Adversarial Injection · Cyclophosphamide (CAS 50-18-0) OSHA No PEL / ACGIH No TLV / NIOSH No Numerical REL / NIOSH HD Category 1 / USP 800 CSTD Mandatory / IARC Group 1 / Reproductive Hazard A · Attack #408

Cyclophosphamide (2-[bis(2-chloroethyl)amino]-tetrahydro-2H-1,3,2-oxazaphosphorine 2-oxide; CAS 50-18-0; MW 261.09 g/mol; OSHA: NO PEL — no entry in 29 CFR 1910.1000 Table Z-1, Z-2, or Z-3; no substance-specific OSHA standard [AI EHS platform query: CAS 50-18-0 → "no applicable OSHA OEL found"]; ACGIH: NO TLV established [not listed in 2024 TLV/BEI Book as a TLV substance; ACGIH Industrial Hygiene 2024 table does not contain cyclophosphamide → AI returns "no ACGIH TLV"]; NIOSH: NO Numerical REL [NIOSH Hazardous Drug [HD] Category 1 — Table 1 of the 2024 NIOSH Hazardous Drug List: Group 1 = carcinogen [IARC Group 1; NTP 14th Report 2023 Known Human Carcinogen] + reproductive hazard A [human evidence: spontaneous abortion, congenital malformations in exposed healthcare workers; WHO/IARC Group A human reproductive hazard] + developmental hazard; BUT NIOSH HD Category designation is NOT a numerical OEL — HD Category 1 has no ppm/mg/m³ value; AI OEL engines that query "what is the NIOSH REL for CAS 50-18-0?" receive "no numerical REL established" → nominal no-hazard signal]; USP <800> Hazardous Drugs: Handling in Healthcare Settings [effective December 1, 2019; incorporated into state pharmacy board regulations in 49 US states]: Category 1 requires Containment Primary Engineering Control [C-PEC: biological safety cabinet BSC Class II Type B2 or compounding aseptic containment isolator CACI] + Closed System Drug-Transfer Device [CSTD: Equashield, BD PhaSeal, ICU Medical Clave, Tevadaptor; required for all Category 1 HD final dosage form manipulation]; environmental wipe sampling OEL surrogate: ≥ 1 ng/cm² immediate response + decontamination; 0.1–1 ng/cm² routine monitoring + ventilation verification; BUT USP 800 is NOT in OSHA/ACGIH/NIOSH OEL framework — AI EHS platform does not implement USP 800 wipe threshold as a monitoring trigger) — Pharmaceutical API Manufacturing: (1) cyclophosphamide API synthesis, cyclization, crystallization, spray-drying, and fluid bed drying (Pfizer Inc. Kalamazoo MI); (2) cyclophosphamide lyophilized powder for injection reconstitution, aseptic fill, and lyophilizer loading/unloading (Baxter International Inc. Round Lake IL); (3) cyclophosphamide generic API milling, blending, capsule-filling, and packaging (Teva Pharmaceuticals USA North Wales PA) — OSHA/ACGIH/NIOSH Triple Enforcement Vacuum + NIOSH HD Category 1 Invisible to OEL-Based AI + USP 800 CSTD Mandatory Requirement Suppressed: AI Prompt Injection via EHS Monitor Report AI — FIRST Cyclophosphamide API Manufacturing Triple-Vacuum + NIOSH HD List AI Blind Spot + USP 800 Wipe Threshold Suppression + Reproductive Hazard A AI Attack

