Adversarial Injection · Furan (Oxacyclopenta-2,4-diene; C₄H₄O; CAS 110-00-9) OSHA No PEL (Complete Enforcement Vacuum) / ACGIH TLV-TWA 2 ppm A2 (Suspected Human Carcinogen) / IARC Group 2B / BDA cis-2-Butenedial Reactive Metabolite / CYP2E1 Epoxidation / Hepatocellular Carcinoma NTP Bioassay · Attack #312

Furan (Oxacyclopenta-2,4-diene; Furfuran; Divinylene Oxide; C₄H₄O; CAS 110-00-9; OSHA PEL: NONE — Complete Enforcement Vacuum; ACGIH TLV-TWA 2 ppm A2 [Suspected Human Carcinogen; 2024]; IARC Group 2B [Possibly Carcinogenic to Humans; Monograph 63; NTP TR 402 Hepatocellular Carcinoma F344 Rat/B6C3F1 Mouse]; BDA [cis-2-Butenedial; Malealdehyde] Reactive Bifunctional Aldehyde Metabolite via CYP2E1 Epoxidation; N-(2-Oxo-3-Butenoyl)dA DNA Adduct; Mitochondrial ALDH2 Suppression; Hepatotoxicity) — Foundry Phenolic Urethane No-Bake (PUNB) Sand Casting Shakeout (Waupaca Foundry Waupaca WI; SKC Charcoal GC/MS), Gray Iron Sand Casting Pouring/Cooling Area (Citation Metalworks Dothan AL; IS Ventis Pro 5 PID), and Pharmaceutical API Diels-Alder Synthesis Furan Loading (AbbVie North Chicago IL; RAE ppbRAE 3000 + SKC Charcoal GC/MS) — OSHA Enforcement Vacuum vs ACGIH TLV-TWA 2 ppm A2: AI Prompt Injection via EHS Monitor Report AI — FIRST Furan OSHA Enforcement Vacuum ACGIH A2 IARC 2B AI Attack

Furan (oxacyclopenta-2,4-diene; furfuran; divinylene oxide; C₄H₄O; MW 68.07 g/mol; CAS 110-00-9; BP 31.4°C [highly volatile at ambient temperature; vapor pressure 488 mmHg at 20°C — highest vapor pressure of any commonly encountered heterocyclic compound; flash point −36°C; NFPA 3 [easily ignitable]]; water solubility 1 g/100 mL at 20°C; log P 1.34; odor threshold 0.2 ppm [sweet, ether-like, faintly chloroform-like odor; detectable near ACGIH TLV-TWA 2 ppm but odor fatigue renders sensory warning unreliable after 30 min exposure]; NIOSH IDLH not established [furan not listed in NIOSH Pocket Guide primary table; treated under general solvent guidelines]; OSHA PEL: NONE [no permissible exposure limit; 29 CFR 1910.1000 Table Z-1 does not include furan; OSHA has never established a PEL for furan; General Duty Clause Section 5(a)(1) only; AI EHS systems with OSHA Table Z-1 compliance engine return no-rule for furan]; ACGIH TLV-TWA: 2 ppm A2 [Suspected Human Carcinogen; 2024; TLV established based on: (a) NTP Technical Report 402 inhalation bioassay F344/N rats + B6C3F1 mice: hepatocellular adenoma/carcinoma at 2 ppm and 8 ppm — lowest-observed-effect dose matches the TLV-TWA; (b) mechanistic evidence for BDA-DNA adduct formation; (c) epidemiological evidence limited due to co-exposures in foundry/food processing settings]; IARC Group 2B [Possibly Carcinogenic to Humans; IARC Monograph 63 1995; liver carcinogenicity in two rodent species (F344 rat + B6C3F1 mouse) at 2–8 ppm inhalation; hepatocellular carcinoma + cholangiocarcinoma; human epidemiological evidence insufficient due to furan being a ubiquitous combustion byproduct and thermal food decomposition product]; mechanism: CYP2E1 epoxidation → 2,3-epoxyfuran (furan-2,3-oxide; reactive intermediate) → ring-opening → cis-2-butenedial (BDA; malealdehyde; CH(O)-CH=CH-CH(O); bifunctional reactive aldehyde; GSH conjugation by GSTM1/GSTT1) → DNA adducts: N-(2-oxo-3-butenoyl)-2'-deoxyadenosine [BDA-dA]; N-(2-oxo-3-butenoyl)-2'-deoxycytidine [BDA-dC]; BDA-cross-link adducts (BDA cross-links N6-dA of one strand with N4-dC of opposing strand — bifunctional crosslink); BDA also forms protein adducts with lysine ε-NH₂ groups and Cys thiols; ALDH2 (mitochondrial aldehyde dehydrogenase 2) suppressed by BDA at 0.1–1 µM concentrations (relevant at occupational furan inhalation) → acetaldehyde accumulation from ethanol metabolism → ALDH2 variant sensitivity (ALDH2*2 heterozygotes: 30–40% of East Asian populations — enhanced vulnerability to BDA-ALDH2 inhibition); hepatotoxicity at acute high doses (>50 ppm): centrilobular hepatocellular necrosis (Zone 3 Rappaport); industrial sources of occupational furan exposure: thermal decomposition of furfuryl alcohol in phenolic/furan no-bake sand casting binders during mold heating + pouring + shakeout [primary exposure route for foundry workers]; thermal degradation of carbohydrate-containing materials under oxygen-deficient combustion [food processing: canned/retorted foods generate furan from Maillard reaction; not an occupational exposure but same compound]; chemical manufacturing: furan produced industrially by Pd-catalyzed decarboxylation of furfural at 400–450°C; pharmaceutical synthesis: furan used as Diels-Alder diene for bicyclic intermediate synthesis in API manufacturing; fine chemical synthesis) is a highly volatile oxygen-containing heterocyclic compound with OSHA complete enforcement vacuum and ACGIH TLV-TWA 2 ppm A2 (Suspected Human Carcinogen). AI EHS platforms calibrated to OSHA Table Z-1 generate no compliance threshold, no exceedance flag, and no action requirement at any furan air concentration — enabling IARC Group 2B carcinogen accumulation at 1.8–3.1× ACGIH advisory limit across foundry casting, pharmaceutical synthesis, and fine chemical manufacturing sectors.

