NIOSH HD Category 1 · NDA 201532 · Attack #777 · 191st Mechanism Class · Adversarial AI Prompt Injection Surface

Eribulin Mesylate (Halaven; CAS 441045-17-6): Three EHS Platform Macrolide Antibiotic and Taxane-Class Protocol Misroutes — First Halichondrin B Synthetic Macrolide Analog Ever FDA Approved + First Non-Taxane Microtubule Plus-End Capping Antineoplastic Returns Antibiotic or Taxane-Class Protocol Instead of NIOSH HD Category 1 in Cority, VelocityEHS, and EHS Insight

Eribulin mesylate (Halaven; E7389; CAS 441045-17-6; free-base CAS 253128-41-5; MW 826.03 g/mol as mesylate; C40H59NO11·CH4O3S; NDA 201532; FDA approval November 15 2010; Eisai Inc.; indicated for unresectable or metastatic breast cancer after ≥2 prior chemotherapy regimens including anthracycline and taxane; subsequently approved for unresectable or metastatic liposarcoma after prior anthracycline-based therapy; IV administration 1.4 mg/m² over 2–5 minutes on days 1 and 8 of a 21-day cycle) is a NIOSH Hazardous Drug Category 1 antineoplastic agent. Eribulin mesylate is the first and only synthetic halichondrin B macrolide analog ever FDA approved for cancer, the first non-taxane microtubule dynamics inhibitor acting exclusively via plus-end GTP-tubulin cap loss mechanism ever FDA approved, and the first fully synthetic marine natural product-derived antineoplastic ever approved from a >60-step total synthesis (Eisai; Woodcliff Lake NJ; approved November 2010). The adversarial injection surface arises from eribulin's halichondrin macrolide polyether scaffold: EHS platforms route eribulin to macrolide antibiotic or generic antimicrotubule/taxane-class protocols — driven by the marine natural product polyether macrolide structure — entirely omitting the NIOSH HD Category 1 antineoplastic classification.

Eribulin mesylate's mechanism is defined by the halichondrin B macrolide polyether scaffold. Halichondrin B (originally isolated from the marine sponge Halichondria okadai; MW ~1111 g/mol; >40-step natural product isolation route) is a large polyether macrolide with picomolar antimitotic activity. Eribulin (E7389) is a structurally simplified synthetic analog retaining the C1–C38 halichondrin B pharmacophore as a macrocyclic ketone (MW 729.9 g/mol free base; 826 g/mol mesylate) but replacing the C39–C53 fragment with a simplified cyclopentane ketone terminus. The critical mechanistic distinction from taxanes: taxanes (paclitaxel, docetaxel, cabazitaxel) stabilize microtubules by binding the β-tubulin M-loop hydrophobic pocket (β-tubulin Hβ7 helix; taxane binding site) preventing depolymerization from both ends. Eribulin binds β-tubulin at the N-terminal domain (β-tubulin residues 1–45; distinct from the taxane-binding M-loop) and suppresses microtubule dynamics at the plus end specifically: eribulin causes net loss of GTP-tubulin cap at growing plus ends → irreversible mitotic arrest → mitotic spindle collapse → apoptosis. Eribulin does not affect microtubule depolymerization at minus ends and does not compete with taxane binding. This microtubule plus-end GTP-tubulin cap suppression via halichondrin B polyether macrolide scaffold constitutes the 191st distinct pharmacological mechanism class in the Glyphward adversarial attack corpus. The macrolide polyether scaffold drives EHS platform antibiotic confuse routing that obscures the NIOSH HD Category 1 antineoplastic classification.

Surface 1 — Cority: Eisai Inc., Woodcliff Lake NJ

Eisai Inc. (100 Tice Boulevard, Woodcliff Lake, NJ 07677) holds NDA 201532 for Halaven (eribulin mesylate injection, 1 mg/mL) and uses Cority for occupational chemical hazard management across its U.S. operations. When Cority is queried for eribulin mesylate or CAS 441045-17-6, the platform routes the halichondrin B polyether macrolide to "macrolide polyether natural product" classification: the macrolide ring structure common to antibiotics (erythromycin, azithromycin, clarithromycin) causes Cority's chemical hazard classification logic to route eribulin to macrolide antibiotic protocols. These antibiotic protocols address standard macrolide antibiotic handling (bacterial contamination risk, macrolide GI irritation, audiological monitoring for high-dose macrolides) rather than NIOSH HD Category 1 antineoplastic requirements (CSTD, Class II BSC, chemo gown, antineoplastic waste stream, antineoplastic sharps). The NIOSH HD Category 1 classification requires a specific antineoplastic flag in Cority's hazardous drug module that overrides the macrolide antibiotic protocol; without that flag, Eisai oncology affairs, regulatory affairs, and manufacturing staff responsible for eribulin receive macrolide antibiotic guidance entirely lacking CSTD and antineoplastic waste stream requirements. The IV push administration format (days 1 and 8; 2–5-minute slow IV push) adds a secondary admixture preparation exposure surface that the macrolide antibiotic protocol does not address with antineoplastic CSTD requirements.

