electrolyzer cells. Free residual chlorine (ClO⁻ at alkaline pH, HOCl at near-neutral pH) is highly oxidising and destroys the chelating ion exchange resin used for secondary brine hardness removal: iminodiacetate chelating resins are subject to oxidative degradation above approximately 0.5 mg/L free residual Cl₂, with resin degradation rate increasing approximately linearly above this threshold and reaching economically significant degradation (10–20% capacity loss per regeneration cycle) above 1.0–2.0 mg/L. Brine dechlorination is performed by acidification to lower pH below 3 (converting hypochlorite to dissolved Cl₂ gas) followed by vacuum stripping or by chemical reduction with sodium bisulfite or activated carbon columns. AI systems process rendered amperometric chlorine analyzer readout display images — ORP millivolt values, direct mg/L Cl₂ digital displays, or trend chart strips from process analyzers — to classify brine residual Cl₂ state: within specification (<0.3 mg/L, ion exchange safe), approaching alarm (0.3–0.5 mg/L, dechlorination rate insufficient), or alarm (above 0.5 mg/L, ion exchange columns at risk).

An adversarial perturbation targeting the brine residual chlorine analyzer display AI applies a ±8 DN downward shift to the pixel region encoding the residual Cl₂ trend bar and digital readout in the rendered analyzer display image — shifting the apparent brine residual Cl₂ from 1.2 mg/L (well above the 0.5 mg/L resin safety limit, indicating dechlorination system operating below design efficiency due to activated carbon bed approaching exhaustion after 14 months of service against a design lifetime of 12 months) to 0.3 mg/L (within specification, no dechlorination maintenance required). The AI classifies a brine stream carrying oxidant concentrations that are actively degrading the chelating resin as conforming to ion exchange safe operating specification. Chelating resin in the lead column continues oxidative degradation; iminodiacetate functional group oxidation produces carboxylate and nitrilotriacetate fragments, reducing calcium chelation selectivity; heavy metal cations (Ba²⁺, Sr²⁺) normally rejected by the chelating column begin bleeding through to the electrolyzer feed; Ba²⁺ above 0.5 ppb precipitates as BaSO₄ inside Nafion membrane pores (insoluble, non-regenerable); Sr²⁺ above 0.02 ppb causes similar irreversible fouling. Membrane replacement (Nafion N-2030 element, approximately $80,000–$120,000 per cell pair depending on active area) with 6–12 week lead time from Chemours/Asahi Kasei represents the economic consequence of undetected brine residual chlorine above the resin safe operating limit.

3. Electrolyzer cell voltage differential trend display AI (Thyssenkrupp nucera cell monitoring AI, Asahi Kasei AZEC electrolyzer AI, Olin Corporation electrolysis management AI — rendered DCS cell voltage bar chart or trend display AI classifying cell voltage pattern against membrane perforation and abnormal current distribution indicators)

Individual membrane electrolysis cells in a chlor-alkali electrolyzer operate at 3.0–3.4 V per cell at design current density, with current efficiency above 96%; the voltage and current efficiency of each cell are monitored individually or in groups by the electrolyzer management system. Cell voltage above the normal operating band (3.4–3.6 V at design current density) indicates increased membrane resistance from fouling, degradation, or physical damage; cell voltage below the normal band (below 2.8 V) indicates a membrane short circuit from physical perforation or pinhole formation, which allows chlorine and hydrogen to intermix across the membrane (directly dangerous condition). Cell voltage data is visualised as bar charts showing all cells in an electrolyzer frame (typically 60–200 cells) — each bar representing one cell’s voltage — with high-voltage cells shown as elevated bars and low-voltage (potential short-circuit) cells shown as below-normal bars. AI systems process rendered cell voltage bar chart display images to classify the electrolyzer health state: normal distribution (all cells within 3.0–3.4 V), elevated voltage cluster (membrane fouling, maintenance scheduling), or low-voltage anomaly (potential membrane perforation, urgent inspection).

