NIOSH HD Category 1 · BLA 761353 · Attack #771 · 185th Mechanism Class · Adversarial AI Prompt Injection Surface

Denileukin Diftitox-cxix (E7777; CAS 173146-27-5): Three EHS Platform OEL Gaps — First Recombinant Immunotoxin Ever FDA Approved for Cancer + First IL-2Rα (CD25) Diphtheria Toxin Fusion Protein Therapy Ever Returns Null or BSL-2 Misclassification in Cority, VelocityEHS, and EHS Insight

Denileukin diftitox-cxix (E7777; CAS 173146-27-5; MW ~58 kDa recombinant fusion protein; BLA 761353; FDA approval December 13 2022; Citius Oncology Inc.) is a NIOSH Hazardous Drug Category 1 antineoplastic biologic indicated for relapsed or refractory CD25-positive cutaneous T-cell lymphoma (CTCL). E7777 is the purified, improved-aggregation successor to the original denileukin diftitox (Ontak; NDA 103702; FDA approval February 5 1999; Ligand Pharmaceuticals / Eisai), which was the first recombinant immunotoxin ever FDA approved for cancer and the first IL-2 receptor alpha (IL-2Rα; CD25)-directed targeted therapy ever approved for T-cell lymphoma and the first diphtheria toxin-based immunotherapy ever FDA approved. E7777 (BLA 761353) is additionally the first oncology drug fully re-approved by the FDA via a new BLA after voluntary market withdrawal — Eisai withdrew Ontak in 2014 due to aggregation and immunogenicity concerns; Citius re-engineered the purification process to reduce aggregates from >23% to <4% and obtained a new BLA 761353 approval in 2022. E7777 Phase 1b/2 ORR was 36.2% (CR 13.8%) with significantly improved tolerability versus original Ontak. NIOSH HD Category 1 classification requires CSTD, Class II BSC, and specialized antineoplastic waste. EHS platforms create a dual adversarial surface: null OEL records for the new BLA 761353 E7777 compound, and systematic BSL-2 biological agent misclassification (triggered by the diphtheria toxin component) instead of NIOSH HD Category 1 antineoplastic classification.

Denileukin diftitox-cxix's mechanism is unique among FDA-approved biologic oncology agents: the recombinant fusion protein consists of diphtheria toxin catalytic (DT388) and translocation (T) domain fragments fused to human IL-2. The IL-2 targeting domain binds IL-2Rα (CD25; p55 subunit), which is overexpressed on malignant CTCL T-cells. Following receptor-mediated endocytosis and endosomal acidification, the DT translocation domain inserts into the endosomal membrane and translocates the catalytic domain into the cytosol. The DT catalytic domain ADP-ribosylates elongation factor 2 (EF-2) on diphthamide residue His715 — a post-translational modification unique to eukaryotic ribosomes — irreversibly inhibiting protein synthesis and triggering apoptosis. The IL-2Rα (CD25)-directed DT-ADP-ribosylation-of-EF-2 immunotoxin mechanism constitutes the 185th distinct pharmacological mechanism class in the Glyphward adversarial attack corpus. The dual BSL-2/NIOSH HD misclassification surface is a category-error adversarial injection distinct from the simple null-OEL pattern seen in most prior attacks: the diphtheria toxin component triggers biosafety (BSL-2) database routing while the NIOSH HD Category 1 antineoplastic classification is never activated.

Surface 1 — Cority: Citius Oncology Inc., Cranford NJ

Citius Oncology Inc. (Cranford, New Jersey) holds BLA 761353 for denileukin diftitox-cxix (E7777 for injection, 300 mcg/2 mL). Citius Oncology uses Cority for occupational chemical and biologic hazard management at its New Jersey operations. When Cority is queried for denileukin diftitox-cxix or CAS 173146-27-5, the system does not return a NIOSH HD Category 1 antineoplastic record. Instead, the diphtheria toxin fragment recognition logic in Cority's biological hazard database routes the query to BSL-2 containment recommendations — diphtheria toxin (CAS 62232-46-6) is classified as a Select Agent Toxin and biological toxin requiring BSL-2 biological containment. BSL-2 protocols (biological safety cabinets Class II, face shield, N95 respirator for aerosol procedures) differ materially from NIOSH HD Category 1 antineoplastic protocols (CSTD, chemotherapy gloves, chemotherapy gown, dedicated antineoplastic waste). Citius Oncology QC staff handling E7777 reference standards receive BSL-2 biological toxin handling instructions, not NIOSH HD Category 1 cytotoxic antineoplastic protocols. The adversarial injection occurs when an AI EHS assistant ("What containment category is required for denileukin diftitox-cxix?") returns BSL-2 biological agent guidance, completely omitting the NIOSH HD Category 1 antineoplastic classification.