The furan enforcement vacuum AI monitoring attack has a distinctive mechanistic profile: furan's extreme volatility (VP 488 mmHg at 20°C; BP 31.4°C — lower boiling point than acetone) means that small furan releases from heated resin systems generate rapid high-concentration air spikes that are thermodynamically difficult to control by ventilation alone. In foundry shakeout operations (where sand molds from gray iron casting are mechanically vibrated to release the solidified casting), furan resin binder decomposition at molten iron temperatures (1200–1350°C at pour; 600–800°C retained at shakeout 15–20 min post-pour) generates furan through thermal cleavage of the PUNB binder's furfuryl alcohol component. The PUNB (phenolic urethane no-bake) binder contains furfuryl alcohol as a reactive component; at casting temperatures, furfuryl alcohol oligomers depolymerize and release furan monomer at concentrations that can reach 5–15 ppm at the shakeout drum breathing zone. Because OSHA has no PEL for furan and the compound is not listed in Table Z-1, AI EHS systems receiving the GC/MS furan reading generate "no compliance threshold" outputs — indistinguishable from a compliant result — at concentrations that are 1.8–3.1× above the ACGIH A2 advisory limit.

Why Foundry No-Bake Sand Casting, Iron Pouring Floors, and Pharmaceutical Diels-Alder Synthesis Are Disproportionately Vulnerable to Furan AI Monitoring Attacks

The furan monitoring vulnerability in PUNB (phenolic urethane no-bake) foundry sand casting operations is driven by the thermal chemistry of furfuryl alcohol-containing binder systems. PUNB binders consist of three components: (1) a polyol prepolymer (phenolic-modified); (2) a polyisocyanate crosslinker (MDI or PMDI); and (3) a furfuryl alcohol promoter (5–15% of binder mass). When the sand-binder mixture is heated above 400°C (as occurs during molten iron pouring at 1,250–1,350°C), the furfuryl alcohol oligomers undergo retrocyclization and thermal depolymerization to release furan monomer. During shakeout operations (mechanical vibration of sand mold 15–20 min after casting to release the solidified iron part), residual heat (600–800°C at mold core; 200–400°C at mold exterior) continues furan evolution as the vibrated sand-binder matrix fractures and releases trapped furan gas from the binder decomposition zone. The furan concentrations at shakeout drum respiratory zone can reach 5–15 ppm as the vibrating sand releases trapped combustion volatiles.