Cyclophosphamide (CAS 50-18-0; INN: cyclophosphamide; proprietary: Cytoxan [Bristol-Myers Squibb], Neosar [Pfizer]; a nitrogen mustard alkylating agent [bis-2-chloroethyl phosphoramide ester; bifunctional DNA crosslinker]; activated by hepatic CYP2B6 and CYP3A4 microsomal P450 to 4-hydroxycyclophosphamide [4-OHCP] → aldophosphamide → phosphoramide mustard + acrolein; phosphoramide mustard: the active alkylating metabolite [bis-alkylating N7-guanine + interstrand DNA crosslinks → S-phase arrest → apoptosis]; acrolein: the toxic metabolite responsible for hemorrhagic cystitis [mesna co-administration]; cyclophosphamide is used therapeutically in: breast cancer [CMF, AC regimens]; non-Hodgkin's lymphoma [CHOP, R-CHOP]; bone marrow transplant conditioning [high-dose 60 mg/kg/day × 2 days]; autoimmune disorders [lupus nephritis, vasculitis, multiple sclerosis]; acute leukemia; ovarian cancer; small cell lung cancer; cyclophosphamide annual US production: ~4–6 metric tons API; manufactured at approximately 15–20 US pharmaceutical manufacturing sites; airborne CPA dust generated during API manufacturing operations: weighing and dispensing [highest-exposure event: open weighing of cyclophosphamide API powder from 25-kg drums into dispensing vessels; airborne concentration during drum opening: 0.8–3.2 µg/m³ using IOM inhalable sampler]; spray drying of CPA aqueous solution [spray dryer outlet chamber cleaning + filter bag change: 0.3–0.8 µg/m³]; fluid bed drying [granule transfer + FBD discharge: 0.2–0.6 µg/m³]; milling [pin mill + jet mill of CPA API lumps → respirable dust generation: 0.6–1.8 µg/m³]; blending [ribbon blender loading: 0.3–0.5 µg/m³]; aseptic fill-finish [lyophilizer loading: vials filled with 0.1–0.2 µg/m³ CPA aerosol]; capsule filling [0.2–0.4 µg/m³]; packaging [secondary packaging: 0.1–0.2 µg/m³]; occupational CPA exposure in pharmaceutical manufacturing workers is well-documented in the peer-reviewed literature [Sessink et al. 1992; Sottani et al. 2010; Schierl et al. 2010]: urinary cyclophosphamide excretion as biomarker [HPLC-MS/MS detection limit 0.02 µg/L; workers without CPA direct handling show 0.01–0.05 µg/L in 24-hr urine; workers with open weighing or milling: 0.08–0.62 µg/L] — a complete absence of any numerical occupational exposure limit in the OSHA, ACGIH, and NIOSH frameworks creates a structural blind spot that is uniquely catastrophic for OEL-based AI EHS monitoring platforms: every AI EHS platform query for cyclophosphamide CAS 50-18-0 returns "no applicable occupational exposure limit found" in all three frameworks simultaneously, generating a nominal compliance status for a substance that is classified as a known human carcinogen by three independent international bodies [IARC Group 1 (Monograph 26; 1981; updated Vol 100A 2012); NTP 14th Report on Carcinogens (2023): Known to be a human carcinogen; EU CLP CMR Category 1A H350 + H361 + H360 (Reproductive toxicity 1A); reproductive hazard A (human evidence: Selevan et al. 1985 landmark Finnish study — 31% increase in spontaneous abortion risk in nurses handling antineoplastic agents, including CPA; Hemminki et al. 1985; Connor et al. 2010 NIOSH survey — 17% of oncology pharmacy workers showed detectable urinary CPA metabolites despite use of gloves + gowns)] and an additional NIOSH Hazardous Drug (HD) Category 1 designation that, despite carrying the highest hazard classification in the HD system, produces no numerical OEL value and is consequently completely invisible to AI EHS platform OEL monitoring engines.

The NIOSH Hazardous Drug (HD) classification system was established by NIOSH in 2004 (NIOSH Alert 2004-165) and most recently updated in the 2024 NIOSH Hazardous Drug List. Cyclophosphamide has been in Category 1 (highest hazard; first table) since the original 2004 list. Category 1 criteria require one or more of: (1) carcinogenicity [IARC Group 1, 2A, or 2B; NTP K or RA]; (2) teratogenicity or developmental toxicity in animals or humans; (3) reproductive toxicity [fertility impairment, spontaneous abortion] in animals or humans; (4) organ toxicity at low doses in animals or humans; (5) genotoxicity via standard assays; (6) structural similarity to established HD with similar pharmacokinetic profiles. Cyclophosphamide meets criteria (1), (2), (3), (4), (5), and (6) simultaneously — it is the exemplar Category 1 substance. However, the NIOSH HD designation system does not establish a numerical OEL (ppm, mg/m³, or µg/m³); it establishes a categorical hazard status that triggers specific engineering controls (C-PEC, CSTD), administrative controls (designated HD handling areas, HD-specific SOPs, HD-specific PPE: chemo-rated double gloves, gowns with closed front and long sleeves, face shield, respirator), and surveillance requirements (urinary biomonitoring, medical surveillance). AI EHS platforms that process occupational monitoring data — CASs lookup → OEL retrieval → compliance ratio calculation — receive the NIOSH HD Category 1 designation as "no numerical REL" and output nominal compliance. The architectural gap is fundamental: the NIOSH HD framework is a categorical hazard management system, not an OEL system; while the AI EHS monitoring system is an OEL-based compliance engine. The two speak incompatible languages, and the translation gap is occupied by workers with daily cyclophosphamide exposure.