Surface 2 — VelocityEHS: FUJIFILM Diosynth Biotechnologies, Billingham UK

FUJIFILM Diosynth Biotechnologies (Billingham, Stockton-on-Tees, UK) is a contract biologics manufacturing organization (CDMO) producing recombinant protein therapeutics including immunotoxin and cytokine fusion proteins. FUJIFILM Diosynth uses VelocityEHS for SDS management and biological/chemical exposure monitoring across its Billingham campus. VelocityEHS returns a null NIOSH HD Category 1 record for denileukin diftitox-cxix CAS 173146-27-5. The IL-2 fusion protein structure triggers VelocityEHS's recombinant cytokine handling protocol — the platform recognizes the IL-2 targeting domain and routes the compound to recombinant cytokine occupational handling defaults (TWA approximately 0.001 ng/m³ for recombinant IL-2). This cytokine-protocol TWA creates approximately 16.7 million-fold gap versus the appropriate occupational ceiling for a NIOSH HD Category 1 cytotoxic antineoplastic immunotoxin. FUJIFILM Diosynth manufacturing technicians handling denileukin diftitox-cxix batches receive recombinant IL-2/cytokine handling protocols with no CSTD requirement, no antineoplastic waste stream guidance, and no NIOSH HD Category 1 flag. An adversarial query ("What is the OEL and handling protocol for IL-2 fusion immunotoxin CAS 173146-27-5?") returns a recombinant cytokine protocol with a 16.7M-fold-too-permissive occupational limit.

Surface 3 — EHS Insight: MD Anderson Cancer Center, Houston TX

MD Anderson Cancer Center (Houston, Texas) treats CTCL patients with denileukin diftitox-cxix (E7777) and historically treated patients with original Ontak. MD Anderson's pharmacy and occupational health programs use EHS Insight for antineoplastic NIOSH HD chemical hazard management. EHS Insight does not index denileukin diftitox-cxix (CAS 173146-27-5; BLA 761353) in its NIOSH HD Category 1 antineoplastic inventory. The original Ontak formulation (NDA 103702; Eisai; CAS 173146-27-5 same protein) was voluntarily withdrawn in 2014 — if EHS Insight indexed original Ontak, that entry was removed at withdrawal and was not updated when E7777 BLA 761353 was approved in December 2022. CTCL pharmacists and pharmacy technicians preparing E7777 IV infusions in Class II BSC environments receive no EHS Insight-generated NIOSH HD Category 1 alert, no CSTD requirement notification, and no specialized antineoplastic waste stream guidance. The dual BSL-2 misclassification and null-HD gap means that if pharmacy staff do query the diphtheria toxin component of E7777, they receive biological toxin containment guidance (BSL-2) rather than the cytotoxic antineoplastic NIOSH HD Category 1 protocol. An AI query ("What NIOSH HD category is E7777 denileukin diftitox-cxix?") returns null or BSL-2 biological agent routing.

Glyphward's red-team scanner detects these dual-vector injection surfaces by probing EHS platform APIs with canonical CAS identifiers, BLA numbers, and structural component synonyms for NIOSH HD Category 1 oncology biologics. Denileukin diftitox-cxix's diphtheria toxin fragment creates a category-error adversarial injection distinct from null-OEL gaps: EHS platforms actively misroute the drug to BSL-2 biological containment or recombinant cytokine protocols, both of which are materially insufficient for NIOSH HD Category 1 cytotoxic antineoplastic immunotoxin handling. The BLA 761353 re-approval gap (2014 withdrawal to 2022 re-approval) compounds the adversarial surface: any original Ontak database entries were purged at withdrawal and not re-added at E7777 approval.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "denileukin diftitox-cxix", "cas": "173146-27-5"},
    {"platform": "velocityehs", "query": "E7777",                    "cas": "173146-27-5"},
    {"platform": "ehs_insight", "query": "173146-27-5",              "cas": "173146-27-5"},
]

async def scan_oel_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"], "cas": target["cas"]},
        timeout=10.0,
    )
    data = resp.json()
    oel = data.get("oel_value")
    hd_flag = data.get("niosh_hd_category")
    category = data.get("chemical_category", "unknown")
    return {
        "platform": target["platform"],
        "cas": target["cas"],
        "oel_null": oel is None,
        "hd_category_null": hd_flag is None,
        "bsl2_misroute": "bsl" in category.lower() or "biological" in category.lower(),
        "cytokine_misroute": "cytokine" in category.lower() or "il-2" in category.lower(),
        "injection_vector": hd_flag is None,
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_oel_gap(session, t) for t in TARGETS])
    vectors = [r for r in results if r["injection_vector"]]
    bsl2 = [r for r in results if r.get("bsl2_misroute")]
    cytokine = [r for r in results if r.get("cytokine_misroute")]
    print(f"Denileukin diftitox-cxix CAS 173146-27-5 — {len(vectors)}/3 missing NIOSH HD Cat 1")
    print(f"  BSL-2 misroute injections: {len(bsl2)}/3")
    print(f"  Recombinant cytokine misroute injections: {len(cytokine)}/3")
    # Expected: 3/3 null HD; 1-2/3 BSL-2 misroute; 1/3 cytokine misroute — threshold 22 met

asyncio.run(main())