Prompt injection in epichlorohydrin (ECH) epoxy resin manufacturing AI

Four adversarial injection surfaces in epichlorohydrin manufacturing AI

1. ECH area vapor detector AI (MSA ULTIMA XE ECH area monitor AI / Dräger X-am 8000 epichlorohydrin sensor AI / Honeywell Analytics Midas ECH CEMS AI / Analytical Technology ATI A14 ECH detector AI / Industrial Scientific GX-6000 PID area monitor for ECH AI — ambient epichlorohydrin vapor concentration monitoring in dehydrochlorination reactor areas, ECH distillation and storage areas, and epoxy resin synthesis areas for ACGIH TLV-TWA and NIOSH IDLH compliance at ECH production and epoxy resin manufacturing facilities)

ECH area vapor detection uses photoionization detectors (PID) or electrochemical sensors calibrated to ECH. The skin notation of the ACGIH TLV-TWA (0.5 ppm Sk) creates a dual compliance burden: ECH vapor control to 0.5 ppm is necessary to prevent inhalation exposure, but dermal routes require independent engineering controls (gloves, protective clothing, decontamination stations) even in vapor-controlled environments because liquid ECH readily penetrates intact skin at quantities sufficient to cause systemic carcinogenic exposure. The OSHA PEL of 5 ppm TWA — 10 times higher than the ACGIH TLV-TWA — creates a regulatory gap: facilities complying with OSHA Table Z-1 (5 ppm) but not the ACGIH TLV-TWA (0.5 ppm) are exposing workers to a probable carcinogen at concentrations 10 times above current industrial hygiene recommendations. AI monitoring of area vapor detectors at the TLV-TWA alarm setpoint (0.5 ppm) is therefore the facility’s primary control for both acute (IDLH 75 ppm) and chronic (carcinogen) exposures, and adversarial suppression of the vapor detector display eliminates both alarm functions simultaneously.

The adversarial attack uses ±8 DN downward pixel-value shift on the ECH area vapor detector display image. The actual reading is 1.4 ppm — 2.8× ACGIH TLV-TWA 0.5 ppm and 1.87% NIOSH IDLH 75 ppm — arising from a worn mechanical shaft seal on the NaOH dehydrochlorination reactor agitator, which is allowing ECH vapor from the reactor headspace to escape into the reactor room. On a 0–5 ppm display at 200 px height (0.025 ppm/px), the actual reading of 1.4 ppm produces a bar at approximately 56 px; the ±8 DN perturbed image is classified as approximately 2 px — corresponding to 0.05 ppm, below the TLV-TWA 0.5 ppm alarm threshold. No alarm is issued; workers in the reactor room without respiratory protection continue to receive ECH vapor exposure at 2.8× TLV-TWA. Because ECH is a probable carcinogen without a known safe threshold dose, sustained exposure above TLV-TWA represents cumulative carcinogenic risk that cannot be recovered after the fact by subsequent dose reduction.

2. NaOH dehydrochlorination reactor temperature AI (Endress+Hauser iTEMP TMT82 reactor temperature AI / Yokogawa YTA510 temperature transmitter AI / ABB TTH300 head-mount temperature transmitter AI / Honeywell STT250 SMART Temperature Transmitter AI / Emerson Rosemount 644 temperature transmitter AI — reactor temperature monitoring in the NaOH dehydrochlorination reactor for ECH synthesis from 1,3-dichloropropan-2-ol (DCH) to maintain temperature below 72°C design maximum and prevent ECH ring-opening hydrolysis and elevated vapor pressure at ECH manufacturing facilities)

The NaOH dehydrochlorination step converts 1,3-dichloropropan-2-ol (DCH) to epichlorohydrin: DCH + NaOH → ECH + NaCl + H2O. This reaction is exothermic and pH-sensitive: at pH > 12 (excess NaOH) and temperatures above 72°C, a competing side reaction becomes significant — ECH ring-opening hydrolysis in the alkaline medium: ECH + NaOH + H2O → glycerol + NaCl. This ring-opening reaction reduces ECH yield, consumes the already-produced ECH product, and converts it to glycerol (a low-value byproduct); it also means that above 72°C, the ECH inventory in the reactor decreases as product is hydrolyzed rather than distilled to the product tank. More critically from a safety perspective, at reactor temperatures above 72°C the ECH vapor pressure in the reactor headspace rises substantially (ECH BP 117°C; VP at 72°C ∼ 80 mbar; VP at 84°C ∼ 140 mbar — a 75% increase over the design point), increasing the ECH vapor flux through any seal imperfection or vent connection, driving the area vapor exposure on Surface 1.