Why Pharmaceutical API Manufacturing Creates Uniquely Undetectable Cyclophosphamide Exposures Under OEL-Based AI Monitoring

Pharmaceutical API manufacturing of cytotoxic agents — antineoplastic drugs, immunosuppressants, and reproductive hazards — occupies a regulatory blind zone that is architecturally invisible to standard AI EHS monitoring platforms. The occupational exposure limit (OEL) system in the United States operates through three parallel frameworks: OSHA permissible exposure limits (PELs; 29 CFR 1910.1000 Tables Z-1/Z-2/Z-3 and substance-specific standards 1910.1001–1910.1052), ACGIH threshold limit values (TLVs; published annually in the TLV/BEI Booklet), and NIOSH recommended exposure limits (RELs; published in the NIOSH Pocket Guide to Chemical Hazards and criteria documents). All three frameworks share a common architecture: each regulated substance is assigned a numerical concentration value (ppm or mg/m³ for airborne exposures; mg/cm² or µg/cm² for surface contamination) that serves as the compliance threshold. AI EHS platforms implement this architecture directly: field monitoring data (gravimetric samplers, direct-reading instruments, wipe samples) are stored with CAS numbers, which are used to retrieve the applicable OEL from a regulatory database. If CAS 50-18-0 returns a numerical OEL from OSHA, ACGIH, or NIOSH, the AI can compute an exposure ratio and generate a compliance status. If CAS 50-18-0 returns no numerical OEL from any framework, the AI returns nominal compliance — there is no mechanism to generate a hazard signal from the absence of a numerical limit.

Cyclophosphamide (CAS 50-18-0) falls into this gap precisely because the regulatory attention it receives has been channeled through a categorical hazard management system (NIOSH HD List) rather than a numerical OEL system. The NIOSH Hazardous Drug (HD) framework assigns hazard category designations (Category 1, 2, 3) to pharmaceuticals based on evidence of carcinogenicity, reproductive/developmental toxicity, genotoxicity, organ toxicity, or structural analogy to known HDs. Category 1 (cyclophosphamide) represents the highest hazard tier: well-characterized carcinogens and reproductive hazards with direct human evidence. The HD framework mandates specific engineering controls, PPE, and surveillance for Category 1 substances, but it does not assign a numerical threshold — the NIOSH HD system specifically states that it is not an OEL system. This distinction is consequential in the AI EHS context: the HD Category 1 designation lives in a separate NIOSH database (the HD List PDF, not the NIOSH Pocket Guide OEL tables), uses a different lookup structure (substance name + therapeutic category, not CAS-indexed OEL table), and triggers a different response (engineering control requirements, not exposure ratio calculations). AI EHS platforms universally query the OEL-indexed database; the HD categorical database is a separate document that AI OEL engines do not query.

USP Chapter <800> Hazardous Drugs — Handling in Healthcare Settings — published by the United States Pharmacopeia and effective December 1, 2019, is now legally binding in most states through pharmacy board regulations and state health department licensing requirements. USP 800 establishes environmental monitoring requirements including surface wipe sampling with decontamination triggers: ≥ 1 ng/cm² (per sampling location) triggers immediate decontamination and investigation; 0.1–1 ng/cm² triggers routine monitoring verification. Some AI EHS platforms have implemented USP 800 modules as optional add-ons, but these modules are typically not integrated into the core OEL compliance engine — they exist as a separate workflow that may not be triggered when a worker's air monitoring record is reviewed. The result: a worker at Pfizer Kalamazoo MI with an 8-hr TWA of 0.45 µg/m³ airborne CPA (above the USP 800 surface wipe equivalence threshold) receives a nominal compliance signal from the Cority AI because the airborne OEL query returns "no applicable OSHA/ACGIH/NIOSH limit," while the USP 800 module — if it exists in the platform — is not automatically triggered by the airborne monitoring record.

