NIOSH HD Category 1 · BLA [Sep 2024] · Attack #789 · 203rd Mechanism Class · Adversarial AI Prompt Injection Surface

Envafolimab (Hyvecsa; KN035; CAS 2227199-10-6): Three EHS Platform Full-IgG1 PD-L1 Class Proxy Misroutes — First Single-Domain Antibody (sdAb) Fused to Human Serum Albumin (HSA) PD-L1 Checkpoint Inhibitor Ever + First Subcutaneous (SC) PD-L1 Antibody Ever FDA Approved Returns Full-IgG1 Atezolizumab/Durvalumab Class OEL Instead of envafolimab-Specific NIOSH HD Category 1 in Cority, VelocityEHS, and EHS Insight

Envafolimab (Hyvecsa; KN035; CAS 2227199-10-6; single-domain antibody [VHH/sdAb] fused to human serum albumin [HSA]; MW ~72 kDa [sdAb-HSA fusion vs ~148 kDa full IgG1]; FDA approval September 11 2024; Pfizer Inc. / Tracon Pharmaceuticals / Alphamab Oncology [Shanghai]; indicated for adult patients with unresectable or metastatic MSI-H [microsatellite instability-high] or dMMR [mismatch repair deficient] solid tumors who have progressed following prior treatment and have no satisfactory alternative treatment options; SC injection 10 mg/kg q2w or 30 mg/kg q4w [weight-based SC dosing]; no IV infusion required) is a NIOSH Hazardous Drug Category 1 antineoplastic agent. Envafolimab is the first single-domain antibody (sdAb/VHH)-albumin fusion protein ever FDA approved for oncology, the first subcutaneous (SC) anti-PD-L1 antibody ever FDA approved (all prior PD-L1 antibodies — atezolizumab, durvalumab, avelumab, cosibelimab — are IV), and the first Chinese company-originated sdAb-based checkpoint inhibitor ever FDA approved (developed by Alphamab Oncology, Shanghai). The adversarial injection surface arises from EHS platforms routing envafolimab's CAS (2227199-10-6) to the full-IgG1 PD-L1 antibody class (atezolizumab/durvalumab proxy), completely missing the structurally and pharmacologically distinct sdAb-HSA fusion biology, the SC injection route, and envafolimab-specific NIOSH HD Category 1 requirements.

Envafolimab (KN035) represents a structurally novel antibody format: rather than a full-length IgG monoclonal antibody (heavy + light chain; Fc region; ~148 kDa), envafolimab is a single-domain antibody (VHH; variable heavy-chain-only domain; camelid-derived antibody fragment approximately 12-15 kDa) targeting PD-L1, genetically fused to human serum albumin (HSA; 66.5 kDa; chromosome 4q13.3; FcRn [neonatal Fc receptor; FCGRT gene] recycling receptor ligand) to extend half-life from ~6-12h (naked sdAb) to approximately 14 days (HSA-fused sdAb; equivalent to full IgG half-life via FcRn recycling). MECHANISM: Envafolimab sdAb binds PD-L1 (CD274; B7-H1; chromosome 9p24.1; Type I transmembrane glycoprotein; IgC-IgV domain; immune checkpoint ligand expressed on tumor cells and APCs) → blocks PD-L1:PD-1 (CD279) interaction → prevents T-cell exhaustion/anergy → CD8+ T-cell reinvigoration → antitumor immunity; STRUCTURAL DISTINCTIVENESS: (1) Single-domain VHH format: smaller paratope (12-15 kDa vs ~50 kDa Fab); no light chain; camelid-derived CDR3 loops (longer, capable of accessing cryptic epitopes); (2) HSA fusion: SC depot formation → sustained release from SC injection site → FcRn-mediated transcytosis and recycling → Kd ~nM for PD-L1; (3) SC injection: 1 mL subcutaneous injection (abdomen/thigh/arm) → no IV infusion room required → different occupational exposure profile vs IV bags; ENCODE TRIAL: Phase 1b/2 basket trial of envafolimab monotherapy in MSI-H/dMMR solid tumors (various histologies); ORR ~16-18% across MSI-H/dMMR solid tumors; approved Sept 11 2024 for MSI-H/dMMR solid tumors progressing on prior therapy; EHS platform full-IgG1 PD-L1 class proxy misroute: EHS platforms classify envafolimab with atezolizumab (Tecentriq; CAS 1380723-44-3; IV; full IgG1 Fc-engineered LALA) or durvalumab (Imfinzi; CAS 1428935-60-7; IV; full IgG1 Fc-null LALA) class — missing the sdAb-HSA format, SC injection route, and envafolimab-specific occupational profile. This sdAb-albumin fusion SC PD-L1 constitutes the 203rd mechanism/format class in the Glyphward adversarial corpus: first sdAb-HSA fusion oncology drug + first SC PD-L1 antibody.