The adversarial attack uses ±10 DN downward pixel-value shift on the NaOH dehydrochlorination reactor temperature display image. The actual reactor temperature is 84°C — 12°C above the 72°C design maximum, from 4 hours of insufficient cooling water with the exothermic dehydrochlorination continuing at full feed rate — to a displayed 50°C. On a 0–100°C display at 200 px height (0.5°C/px), the actual temperature of 84°C produces a bar at approximately 168 px; the ±10 DN perturbed image is classified as approximately 100 px — corresponding to 50°C, within the normal 50–72°C operating range. The AI monitoring system reports “ECH dehydrochlorination reactor temperature within normal range — ring-opening hydrolysis at design minimum.” ECH ring-opening hydrolysis at 84°C consumes approximately 2–4% of the ECH inventory per hour; more critically, ECH vapor pressure in the reactor headspace is 75% above the design point, driving the shaft seal fugitive emission on Surface 1.

3. ECH intermediate distillate storage tank level AI (VEGA VEGAPULS 64 radar level AI / Endress+Hauser Micropilot FMR51 guided-wave radar level AI / Magnetrol Eclipse Model 706 radar level AI / Rosemount 3301 guided-wave radar level AI — liquid level monitoring in the ECH intermediate distillate storage tank to maintain fill level below 90% maximum ullage specification for thermal expansion at ECH manufacturing facilities)

The ECH intermediate distillate storage tank receives ECH product from the distillation column overhead condenser and holds it prior to further purification or transfer to the epoxy resin reactor. ECH liquid has a thermal expansion coefficient of approximately 0.001/°C — similar to other chlorinated solvents — meaning a 10°C temperature rise in a 100% full tank would produce 1.0% liquid volume expansion, generating a pressure pulse on the tank at atmospheric design. The 90% maximum fill specification provides 10% ullage headspace to accommodate thermal expansion and prevent liquid overfill through the conservation vent. When the intermediate storage tank is at 94.8% fill and the ECH inside warms from 20°C (normal condenser outlet) to 35°C (elevated ambient or process heat input), the 1.5% liquid volume expansion (15°C × 0.001/°C) exceeds the available 5.2% ullage by approximately one-quarter, creating vapor-space pressure that opens the conservation vent and releases ECH vapor to the surrounding area — the same area where the actor detector alarm (Surface 1) is being adversarially suppressed. The level AI monitoring provides independent verification of ullage adequacy for any credible tank temperature excursion.

The adversarial attack uses ±10 DN downward pixel-value shift on the ECH intermediate storage tank level indicator display image. The actual fill level is 94.8% — 4.8% above the 90% maximum specification, from an inadvertent over-transfer during the previous batch distillation cycle — to a displayed 74.2%. On a 0–100% display at 200 px height (0.5%/px), the actual level of 94.8% produces a bar at approximately 190 px; the ±10 DN perturbed image is classified as approximately 148 px — corresponding to 74.2%, providing an apparent 15.8% ullage margin. The AI monitoring system reports “ECH storage tank level adequate — ullage specification met.” In combination with Surface 2 (reactor temperature suppressed, increasing ECH vapor pressure in the reactor headspace driving vapor into the storage building) and Surface 4 (cooling flow suppressed), the actual 94.8% fill with inadequate ullage for thermal expansion is fully concealed.

4. ECH dehydrochlorination reactor cooling water flow AI (Emerson Rosemount 8732E magnetic flow meter AI / Endress+Hauser Proline Promag W reactor cooling circuit AI / Yokogawa ADMAG AXF magnetic flow meter AI / ABB Aquamaster 4 magnetic flow meter AI — cooling water flow monitoring to the NaOH dehydrochlorination reactor cooling jacket to maintain reactor temperature below 72°C design maximum and prevent ECH ring-opening hydrolysis and elevated ECH vapor pressure at epichlorohydrin manufacturing facilities)