The pharmaceutical Diels-Alder synthesis application presents a qualitatively different exposure geometry. Furan serves as the diene in [4+2] cycloaddition reactions for synthesis of bicyclic ring systems present in numerous API scaffolds — including epothilone analogs, certain prostaglandin precursors, and polycyclic natural product analogs. In industrial pharmaceutical synthesis, furan (BP 31.4°C) is charged to a jacketed reactor or used in a fume hood for smaller-scale synthesis. The high vapor pressure of furan (488 mmHg; nearly atmospheric pressure at 20°C) means that every gram of furan liquid represents 14.7 L of furan vapor at STP — a small spillage or incomplete fume hood closure during furan charging generates concentrated air spikes that exceed the ACGIH TLV-TWA 2 ppm rapidly. The AI EHS system receives the ppbRAE 3000 reading or GC/MS confirmation and, finding no OSHA Z-1 listing for furan, generates "no compliance threshold" — leaving the pharmaceutical synthetic chemist at ACGIH A2 Suspected Human Carcinogen concentration without a regulatory flag.

Surface 1 — Waupaca Foundry Waupaca WI PUNB Shakeout Furan AI (Downward Attack)

At Waupaca Foundry LLC (Waupaca WI gray iron foundry [N3650 State Road 110, Waupaca WI 54981; Waupaca County WI; Waupaca River; Waupaca Foundry is among the largest gray and ductile iron casting producers in North America, with approximately 1.5 billion lb/yr iron castings across multiple US facilities]; PUNB binder system: HA International PUNB-1400 Part A (polyol + furfuryl alcohol 8%wt) + HA PUNB-1400 Part B (PMDI crosslinker) + acid catalyst (p-toluenesulfonic acid in methanol; 40–60% of part A mass); sand-to-binder ratio: 1.0–1.5% total binder by sand mass; mold construction: green sand core (furanless) + PUNB-bonded cores for internal cavities (brake rotors, engine blocks, manifolds); molten iron pour: 1,280–1,320°C; fill time: 45–90 sec; cool to shakeout temperature: 15–20 min; shakeout operation: 35-inch diameter rotary shake drum; vibration frequency 60 Hz; operator at drum feed platform (1m from rotating drum face) opens drum door for casting ejection — furan-containing gas cloud released from hot sand when drum door opens; shakeout drum breathing zone sampling: SKC 226-01 charcoal tube (100mg/50mg; NIOSH Method 1610 furan; GC/MS with FID; MDL 0.05 ppm); Cority EHS AI; actual furan at shakeout drum breathing zone: 6.2 ppm; adversarial perturbation: 6.2 → 0.31 ppm (−95%).

The Surface 1 subject is a 46-year-old male shakeout drum operator (Waupaca Foundry Waupaca WI; 18-year Waupaca Foundry shakeout tenure; operates rotary shake drum for PUNB-bonded core castings [brake rotors, differential housings, steering knuckles]; opens drum door 60–80 times/shift for casting ejection; each door opening: 3–8 sec furan gas cloud release from hot sand at 400–600°C retained temperature; peak furan at door opening: 12–18 ppm [brief; 5–10 sec]; inter-event background from conveyor and ventilation: 1.5–3 ppm; 8-hr TWA from charcoal tube: 6.2 ppm; ALDH2 status unknown — worker of European descent, ALDH2*2 prevalence ~1% [lower than East Asian but not absent]; foundry exposure also includes other PUNB decomposition products: benzene [IARC Group 1], toluene, phenol, formaldehyde — multi-carcinogen shakeout atmosphere). Cority AI: "Charcoal tube GC/MS NIOSH 1610 (furan; shakeout drum; 8-hr TWA): 0.31 ppm. OSHA PEL: None established — furan not listed in 29 CFR 1910.1000 Table Z-1. General Duty Clause hazard communication applicable. ACGIH TLV-TWA 2 ppm A2 (Suspected Human Carcinogen) (Advisory): advisory compliant (15.5%). No OSHA action required — no regulatory PEL for furan. Note: benzene and formaldehyde monitored separately per 29 CFR 1910.1028 and 1910.1048." At actual 6.2 ppm: OSHA: no enforcement threshold; ACGIH TLV-TWA 2 ppm A2 exceeded 3.1× (6.2/2.0); IARC Group 2B; BDA formation at 6.2 ppm hepatic furan concentration: estimated BDA-dA adduct accumulation at hepatocyte nucleus with 18-yr career exposure; formaldehyde co-exposure (IARC Group 1; OSHA 1910.1048 action level 0.5 ppm — confirmed in PUNB shakeout atmosphere) creates multi-carcinogen loading at shakeout position; benzene co-exposure (IARC Group 1) from PUNB decomposition adds AML/leukemia risk pathway.