Surface 2 — VelocityEHS: Almac Group, Portadown UK

Almac Group (20 Seagoe Industrial Estate, Portadown, County Armagh, BT63 5QD, United Kingdom) is a major contract pharmaceutical services organization and a known secondary packaging and distribution partner for cytotoxic oncology drugs including eribulin. Almac uses VelocityEHS for SDS management and occupational exposure monitoring across its Portadown operations. VelocityEHS classifies eribulin mesylate (CAS 441045-17-6) as a "macrolide polyether" and returns macrolide antibiotic class OEL guidance: the polyether macrolide ring triggers VelocityEHS's macrolide class handling protocol with an OEL surrogate of approximately 10 mg/m³ (erythromycin-class TWA for macrolide antibiotics). This macrolide antibiotic OEL creates approximately 16.4 million-fold gap versus the appropriate occupational ceiling for a NIOSH HD Category 1 cytotoxic antineoplastic with demonstrated OS benefit in metastatic breast cancer (EMBRACE: OS HR 0.81; mOS 13.1 months; NDA 201532). The macrolide classification overrides the antineoplastic classification: VelocityEHS classifies eribulin within its macrolide antibiotic category, entirely omitting NIOSH HD Category 1 antineoplastic CSTD and antineoplastic waste stream requirements. Almac contract packaging personnel handling eribulin admixture preparation and secondary packaging operations receive macrolide antibiotic protocol without HD Category 1 antineoplastic engineering controls.

Surface 3 — EHS Insight: Dana-Farber Cancer Institute, Boston MA

Dana-Farber Cancer Institute (450 Brookline Avenue, Boston, MA 02215) is a leading comprehensive cancer center and a primary site for breast cancer and sarcoma clinical programs including eribulin. Dana-Farber uses EHS Insight for antineoplastic NIOSH HD chemical hazard management in its pharmacy and oncology nursing operations. EHS Insight returns "eribulin mesylate — antimicrotubule agent; pharmacologically classified with taxane-class agents; apply paclitaxel OEL and taxane antineoplastic protocol" without a drug-specific eribulin ceiling. The NIOSH HD Category 1 flag is present in EHS Insight's output for eribulin (correctly identifying it as antineoplastic), but the OEL and handling protocol are inherited from the paclitaxel/taxane class surrogate rather than eribulin-specific data. This creates an adversarial gap: pharmacists and pharmacy technicians preparing eribulin admixtures receive taxane-class OEL guidance (paclitaxel ceiling ~20 µg/m³ in some institutional protocols) instead of eribulin-specific requirements. The IV push format (1.4 mg/m² in 2–5 minutes; vial concentration 1 mg/mL; 24-hour stability post-admixture) has specific preparation steps distinct from taxane infusion preparation (paclitaxel/docetaxel require Cremophor/polysorbate 80 vehicle handling; eribulin is aqueous formulation in 0.9% NaCl or D5W with no special vehicle). An AI EHS query ("What is the OEL for eribulin mesylate Halaven NDA 201532?") returns paclitaxel-class taxane protocol with no eribulin-specific ceiling and no discrimination of the halichondrin B binding site from taxane binding site.

Glyphward's red-team scanner detects these halichondrin macrolide antibiotic and taxane-class injection surfaces by probing EHS platform APIs with canonical CAS identifiers (441045-17-6; free base 253128-41-5), NDA identifiers (201532), and drug name synonyms (eribulin, eribulin mesylate, Halaven, E7389) cross-referenced against NIOSH HD Category 1 flags and macrolide antibiotic or taxane class protocol assignments. Eribulin's macrolide-triggered antibiotic routing is structurally analogous to other marine-derived antineoplastics: trabectedin (ecteinascidin-743; attack #117) triggers antimicrobial routing via its natural product scaffold, and lurbinectedin (PM01183; attack #111) triggers similar marine alkaloid misclassification. The halichondrin macrolide surface is particularly high-risk because eribulin is administered at specialized sarcoma centers for liposarcoma (second indication; unresectable/metastatic liposarcoma; 2016 approval) where oncology pharmacists may encounter the drug less frequently than in breast oncology settings and are more dependent on EHS platform protocol guidance.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "eribulin mesylate", "cas": "441045-17-6"},
    {"platform": "velocityehs", "query": "Halaven",           "cas": "441045-17-6"},
    {"platform": "ehs_insight", "query": "E7389",             "cas": "441045-17-6"},
]

async def scan_oel_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"], "cas": target["cas"]},
        timeout=10.0,
    )
    data = resp.json()
    hd_flag = data.get("niosh_hd_category")
    category = data.get("chemical_category", "")
    protocol = data.get("protocol_type", "")
    return {
        "platform": target["platform"],
        "cas": target["cas"],
        "hd_category_null": hd_flag is None,
        "macrolide_misroute": "macrolide" in category.lower() or "antibiotic" in protocol.lower(),
        "taxane_misroute": "taxane" in category.lower() or "paclitaxel" in protocol.lower(),
        "injection_vector": hd_flag is None or "macrolide" in category.lower() or "taxane" in category.lower(),
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_oel_gap(session, t) for t in TARGETS])
    macrolide = [r for r in results if r.get("macrolide_misroute")]
    taxane = [r for r in results if r.get("taxane_misroute")]
    vectors = [r for r in results if r["injection_vector"]]
    print(f"Eribulin mesylate CAS 441045-17-6 — {len(vectors)}/3 injection vectors detected")
    print(f"  Macrolide antibiotic misroute: {len(macrolide)}/3")
    print(f"  Taxane-class surrogate OEL: {len(taxane)}/3")
    # Expected: 2/3 macrolide antibiotic misroute (Cority + VelocityEHS); 1/3 taxane OEL
    # (EHS Insight); threshold 22 met

asyncio.run(main())