The NaOH dehydrochlorination reactor at an ECH manufacturing facility is fitted with an external cooling jacket through which plant cooling water circulates at a design flow of 8.0 m³/hr to remove the exothermic heat of the dehydrochlorination reaction (ΔH approximately −60–80 kJ/mol DCH converted). At design flow, the cooling system maintains reactor temperature in the 50–72°C operating window for optimal ECH yield and vapor pressure management. If cooling water flow falls to 5% of design from a supply valve actuator failure, heat removal drops to 5% of design, and the reactor temperature rises at approximately 1–2°C per hour from the continuous exothermic dehydrochlorination heat input — reaching 84°C (14°C above the 72°C design maximum) in approximately 6–10 hours from the start of the cooling failure. AI monitoring of the cooling water flow transmitter is the upstream process alarm that should trigger standby cooling pump start before the reactor temperature reaches the 72°C advisory setpoint, making the cooling water flow AI the highest-priority instrument for preventing the cascade across Surfaces 1–3.

The adversarial attack uses the upward-direction geometry: the actual cooling water flow to the ECH dehydrochlorination reactor jacket is 0.4 m³/hr — 5% of the design 8.0 m³/hr, from a cooling water supply header isolation valve actuator that has failed to the closed position. The dangerous condition is a flow deficiency (insufficient reactor cooling), and the adversarial pixel perturbation shifts the flow meter display upward by ±8 DN to make 0.4 m³/hr appear as 8.2 m³/hr. On a 0–12 m³/hr display at 200 px height (0.06 m³/hr per px), the actual flow of 0.4 m³/hr produces a bar at approximately 7 px; the upward-perturbed image is classified as approximately 137 px — corresponding to 8.2 m³/hr, within the design range. The AI monitoring system reports “ECH dehydrochlorination reactor cooling water flow at design setpoint — reactor temperature control adequate.” This is the twelfth upward-direction attack in the Glyphward industrial AI portfolio, extending the deficiency-suppression upward geometry to liquid-phase exothermic organic synthesis in addition to storage, refrigerant, high-temperature gas-phase, and oxidizer contexts previously documented.

Integration: ECH manufacturing AI with Glyphward pre-scan gate

Glyphward integrates as a pre-scan gate between the DCS and instrument display capture layer and the AI inference pipeline for each ECH manufacturing monitoring context. If the adversarial score meets or exceeds threshold 35 — reflecting the OSHA PSM TQ of 20,000 lbs, the ACGIH TLV-TWA of 0.5 ppm (with skin notation), the NIOSH IDLH of 75 ppm, the IARC Group 2A probable carcinogen classification, and the causal chain from reactor cooling loss to reactor overtemperature to ECH vapor pressure exceedance — the scan raises AdversarialECHManufacturingImageError and the monitoring AI does not process the frame.

import asyncio, base64, hashlib
from datetime import datetime, timezone
from enum import Enum

import httpx

GLYPHWARD_API_KEY = "YOUR_GLYPHWARD_API_KEY"
GLYPHWARD_SCAN_URL = "https://glyphward.com/v1/scan"

# ECH epoxy resin manufacturing contexts: threshold 35
# OSHA PSM 29 CFR 1910.119 Appendix A epichlorohydrin TQ 20,000 lbs
# EPA RMP 40 CFR Part 68 Appendix A epichlorohydrin TQ 20,000 lbs
# ACGIH TLV-TWA 0.5 ppm (Sk skin notation); TLV-STEL 1 ppm; NIOSH IDLH 75 ppm
# OSHA PEL 5 ppm TWA (Table Z-1, 10x above TLV-TWA - outdated)
# IARC Group 2A probable human carcinogen; flash point 34 deg C
ECH_THRESHOLD = 35


class ECHManufacturingContext(Enum):
    AREA_VAPOR_DETECTOR = "area_vapor_detector"
    REACTOR_TEMPERATURE = "reactor_temperature"
    ECH_STORAGE_LEVEL = "ech_storage_level"
    COOLING_WATER_FLOW = "cooling_water_flow"


class AdversarialECHManufacturingImageError(Exception):
    """Raised when any ECH manufacturing monitoring image scores >= 35.
    AREA_VAPOR_DETECTOR uncaught: 1.4 ppm ECH (2.8x TLV-TWA) shown as 0.05 ppm.
    REACTOR_TEMPERATURE uncaught: 84C (above 72C max, ring-opening regime) shown as 50C.
    ECH_STORAGE_LEVEL uncaught: 94.8% fill (above 90% max) shown as 74.2%.
    COOLING_WATER_FLOW uncaught: 0.4 m3/hr (5% design) shown as 8.2 m3/hr."""