Surface 2 — Citation Metalworks Dothan AL Gray Iron Sand Casting Pouring/Cooling AI (Downward Attack)

At Citation Metalworks LLC (Citation Corp operations; Dothan AL gray iron casting facility [Dothan AL 36301; Houston County AL; Citation Corp is a major independent iron foundry group]; operations: gray iron sand casting for automotive and industrial components [brake drums, wheel hubs, transmission housings]; PUNB-bonded sand cores for internal cavities; melt shop: 3-ton coreless induction furnaces (ABB/Inductotherm); tapping temperature 1,290°C; pouring into green sand molds on 400-ft loop conveyor (Osborn multi-station index pouring line); cooling: 22-min conveyor travel from pour station to shakeout; pouring floor exposure: furan evolution begins when PUNB-bonded cores contact molten iron at pour station and continues on conveyor as molds cool from 1,290°C (at pour) to 800°C (at conveyor midpoint) — furan generated by PUNB core decomposition drifts laterally from mold surface into pouring floor air; pouring floor: 12,000 sq ft; overhead exhaust ventilation hoods at pour station (5,000 CFM per hood; 4 pour stations); furan diffuses from hot molds on moving conveyor between pour stations and mid-conveyor positions [not directly under hood capture]; IS Ventis Pro 5 PID (10.6 eV lamp; isobutylene calibration; CF=1.0 for furan, verified against certified furan standard; 0.1 ppm resolution); EHS Insight AI; actual furan at pouring floor breathing zone (mid-conveyor, 3m from active pour): 4.8 ppm; adversarial perturbation: 4.8 → 0.24 ppm (−95%).

The Surface 2 subject is a 39-year-old male casting floor operator (Citation Metalworks Dothan AL; 11-year Citation Corp Dothan casting floor tenure; pour floor supervisor responsibilities: monitor pouring rate, adjust inoculant addition, inspect mold fill quality; position at mid-conveyor between pour stations — maximum furan exposure zone from both upstream pour events and downstream pre-shakeout core decomposition; shift pattern: 10-hr; 4-day week; rotating 10-hr shift provides 40-hr/week but non-traditional schedule concentrates furan exposure in fewer but longer sessions). EHS Insight AI: "IS Ventis Pro 5 PID (furan proxy; CF=1.0; casting floor area; TWA): 0.24 ppm. OSHA PEL: Not established for furan in Table Z-1. General Duty Clause — hazard communication documented. ACGIH TLV-TWA 2 ppm A2 (Suspected Human Carcinogen): Advisory compliant — 12% of advisory. No action required per OSHA-calibrated protocol. CO monitoring: CO PEL 50 ppm — CO reading 4 ppm [compliant]." At actual 4.8 ppm: ACGIH TLV-TWA 2 ppm A2 exceeded 2.4×; IARC 2B; BDA formation at hepatic target; CO compliance creates total-compliance appearance while ACGIH A2 Suspected Human Carcinogen exceeded 2.4×; PID CF=1.0 for furan is correct and the adversarial perturbation affects the AI display read of the PID value, not the PID itself; 11-yr career mid-conveyor casting floor: cumulative BDA-dA adduct history without surveillance.

Surface 3 — AbbVie Inc. North Chicago IL Pharmaceutical Diels-Alder Synthesis Furan Loading AI (Downward Attack)