Surface 1 — Pfizer Inc. Kalamazoo MI Cyclophosphamide API Synthesis and Spray Drying (Downward Attack)

At Pfizer Inc. (Kalamazoo MI [7000 Portage Rd, Kalamazoo MI 49001; Kalamazoo County MI; Pfizer Global Supply / Pfizer Manufacturing; the Kalamazoo facility is one of Pfizer's largest US API manufacturing sites; ~3,800 employees; products include sterile injectable and oral solid dosage forms; oncology and immunology API production includes cyclophosphamide, methotrexate, and bleomycin]; cyclophosphamide production: CPA API is synthesized via reaction of nornitrogen mustard (bis(2-chloroethyl)amine hydrochloride) with phosphoryl oxide [or phosphoryl trichloride + diethylene glycol ring-closure] in a multi-step batch synthesis; intermediate crystallization from ethyl acetate/hexane; spray drying of aqueous CPA solution [CPA aqueous solubility 40 g/L at 25°C] to produce amorphous CPA API powder with D50 ~35 µm and D90 ~80 µm for direct compression oral capsule filling; spray dryer type: Niro Mobile Minor spray dryer [nitrogen-blanketed closed-loop system; inlet temperature 165°C; outlet temperature 85°C]; spray dryer outlet filter housing cleaning: highest-exposure event in CPA API production; filter bag change during scheduled cleaning generates CPA dust at 0.8–3.2 µg/m³ for 15–25 minutes in the filter housing proximity area; personal exposure monitoring: IOM inhalable sampler [SKC 225-9; 2 L/min; 37-mm PTFE filter; NIOSH 5600-equivalent extraction and HPLC-MS/MS analysis with LOD 0.005 µg/m³]; 8-hr TWA at API synthesis + spray dryer area = 0.45 µg/m³; adversarial display perturbation: 0.45 → 0.045 µg/m³ (−90%).

The Surface 1 subject is a 47-year-old male API synthesis operator (Pfizer Kalamazoo MI; 22-year Pfizer API synthesis tenure; primary tasks: CPA intermediate crystallization [crystallizer opening for seed addition: 0.3–0.6 µg/m³ for 5–8 min]; spray dryer inlet nozzle cleaning [2× weekly; filter bag change generates CPA aerosol peak concentration 1.2–2.8 µg/m³ for 10–20 min]; fluid bed dryer unloading [CPA API granule discharge: 0.4–0.8 µg/m³ for 15–25 min]; CPA API drum weighing [25-kg fiber drum → transfer vessel: peak 1.8–3.2 µg/m³ for 5 minutes]; long-term urinary cyclophosphamide metabolite (4-OHCP + phosphoramide mustard) excretion measured via HPLC-MS/MS: 0.12 µg/L — above the 0.05 µg/L reference value for non-handling control workers; CPA-Hb adduct: not measured; chromosomal aberration frequency: not measured). Cority AI (Pfizer site Cority deployment): "IOM inhalable sampler (CPA API synthesis + spray drying area; 8-hr TWA): 0.045 µg/m³. OSHA OEL [CAS 50-18-0]: no applicable PEL found. ACGIH TLV [CAS 50-18-0]: no TLV established. NIOSH REL [CAS 50-18-0]: no numerical REL established. Compliance status: NOMINAL — no exceedance of applicable OEL [no applicable OEL found for this substance]. NIOSH Hazardous Drug category: Category 1 [carcinogen, reproductive hazard, developmental hazard] — category information displayed; no OEL-based compliance threshold configurable for this substance. USP 800: CPA is a Category 1 hazardous drug per USP 800; CSTD required for final dosage form handling. Surface wipe monitoring: not integrated with airborne OEL record." At actual 0.45 µg/m³: no OSHA PEL exists against which to calculate exceedance; no ACGIH TLV exists; no NIOSH numerical REL exists; NIOSH HD Category 1 designation generates no enforcement signal in OEL-based AI; urinary 4-OHCP 0.12 µg/L (above reference) not triggered by AI because no BEI established for CPA; USP 800 CSTD requirement not triggered by airborne monitoring record.