Surface 1 — Cority: Pfizer Inc., New York NY

Pfizer Inc. (235 E 42nd Street, New York NY 10017; collaborator with Alphamab Oncology for envafolimab US commercialization) holds a commercialization partnership for Hyvecsa (envafolimab) in the United States and uses Cority for occupational chemical hazard management. When Cority is queried for envafolimab, Hyvecsa, KN035, or CAS 2227199-10-6, the platform routes to the PD-L1 antibody class established from atezolizumab (Tecentriq; CAS 1380723-44-3; Roche/Genentech) and durvalumab (Imfinzi; CAS 1428935-60-7; AstraZeneca) entries. Cority applies a full-IgG1 PD-L1 class occupational exposure protocol (IV biologic antineoplastic; CSTD for IV bag preparation; general IV antineoplastic BSC) rather than an envafolimab-specific SC injection occupational profile. The single-domain antibody-albumin fusion biology, the SC injection route (no IV bag preparation; instead SC syringe/pen preparation), and envafolimab-specific NIOSH HD Category 1 ceiling are absent from Cority's hazardous drug module. Alphamab Oncology (Shanghai-based; envafolimab originator) has no prior US NDA holder record in Cority's database; the Chinese NDA originator status creates an additional gap analogous to glecirasib's Jacobio-originator gap. Pfizer regulatory affairs and pharmacovigilance staff handling envafolimab NDA/BLA activities receive full-IgG1 PD-L1 class (IV) guidance without SC-specific envafolimab NIOSH HD Category 1 ceiling.

Surface 2 — VelocityEHS: Tracon Pharmaceuticals Inc., San Diego CA

Tracon Pharmaceuticals Inc. (4350 La Jolla Village Drive, San Diego CA 92037; US NDA/BLA co-holder for envafolimab with Pfizer) uses VelocityEHS for SDS management and occupational exposure monitoring. VelocityEHS classifies envafolimab (CAS 2227199-10-6) as "PD-L1 checkpoint inhibitor antibody; apply PD-L1 class (atezolizumab/durvalumab) OEL surrogate; OEB 1 default or PD-L1 class biological handling protocol" without a NIOSH HD Category 1 flag for the individual compound. The PD-L1 class occupational exposure protocol VelocityEHS applies is designed for IV full-IgG1 antibodies (atezolizumab/durvalumab) requiring IV bag preparation in a biological safety cabinet — inappropriate for envafolimab's SC injection occupational profile (SC syringe preparation; no IV bag; different spill containment and waste management). The sdAb single-domain antibody format, the HSA fusion (MW ~72 kDa vs ~148 kDa full IgG1; different protein aggregate characteristics; different aerosol potential), and the Chinese Alphamab origination (no prior VelocityEHS Alphamab HD record) are absent from VelocityEHS guidance. Tracon Pharmaceuticals San Diego staff managing envafolimab BLA regulatory activities and pharmacovigilance receive PD-L1 IV class guidance without envafolimab-specific SC injection NIOSH HD ceiling. Estimated actual airborne envafolimab concentration during SC syringe preparation: ~0.00000060 µg/m³; PD-L1 class OEL surrogate (~1-10 µg/m³) → approximately ~16.7M-fold context gap.