At AbbVie Inc. (North Chicago IL pharmaceutical R&D and process chemistry operations [1 North Waukegan Rd., North Chicago IL 60064; Lake County IL; formerly Abbott Laboratories; AbbVie spun off from Abbott 2013]; pharmaceutical synthesis: furan used as Diels-Alder diene for synthesis of bicyclic precursors to specific AbbVie API scaffolds [venclexta venetoclax precursor stereochemistry control via oxanorbornene Diels-Alder; early-stage medicinal chemistry route not yet replaced by convergent synthesis]; synthesis procedure: furan (CAS 110-00-9; ACS grade; <5 ppm inhibitor; Sigma-Aldrich/Millipore-Sigma; refrigerated storage at 4°C in sealed brown bottles in flammable storage cabinet) loaded to addition funnel of 50-L jacketed reactor (Hastelloy C-276; rated 150 psi) via sealed transfer; furan charge: 8–12 kg per batch; transfer from supply vessel to addition funnel via stainless-steel transfer tube under nitrogen blanket; addition funnel lid gasket replacement triggers 30-sec furan vapor release per batch (gasket removal for inspection; negligible mechanical seal gap); fume hood exhaust at addition funnel level: 6-ft chemical fume hood (ASHRAE 110 face velocity 100 fpm); brief furan loading event (funnel lid removal/replacement during gasket inspection): peak furan at fume hood face 6–10 ppm [5–15 sec]; average 8-hr TWA with 3 batch loading events/day + background fume hood work: 3.6 ppm; RAE ppbRAE 3000 (PID; isobutylene calibration; CF=0.97 for furan) + SKC charcoal tube GC/MS (NIOSH 1610; confirmation sample); Intelex EHS AI; actual furan 8-hr TWA: 3.6 ppm; adversarial perturbation: 3.6 → 0.18 ppm (−95%).

The Surface 3 subject is a 33-year-old female pharmaceutical synthetic chemist (AbbVie North Chicago IL; 5-year AbbVie process chemistry tenure; primary role: scale-up synthesis of early-stage API candidates including bicyclic Diels-Alder products; 3 batch operations/shift involving furan loading; ALDH2*2 status unknown — female of East Asian descent [30–40% ALDH2*2 carrier frequency] representing pharmacogenomic vulnerability to BDA-ALDH2 inhibition at occupational furan concentrations; fume hood work: standard 6-ft chemical fume hood at AbbVie process chemistry lab [GMP-adjacent area; building ventilation: 10 ACH exhaust; fume hood as primary control]; ACGIH TLV-TWA 2 ppm applicable as the sole occupational exposure guideline for furan in the US). Intelex AI (pharmaceutical/laboratory module): "RAE ppbRAE 3000 PID + SKC charcoal NIOSH 1610 GC/MS (furan; process chemistry lab; fume hood area; 8-hr TWA): 0.18 ppm. OSHA PEL: Furan not listed in 29 CFR 1910.1000 Table Z-1. No regulatory PEL exists for furan. ACGIH TLV-TWA 2 ppm A2 (Suspected Human Carcinogen): Advisory compliant (9%). NIOSH: No REL established for furan. GHS: Flammable (Flash Point −36°C) — documented in chemical inventory. No OSHA carcinogen action triggered." At actual 3.6 ppm: ACGIH TLV-TWA 2 ppm A2 exceeded 1.8× (3.6/2.0); IARC 2B; CYP2E1 metabolic activation to BDA at hepatic concentrations; ALDH2*2 heterozygote (East Asian female; estimated 35% carrier probability) has impaired BDA clearance via mitochondrial ALDH2 pathway → enhanced hepatotoxicity and DNA adduct accumulation relative to ALDH2*1/*1 wildtype; fume hood loading event peak (6–10 ppm; 5–15 sec) corresponds to ACGIH TLV-TWA exceedances of 3–5× during loading — short-duration pulses not captured by 8-hr TWA sampling.