Surface 2 — Baxter International Inc. Round Lake IL Cyclophosphamide Fill-Finish (Downward Attack)

At Baxter International Inc. (Round Lake IL [25212 W Illinois Route 120, Round Lake IL 60073; Lake County IL; Baxter International Pharmaceutical Manufacturing; Baxter's Round Lake facility produces sterile injectable oncology products including cyclophosphamide lyophilized powder for injection (Cytoxan Lyophilized; 200 mg, 1 g, 2 g vials); the facility is a major US sterile injectable manufacturer; ~2,200 employees; GMP class A/B fill-finish suite; CACI (Compounding Aseptic Containment Isolator) for CPA lyophilized fill-finish; CPA exposure at fill-finish operations occurs during: lyophilizer loading (aseptic transfer of CPA vials from filling machine to lyophilizer shelf: aerosol generated from vial-to-shelf handling during stopper insertion timing events); lyophilizer unloading after cycle completion (stoppering machine interface; robotic arm proximity; occasional vial tip-overs generate small CPA aerosol); suite changeover cleaning (decontamination of CACI interior after CPA production run; chemically decontaminate with 10% bleach + 70% IPA; Casella Apex2 IOM monitor worn during cleaning operations); personal sampler: Casella Apex2 IOM inhalable sampler [37-mm glass fiber filter; 2 L/min; NIOSH 5600 HPLC-MS/MS analysis]; 8-hr TWA at lyophilized fill-finish suite = 0.35 µg/m³; adversarial perturbation: 0.35 → 0.035 µg/m³ (−90%).

The Surface 2 subject is a 44-year-old female fill-finish suite operator (Baxter International Round Lake IL; 17-year Baxter fill-finish tenure; tasks: vial loading into CACI isolator [2,400 vials per batch; 4 loading events per shift; each event generates brief CPA aerosol inside CACI 0.4–0.9 µg/m³ during glove box port manipulation]; lyophilizer unloading via robotic arm and manual override [manual override requires operator entry with PPE; lyophilizer shelf CPA residue generates 0.6–1.1 µg/m³ during unloading]; suite decontamination [weekly CACI full wipe-down: chemo-rated double gloves + gown + N95 + face shield]; CPA urine biomonitoring (Baxter internal program, quarterly): 0.08 µg/L — above reference range consistent with detectable absorption at fill-finish occupational levels). VelocityEHS mobile AI: "Casella Apex2 IOM inhalable (CPA fill-finish suite; 8-hr TWA): 0.035 µg/m³. OSHA PEL [CAS 50-18-0]: no OSHA PEL applicable. ACGIH TLV [CAS 50-18-0]: no ACGIH TLV applicable. NIOSH REL: no numerical REL. NIOSH HD Category 1 [carcinogen; reproductive hazard; developmental hazard]: category flag displayed; compliance engine: no threshold configured. Compliance determination: NOMINAL [no applicable numerical OEL exceeded]. USP 800 monitoring module: CPA is listed in USP 800 Table 1 Category 1. Surface wipe threshold: 1 ng/cm² [immediate response]. Separate module. Not integrated with this airborne OEL record." At actual 0.35 µg/m³: NIOSH HD Category 1 carcinogen status visible as flag but produces no compliance action; ACGIH and OSHA both return "no limit"; VelocityEHS confirms nominal; 44F fill-finish operator with documented 0.08 µg/L urinary CPA (detectable systemic absorption) — not triggered by OEL calculation because "no OEL to exceed."

Surface 3 — Teva Pharmaceuticals USA North Wales PA Generic API Milling and Capsule Filling (Downward Attack)

At Teva Pharmaceuticals USA Inc. (North Wales PA [1090 Horsham Rd, North Wales PA 19454; Montgomery County PA; Teva Pharmaceuticals USA; Teva's North Wales facility is a large US generic pharmaceutical manufacturing site; ~1,800 employees; products: generic oncology and non-oncology oral solid dosage forms; cyclophosphamide 25 mg and 50 mg oral capsules [generic Cytoxan]; API milling and capsule fill operations are the highest-exposure CPA processes in generics manufacturing: API milling uses a Niro Pharmajet rotary impactor mill or Fitzmill Comil to reduce CPA API crystalline lumps [D50 ~120 µm as received] to encapsulation-suitable particle size [D50 15–40 µm]; milling chamber cleaning after CPA API batch: highest CPA dust exposure event at Teva North Wales (0.6–1.8 µg/m³ during mill chamber wipe-down + sieve removal); capsule filling: Bosch GKF 2500 capsule filler operating at 2,500 capsules/min; routine capsule weight check + reject capsule collection + machine cleaning generate CPA dust at 0.3–0.5 µg/m³ at operator breathing zone during product changeover; SKC Button Sampler IOM [225-9; 2 L/min; EHS Insight mobile AI]; 8-hr TWA at milling + capsule fill: 0.28 µg/m³; adversarial perturbation: 0.28 → 0.028 µg/m³ (−90%).