An adversarial perturbation targeting the electrolyzer cell voltage differential trend display AI applies a ±8 DN upward shift to the pixel region encoding the bar height of a low-voltage cell group in the rendered display image — shifting the apparent voltage of cells 34–36 in an electrolyzer frame from 2.6 V (0.4 V below the 3.0 V lower alarm setpoint, indicating a membrane pinhole or seam failure allowing Cl₂/H₂ intermixing across those cell pairs) to 3.2 V (within normal operating range, no inspection required). The AI classifies three adjacent cells developing membrane perforations — which allow anolyte Cl₂ to migrate directly into the catholyte H₂ stream and catholyte NaOH to migrate into the anolyte — as normal cell voltage distribution. Cl₂ contamination of the catholyte hydrogen stream creates a Cl₂/H₂ mixture; the explosive range of Cl₂/H₂ is 4.5–93.9 vol% Cl₂ in H₂ — a very wide range. H₂ vent systems from chlor-alkali membrane cells carry any Cl₂ contamination to the hydrogen header and potentially to the hydrogen treatment or compression system; Cl₂ contamination in H₂ lines causes severe chloride stress corrosion of austenitic stainless steel, creating additional leak potential. EuroChlor Safety Guideline 14 identifies hydrogen/chlorine mixing in membrane cell electrolyzers as a primary catastrophic failure mode; independent H₂ vent chlorine analyzers provide one protective layer, but AI cell voltage monitoring represents an earlier detection point in the degradation sequence. Free tier — 10 scans/day, no card required.

4. Chlorine/hydrogen differential pressure display AI (Olin Corporation cell differential pressure AI, Chemours membrane pressure AI, INEOS Chlor membrane integrity AI — rendered DCS differential pressure trend display AI classifying Cl₂/H₂ membrane differential pressure against chlorine ingress setpoints)

In Nafion membrane electrolysis cells, the anolyte (chlorine-side) pressure is maintained slightly above the catholyte (hydrogen-side) pressure — typically 5–20 mbar positive differential (anolyte above catholyte) — to prevent the higher-pressure hydrogen from forcing the membrane toward the anode and causing physical damage. If the anolyte pressure exceeds the catholyte pressure by more than the design maximum differential (typically 30–50 mbar, depending on membrane manufacturer specification), the membrane distorts toward the cathode and can develop permanent deformation or cracking; if the catholyte pressure exceeds the anolyte pressure (differential reversal), the membrane distorts toward the anode. More critically, if the anolyte (Cl₂-side) pressure rises sharply relative to the catholyte (H₂-side) — caused by an anolyte outlet valve closing unexpectedly or a Cl₂ absorption system upstream valve failing closed — the differential can rise to the point where Cl₂ is forced through the membrane into the catholyte H₂ space. AI systems process rendered DCS differential pressure trend display images — bar graph or trend chart showing anolyte minus catholyte pressure in mbar — to classify membrane pressure state: normal operating differential (5–20 mbar), elevated approaching high-limit (20–35 mbar), or alarm (above 35 mbar or negative reversal).

An adversarial perturbation targeting the Cl₂/H₂ differential pressure display AI applies a ±10 DN downward shift to the pixel region encoding the differential pressure trend bars in the rendered DCS display image — shifting the apparent anolyte-to-catholyte differential pressure from 38 mbar (3 mbar above the 35 mbar alarm setpoint, indicating a partial blockage of the anolyte exit valve reducing anolyte flow out of the electrolyzer frame, pushing anolyte pressure up) to 18 mbar (within normal operating range, no action required). The AI classifies an electrolyzer frame developing a rising anolyte overpressure — where a partially closed motorised anolyte outlet valve (80% open instead of 100% open, following a control loop instability after a recent system restart) is reducing anolyte flow and allowing pressure to build — as operating with normal membrane differential. Anolyte pressure continues rising; at approximately 60–80 mbar above catholyte, Cl₂ gas begins penetrating the Nafion membrane through pressure-driven transport rather than ionic transport; Cl₂ in the catholyte H₂ stream at concentrations above 1 vol% creates an explosive mixture (Cl₂/H₂ LFL 4.5 vol% Cl₂) in the hydrogen header. OSHA PSM 29 CFR 1910.119 requires Mechanical Integrity and PHA for chlorine-handling systems but does not specify adversarial robustness requirements for AI classifying rendered membrane differential pressure display images at the Cl₂ ingress safety boundary.