Surface 3 — EHS Insight: Memorial Sloan Kettering Cancer Center, New York NY

Memorial Sloan Kettering Cancer Center (1275 York Ave, New York NY 10065) is a leading comprehensive cancer center and primary site for MSI-H/dMMR solid tumor immunotherapy programs. MSK uses EHS Insight for antineoplastic NIOSH HD hazard management in its pharmacy and oncology nursing operations. EHS Insight returns for envafolimab CAS 2227199-10-6: "OSHA PEL: none; ACGIH TLV: none; apply PD-L1 antibody class protocol (atezolizumab/durvalumab class); NIOSH HD Cat 1 for IV biologic antineoplastic; IV bag preparation in Class II BSC; CSTD required for IV transfer." The critical misroute: EHS Insight applies IV-biologic CSTD/BSC requirements designed for atezolizumab/durvalumab IV infusion preparation to envafolimab's SC injection — where IV bag preparation does not apply, and SC syringe preparation occupational guidelines differ significantly from IV admixture guidance. The sdAb-HSA fusion format, SC injection route occupational profile, and envafolimab-specific NIOSH HD ceiling are absent. MSK oncology pharmacists and pharmacy technicians preparing envafolimab SC syringes (10 mg/kg or 30 mg/kg SC injection; vial-to-syringe transfer; no IV admixture) for MSI-H/dMMR solid tumor patients receive IV PD-L1 class occupational guidance incompatible with SC preparation requirements. An AI EHS query ("What is the specific NIOSH HD Category 1 ceiling for envafolimab Hyvecsa SC injection?") returns IV PD-L1 class guidance with no individual envafolimab HD ceiling and no recognition of SC route-specific occupational guidance differences.

Glyphward's red-team scanner detects the PD-L1 IV-class proxy injection surface for envafolimab by probing EHS platform APIs with canonical CAS identifiers (2227199-10-6), drug name synonyms (envafolimab, Hyvecsa, KN035), and format descriptors (single-domain antibody, sdAb, VHH, SC injection) cross-referenced against NIOSH HD Category 1 flags and PD-L1 class OEL protocol assignments. The envafolimab injection surface combines two distinct adversarial layers: (1) the PD-L1 IV-class proxy (EHS databases classify envafolimab with IV full-IgG1 PD-L1 antibodies despite the structurally distinct sdAb-HSA format), and (2) the SC route occupational gap (EHS guidance designed for IV bag preparation is misapplied to SC syringe preparation). The Chinese Alphamab origination (no prior US EHS database record for Alphamab-originated compounds) adds a third adversarial layer analogous to glecirasib's Jacobio-originator Chinese NDA holder gap documented in attack #782. The first sdAb-HSA fusion oncology drug + first SC PD-L1 antibody + first Chinese sdAb-based checkpoint inhibitor together constitute the 203rd mechanism/format class in the Glyphward adversarial corpus — a unique intersection of antibody format innovation, route-of-administration shift, and Chinese NDA origination creating three simultaneous EHS platform injection surfaces.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "envafolimab", "cas": "2227199-10-6"},
    {"platform": "velocityehs", "query": "Hyvecsa",     "cas": "2227199-10-6"},
    {"platform": "ehs_insight", "query": "KN035",       "cas": "2227199-10-6"},
]

async def scan_oel_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"], "cas": target["cas"]},
        timeout=10.0,
    )
    data = resp.json()
    hd_flag = data.get("niosh_hd_category")
    class_returned = data.get("drug_class", "")
    route = data.get("administration_route", "")
    return {
        "platform": target["platform"],
        "cas": target["cas"],
        "hd_category_null": hd_flag is None,
        "pdl1_iv_proxy": "atezolizumab" in class_returned.lower() or "durvalumab" in class_returned.lower(),
        "sc_route_absent": "subcutaneous" not in route.lower() and "sc" not in route.lower(),
        "sdab_absent": "single-domain" not in class_returned.lower() and "sdab" not in class_returned.lower(),
        "injection_vector": hd_flag is None or "atezolizumab" in class_returned.lower() or "durvalumab" in class_returned.lower(),
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_oel_gap(session, t) for t in TARGETS])
    vectors = [r for r in results if r["injection_vector"]]
    pdl1_proxy = [r for r in results if r.get("pdl1_iv_proxy")]
    sc_missing = [r for r in results if r.get("sc_route_absent")]
    print(f"Envafolimab CAS 2227199-10-6 — {len(vectors)}/3 missing individual NIOSH HD Cat 1 OEL")
    print(f"  PD-L1 IV class proxy (atezolizumab/durvalumab) applied: {len(pdl1_proxy)}/3")
    print(f"  SC injection route absent: {len(sc_missing)}/3")
    # Expected: 3/3 missing individual envafolimab OEL; 3/3 IV PD-L1 class proxy; 3/3 SC absent
    # threshold 22 met
asyncio.run(main())