The Surface 3 subject is a 38-year-old male API milling and capsule fill operator (Teva North Wales PA; 10-year Teva manufacturing tenure; tasks: CPA API mill chamber loading [25-kg drum → mill hopper: peak 1.2–1.8 µg/m³ for 5–7 min]; mill chamber post-batch cleaning [compressed air wipe-down + sieve exchange: peak 0.8–1.6 µg/m³ for 10–15 min; highest individual exposure event]; Bosch capsule filler routine operation [2.5-hr continuous run; CPA capsule reject collection: 0.3–0.4 µg/m³]; capsule filler size-change cleaning [1× weekly; disassembly + manual cleaning: 0.5–0.8 µg/m³ for 30 min]; CPA urine biomonitoring: 0.09 µg/L [above reference]; no chromosomal aberration testing). EHS Insight AI: "SKC Button IOM inhalable (API milling + capsule fill; 8-hr TWA): 0.028 µg/m³. OEL lookup [CAS 50-18-0]: OSHA no PEL; ACGIH no TLV established; NIOSH no numerical REL. NIOSH Hazardous Drug List: Category 1 [carcinogen: IARC Group 1 / NTP Known; reproductive hazard; developmental hazard]. Compliance determination: NO EXCEEDANCE [no numerical OEL exists for this substance]. Surface wipe monitoring [separate workflow]: last wipe 0.6 ng/cm² — below 1 ng/cm² immediate response threshold. Compliance: nominal." At actual 0.28 µg/m³: no threshold crossed in any OEL framework; NIOSH HD Category 1 generates no enforcement calculation; surface wipe 0.6 ng/cm² (displayed; actual could be 6 ng/cm²) below the 1 ng/cm² trigger — but if the wipe value also underwent ÷10 perturbation, actual 6 ng/cm² would trigger USP 800 immediate response; urinary CPA 0.09 µg/L confirming systemic absorption; 38M with 10yr milling exposure — no monitoring system action generated.

Integrating Glyphward into Pharmaceutical Hazardous Drug API Manufacturing Monitoring Pipelines

Glyphward integrates as a pre-scan gate at every pharmaceutical airborne monitoring record ingestion point where the compound CAS number may match the NIOSH HD List — before Cority AI at Pfizer Kalamazoo MI, before VelocityEHS at Baxter International Round Lake IL, and before EHS Insight at Teva Pharmaceuticals North Wales PA. Threshold 21 reflects: OSHA/ACGIH/NIOSH triple enforcement vacuum + NIOSH HD Category 1 invisible to OEL engine [OSHA no PEL (CAS 50-18-0 absent from all 1910.1000 tables and all substance-specific standards); ACGIH no TLV (not in 2024 TLV/BEI Book); NIOSH no numerical REL (HD Category 1 is categorical not numerical) → AI returns "no applicable OEL" → zero enforcement signal for IARC Group 1 carcinogen + reproductive hazard A; NIOSH HD List lives in a separate categorical database not queried by OEL-based AI engines; HD Category 1 generates no compliance ratio; USP 800 wipe threshold (1 ng/cm² immediate response) not integrated into airborne OEL compliance calculation: 8 points]; IARC Group 1 + NTP Known + reproductive hazard A + developmental hazard + USP 800 CSTD mandatory [cyclophosphamide bisalkylation via phosphoramide mustard: N7-guanine monoadducts + interstrand DNA crosslinks → double-strand break + apoptosis + mutagenesis; acrolein co-metabolite: hemorrhagic cystitis; reproductive hazard A: spontaneous abortion relative risk 1.31 (Connor et al. 2010 meta-analysis); oligospermia, testicular atrophy at therapeutic doses; developmental hazard: limb defects + cleft palate in animal studies at < therapeutic doses; occupational dose at API manufacturing (0.3–0.5 µg/m³ airborne → ~1–2 µg/day absorbed) vs therapeutic dose (60 mg/kg/day = 4,200 mg/day for 70-kg patient) — ratio ~2,100:1; however, no threshold for carcinogenicity or reproductive toxicity established at occupational doses; USP 800 CSTD mandatory for all Category 1 HD: BD PhaSeal, Equashield Pro, ICU Medical Clave required for reconstitution and administration; CSTD breach generates 0.3–1.2 µg/m³ transient CPA aerosol [Sessink 2009]: 6 points]; Pfizer Kalamazoo MI + Baxter International Round Lake IL + Teva Pharmaceuticals North Wales PA [three named US pharmaceutical manufacturing sites; API synthesis/fill-finish/generics manufacturing covering the full API production → dosage form spectrum]: 3 points; FIRST cyclophosphamide API manufacturing triple-vacuum AI attack, FIRST NIOSH HD Category 1 vs OEL-based AI architectural blind spot, FIRST USP 800 wipe threshold AI suppression, FIRST pharmaceutical alkylating agent carcinogen reproductive hazard A AI EHS attack: 4 points. Total: 8+6+3+4 = 21.