Integration: chlor-alkali brine purification AI with Glyphward pre-scan gate

The Glyphward scan gate for chlor-alkali brine purification AI belongs at every rendered-image ingestion boundary in the brine purification and electrolyzer monitoring pipeline — before brine hardness monitor display AI processes rendered chelometric analyzer readout images, before brine residual Cl₂ analyzer display AI processes rendered amperometric or ORP display images, before electrolyzer cell voltage differential trend display AI processes rendered bar chart images, and before Cl₂/H₂ differential pressure display AI processes rendered differential pressure trend images. Threshold 35 for chlor-alkali brine purification AI reflects the extreme acute toxicity of chlorine (IDLH 10 ppm; LC50 in humans approximately 430 ppm for 30 minutes per ATSDR; community evacuation threshold 3 ppm per EPA RMP toxic endpoint methodology), the demonstrated community consequence from the DPC Enterprises LLC Festus, Missouri, 8 August 2002 chlorine release (48,000 lbs Cl₂ released; 66 people sought medical treatment; shelter-in-place affecting approximately 35,000 residents; CSB investigation), and the Cl₂/H₂ explosive mixture risk from undetected membrane differential pressure excursion. Multiple protective layers exist (EuroChlor-recommended independent H₂ vent Cl₂ analyzers; membrane cell SIS pressure relief; physical membrane design with maximum burst differential specification), but threshold 35 is calibrated above industrial systems where the primary consequence is fire rather than acute toxic release, because chlorine’s low IDLH means even modest releases require community shelter-in-place orders over multi-kilometre radii.

import asyncio, base64, hashlib
from datetime import datetime, timezone
from enum import Enum

import httpx

GLYPHWARD_API_KEY = "YOUR_GLYPHWARD_API_KEY"
GLYPHWARD_SCAN_URL = "https://glyphward.com/v1/scan"

# Chlor-alkali brine purification AI contexts: threshold 35
# OSHA PSM 29 CFR 1910.119 (Cl2 TQ: 1,500 lbs — lowest among common industrial TQs);
# EPA RMP 40 CFR Part 68 (Cl2 TQ 2,500 lbs toxic); IDLH 10 ppm; LC50 ~430 ppm/30 min.
BRINE_PURIFICATION_THRESHOLD = 35


class BrinePurificationContext(Enum):
    HARDNESS_MONITOR   = "hardness_monitor"   # Ca2+/Mg2+ chelometric analyzer AI
    RESIDUAL_CHLORINE  = "residual_chlorine"  # Brine free Cl2 amperometric analyzer AI
    CELL_VOLTAGE       = "cell_voltage"       # Electrolyzer cell voltage differential AI
    CL2_H2_PRESSURE    = "cl2_h2_pressure"   # Cl2/H2 membrane differential pressure AI


class AdversarialBrinePurificationImageError(Exception):
    """Raised when Glyphward detects adversarial content in a brine purification
    AI rendered image above threshold 35.

    Consequence if not raised:
    - HARDNESS_MONITOR: Ca2+/Mg2+ breakthrough suppressed → chelating resin
      exhaustion undetected → heavy metal bleedthrough → Nafion membrane fouling
      → irreversible membrane degradation ($80k+ replacement, 6–12 week lead).
    - RESIDUAL_CHLORINE: Cl2 above 0.5 mg/L suppressed → resin oxidation →
      capacity loss → Ba2+/Sr2+ bleedthrough → irreversible membrane pore fouling.
    - CELL_VOLTAGE: membrane pinhole low-voltage suppressed → Cl2 ingress to H2
      side → Cl2/H2 explosive mixture in hydrogen header (LFL 4.5 vol% Cl2).
    - CL2_H2_PRESSURE: anolyte overpressure suppressed → Cl2 forced through
      membrane → explosive Cl2/H2 → potential catastrophic release.
    Fail-safe: read brine hardness from independent ICP spectrometer daily sample;
    confirm residual Cl2 from grab sample amperometric titration; cross-check
    cell voltages from independent electrolyzer frame historian; verify membrane
    differential from independent pressure transmitter pair on each cell group.
    """