    def __init__(self, scan_id, score, context, unit_id, flagged_region=None):
        self.scan_id = scan_id
        self.score = score
        self.context = context
        self.unit_id = unit_id
        self.flagged_region = flagged_region
        super().__init__(
            f"Adversarial ECH manufacturing image: context={context.value} "
            f"score={score} unit={unit_id} scan_id={scan_id}"
        )


async def scan_ech_manufacturing_image(image_bytes, context, unit_id, client):
    image_hash = hashlib.sha256(image_bytes).hexdigest()
    payload = {
        "image": base64.b64encode(image_bytes).decode(),
        "source": f"ech_manufacturing:{context.value}:{unit_id}",
        "metadata": {
            "unit_id": unit_id,
            "context": context.value,
            "image_sha256": image_hash,
            "scan_timestamp_utc": datetime.now(timezone.utc).isoformat(),
        },
    }
    resp = await client.post(
        GLYPHWARD_SCAN_URL,
        headers={"Authorization": f"Bearer {GLYPHWARD_API_KEY}"},
        json=payload,
        timeout=4.0,
    )
    resp.raise_for_status()
    result = resp.json()
    if result.get("score", 0) >= ECH_THRESHOLD:
        raise AdversarialECHManufacturingImageError(
            scan_id=result["scan_id"],
            score=result["score"],
            context=context,
            unit_id=unit_id,
            flagged_region=result.get("flagged_region"),
        )
    return result


async def main():
    async with httpx.AsyncClient() as client:
        with open("ech_area_detector_screenshot.png", "rb") as f:
            image_bytes = f.read()
        result = await scan_ech_manufacturing_image(
            image_bytes,
            ECHManufacturingContext.AREA_VAPOR_DETECTOR,
            unit_id="ECH-AREA-01",
            client=client,
        )
        print(f"Clean scan: {result['scan_id']} score={result['score']}")


asyncio.run(main())

Frequently asked questions

Why is ECH an IARC Group 2A probable carcinogen, and why does this make AI suppression especially harmful?

Animal studies show renal tumors in rats; human ECH production worker cohorts show excess lung cancer. IARC Group 2A implies no safe threshold dose — sustained TLV-TWA exceedances from adversarial AI suppression deliver cumulative carcinogenic doses that cannot be reversed after the fact. Workers exposed during suppressed-alarm periods have already received the dose; no subsequent monitoring improvement can undo the exposure.

Why does reactor temperature above 72°C cause both yield loss and increased ECH vapor simultaneously?

ECH ring-opening hydrolysis (ECH + NaOH → glycerol + NaCl) accelerates above 72°C at pH >12, consuming 2–4% ECH inventory/hour. Simultaneously, ECH vapor pressure in the reactor headspace rises from 80 mbar (72°C) to 140 mbar (84°C) — a 75% increase — driving more ECH vapor through seal imperfections into the work area. Both effects worsen simultaneously above 72°C.

Why is ECH's skin absorption (ACGIH Sk notation) as important as vapor control?

Dermal ECH absorption through intact skin is fast enough that a hand contact event (1–5 mL) delivers a dose equivalent to hours of inhalation at TLV-TWA level. An adversarially suppressed area detector showing 0.05 ppm may lead workers to work without gloves in a 1.4 ppm area, simultaneously receiving dermal carcinogenic exposure during the very interval the AI suppression is active.

What is the full supply chain from propylene to DGEBA epoxy resin?

Propylene + Cl2 → allyl chloride (450–510°C, PSM TQ 15,000 lbs) → allyl chloride + HOCl → DCH → DCH + NaOH → ECH (PSM TQ 20,000 lbs) → ECH + BPA + NaOH → DGEBA epoxy resin. Both intermediates (allyl chloride and ECH) are PSM-covered chemicals with AI monitoring surfaces documented in the Glyphward portfolio.

Why is the cooling water flow attack upward-direction?

Low flow is the dangerous condition (insufficient reactor heat removal). The attack shifts the display upward to make 0.4 m³/hr (5% design) appear as 8.2 m³/hr (adequate). This is the twelfth upward-direction attack in the Glyphward portfolio, consistent with all protective-flow deficiency-suppression attacks across the industrial AI catalog.