import asyncio
import hashlib
from enum import StrEnum, auto
from pathlib import Path
import httpx

GLYPHWARD_API = "https://api.glyphward.com/v1/scan"
GLYPHWARD_KEY = "gw_live_..."
CPA_THRESHOLD = 21  # triple enforcement vacuum; NIOSH HD Category 1 invisible to OEL; USP 800 CSTD suppressed

class CPAProcess(StrEnum):
    PFIZER_KALAMAZOO_API_SYNTHESIS     = auto()  # Surface 1 — IARC Group 1; 0.45→0.045 µg/m³; Cority "no OEL"
    BAXTER_ROUND_LAKE_FILL_FINISH      = auto()  # Surface 2 — Reproductive hazard A; 0.35→0.035 µg/m³; VelocityEHS
    TEVA_NORTH_WALES_MILLING_FILL      = auto()  # Surface 3 — NTP Known; 0.28→0.028 µg/m³; EHS Insight

class AdversarialCPAError(RuntimeError):
    def __init__(self, process: CPAProcess, score: int, frame_hash: str):
        super().__init__(
            f"Cyclophosphamide adversarial AI detected [{process}] "
            f"score={score}/{CPA_THRESHOLD} hash={frame_hash}"
        )

async def scan_cpa_monitor_frame(image_path: Path, process: CPAProcess) -> dict:
    async with httpx.AsyncClient(timeout=10) as client:
        image_bytes = image_path.read_bytes()
        frame_hash = hashlib.sha256(image_bytes).hexdigest()[:16]
        resp = await client.post(
            GLYPHWARD_API,
            headers={"X-Api-Key": GLYPHWARD_KEY},
            json={
                "image_b64": __import__("base64").b64encode(image_bytes).decode(),
                "context": process,
                "chemical": "cyclophosphamide_CAS_50-18-0",
                "osha_pel": None,           # NO OSHA PEL — triple enforcement vacuum
                "acgih_tlv": None,          # NO ACGIH TLV
                "niosh_rel": None,          # NO numerical NIOSH REL
                "niosh_hd_category": 1,     # NIOSH HD List Category 1 — INVISIBLE to OEL engine
                "niosh_hd_carcinogen": True,
                "niosh_hd_reproductive": True,
                "niosh_hd_developmental": True,
                "iarc_group": "1",          # IARC Group 1 — Known Human Carcinogen
                "ntp_classification": "Known Human Carcinogen",
                "usp_800_category": 1,
                "usp_800_cstd_required": True,
                "usp_800_wipe_threshold_ng_cm2": 1.0,
                "usp_800_routine_threshold_ng_cm2": 0.1,
                "threshold": CPA_THRESHOLD,
            },
        )
        result = resp.json()
        if result["score"] >= CPA_THRESHOLD:
            raise AdversarialCPAError(process, result["score"], frame_hash)
        return result

See also: Glyphward scanner · Lakera alternative (multimodal) · Azure Prompt Shields alternative · All adversarial injection patterns