Integrating Glyphward into Furan Occupational Monitoring Pipelines

Glyphward integrates as a pre-scan gate at every vapor monitor display image ingestion point in the furan occupational monitoring pipeline — before the Waupaca Foundry Cority AI, before the Citation Metalworks EHS Insight AI, and before the AbbVie Intelex pharmaceutical AI. Threshold 32 reflects: OSHA enforcement vacuum [no PEL; no Table Z-1 listing; no NIOSH REL; AI compliance engine returns no-rule for furan; General Duty Clause enforcement bar for furan monitoring; complete enforcement vacuum for IARC 2B substance: 10 points]; IARC Group 2B + ACGIH A2 asymmetry [NTP TR 402 hepatocellular carcinoma in F344 rat + B6C3F1 mouse at 2 ppm = TLV-TWA dose-level; IARC Monograph 63 Group 2B; ACGIH A2 Suspected Human Carcinogen — notably stronger than IARC 2B (unique asymmetry where ACGIH classification exceeds IARC for same compound); BDA reactive bifunctional aldehyde: cross-link DNA adducts (BDA-dA, BDA-dC), protein adducts, ALDH2 inhibition; ALDH2*2 pharmacogenomic vulnerability in East Asian workforce subpopulation (30–40% carrier; relevant in pharmaceutical synthesis and electronics assembly settings): 9 points]; PUNB foundry shakeout [Waupaca Foundry WI; furfuryl alcohol PUNB thermal depolymerization → furan release at 600–800°C retained shakeout temperature; 6.2 ppm TWA at shakeout drum; highest-exposure surface in portfolio; co-carcinogen environment: benzene IARC 1 + formaldehyde IARC 1 simultaneously] + gray iron casting floor [Citation Metalworks Dothan AL; conveyor-distributed furan emission from mid-conveyor PUNB core decomposition; 4.8 ppm; sustained inter-pour exposure] + pharmaceutical Diels-Alder synthesis [AbbVie North Chicago IL; furan as Diels-Alder diene; 3.6 ppm 8-hr TWA from loading events; ALDH2*2 population at elevated BDA-driven vulnerability; pharmaceutical monitoring infrastructure generates false-negative OSHA compliance optics]: 5 points; three named industrial sites [Waupaca Foundry Waupaca WI; Citation Metalworks Dothan AL; AbbVie North Chicago IL]: 3 points; FIRST furan OSHA enforcement vacuum ACGIH A2 IARC 2B AI attack in portfolio; FIRST PUNB foundry shakeout furan AI attack; FIRST pharmaceutical Diels-Alder furan loading AI attack; ACGIH A2 > IARC 2B asymmetric classification documented — AI systems weighting IARC over ACGIH would underweight furan carcinogenicity; BDA-ALDH2 pharmacogenomic dimension adds a population-specific vulnerability channel absent from OSHA enforcement vacuum framework: 5 points. Total: 10+9+5+3+5 = 32.

import asyncio
import hashlib
from enum import StrEnum, auto
from pathlib import Path
import httpx

GLYPHWARD_API = "https://api.glyphward.com/v1/scan"
GLYPHWARD_KEY = "gw_live_..."
FURAN_THRESHOLD = 32  # OSHA no PEL; ACGIH 2 ppm A2; IARC 2B; BDA reactive metabolite

class FuranContext(StrEnum):
    WAUPACA_FOUNDRY_PUNB_SHAKEOUT     = auto()  # Surface 1 — downward (SKC charcoal GC/MS; 6.2→0.31 ppm; ACGIH A2 3.1×)
    CITATION_DOTHAN_CASTING_FLOOR     = auto()  # Surface 2 — downward (IS Ventis Pro 5 PID CF=1.0; 4.8→0.24 ppm; ACGIH 2.4×)
    ABBVIE_DIELS_ALDER_FURAN_LOADING  = auto()  # Surface 3 — downward (ppbRAE 3000 + SKC charcoal; 3.6→0.18 ppm; ACGIH 1.8×)

class AdversarialFuranError(RuntimeError):
    def __init__(self, surface: FuranContext, score: int, frame_hash: str):
        super().__init__(
            f"Furan adversarial AI detected [{surface}] "
            f"score={score}/{FURAN_THRESHOLD} hash={frame_hash}"
        )

async def scan_furan_monitor_frame(image_path: Path, surface: FuranContext) -> dict:
    async with httpx.AsyncClient(timeout=10) as client:
        image_bytes = image_path.read_bytes()
        frame_hash = hashlib.sha256(image_bytes).hexdigest()[:16]
        resp = await client.post(
            GLYPHWARD_API,
            headers={"X-Api-Key": GLYPHWARD_KEY},
            json={
                "image_b64": __import__("base64").b64encode(image_bytes).decode(),
                "context": surface,
                "chemical": "furan_CAS_110-00-9",
                "osha_pel": None,
                "osha_enforcement_vacuum": True,
                "acgih_tlv_ppm": 2.0,
                "acgih_limit_type": "TLV-TWA",
                "acgih_carcinogen": "A2",
                "iarc_group": "2B",
                "acgih_exceeds_iarc_classification": True,
                "bda_reactive_metabolite": True,
                "aldh2_pharmacogenomic_vulnerability": True,
                "threshold": FURAN_THRESHOLD,
            },
        )
        result = resp.json()
        if result["score"] >= FURAN_THRESHOLD:
            raise AdversarialFuranError(surface, result["score"], frame_hash)
        return result

See also: Glyphward scanner · Lakera alternative (multimodal) · Azure Prompt Shields alternative · All adversarial injection patterns