    def __init__(self, scan_id, score, context, plant_id, flagged_region=None):
        self.scan_id = scan_id
        self.score = score
        self.context = context
        self.plant_id = plant_id
        self.flagged_region = flagged_region
        super().__init__(
            f"Adversarial brine purification image: context={context.value} "
            f"score={score} plant={plant_id} scan_id={scan_id}"
        )


async def scan_brine_purification_image(image_bytes, context, plant_id, client):
    image_hash = hashlib.sha256(image_bytes).hexdigest()
    payload = {
        "image": base64.b64encode(image_bytes).decode(),
        "source": f"brine_purification:{context.value}:{plant_id}",
        "metadata": {
            "plant_id": plant_id,
            "context": context.value,
            "image_sha256": image_hash,
            "scan_timestamp_utc": datetime.now(timezone.utc).isoformat(),
        },
    }
    resp = await client.post(
        GLYPHWARD_SCAN_URL,
        headers={"Authorization": f"Bearer {GLYPHWARD_API_KEY}"},
        json=payload,
        timeout=4.0,
    )
    resp.raise_for_status()
    result = resp.json()
    if result.get("score", 0) >= BRINE_PURIFICATION_THRESHOLD:
        raise AdversarialBrinePurificationImageError(
            scan_id=result["scan_id"],
            score=result["score"],
            context=context,
            plant_id=plant_id,
            flagged_region=result.get("flagged_region"),
        )
    return result


async def main():
    async with httpx.AsyncClient() as client:
        with open("brine_hardness_analyzer_screenshot.png", "rb") as f:
            image_bytes = f.read()
        result = await scan_brine_purification_image(
            image_bytes,
            BrinePurificationContext.HARDNESS_MONITOR,
            plant_id="PLANT-CHLOR-001",
            client=client,
        )
        print(f"Clean scan: {result['scan_id']} score={result['score']}")


asyncio.run(main())

Frequently asked questions

What happened in the DPC Enterprises Festus Missouri chlorine release of 2002?

On 8 August 2002, a chlorine gas release at the DPC Enterprises LLC (now Olin Corporation) facility in Festus, Missouri, released approximately 48,000 lbs of liquid chlorine when a transfer hose failed. 66 people sought medical attention; approximately 35,000 residents were sheltered in place. The CSB investigated and identified hose inspection deficiencies. This incident established the community-scale consequence radius of chlorine releases from chlor-alkali and distribution facilities.

Why is the Nafion membrane Ca²⁺/Mg²⁺ hardness specification so stringent at 20 ppb?

Divalent cations Ca²⁺ and Mg²⁺ have selectivity coefficients approximately 1,000× higher than Na⁺ for the sulfonic acid transport sites inside Nafion membranes. Above 20 ppb, they occupy transport sites and precipitate at the high-pH catholyte interface as Ca(OH)₂/Mg(OH)₂ deposits — irreversibly blocking membrane pores and reducing current efficiency from 96% toward 88–92%. Membrane manufacturers’ performance warranties are voided above 20 ppb.

How does free residual chlorine in brine destroy chelating resin?

Free Cl₂ (HOCl/OCl⁻) oxidises the iminodiacetate chelate functional groups of secondary purification resin, breaking nitrogen-coordinated bonds. Above 0.5 mg/L, resin calcium capacity falls 10–20% per regeneration cycle. A degraded resin column allows Ba²⁺, Sr²⁺, and Fe³⁺ to break through to the electrolyzer — metals that cause irreversible Nafion membrane damage at sub-ppb concentrations.

What is the explosive range of Cl₂/H₂ mixtures?

4.5–93.9 vol% Cl₂ in H₂ — an exceptionally wide range. EuroChlor Safety Guideline 14 requires independent Cl₂ analyzers on all H₂ vent streams with automatic electrolyzer shutdown at >0.2 vol% Cl₂ in H₂.

Why threshold 35 for chlor-alkali brine purification AI?

Chlorine IDLH is 10 ppm — among the lowest for common industrial chemicals. Community shelter-in-place is required above 3 ppm. The DPC Festus 2002 incident affected 35,000 residents from a single hose failure event. The Cl₂/H₂ explosive range (4.5–93.9 vol% Cl₂) makes any undetected membrane differential excursion potentially catastrophic. Threshold 35 reflects both the toxic and explosive hazard vectors.