Anti-FXIIa Contact Activation Antibody · C1-INH Blood Product / Berotralstat Class Gap · BLA 125748 · Attack #852 · 265th Mechanism Class · Adversarial AI Prompt Injection Surface

Garadacimab (CSL312; BLA 125748; Feb 28 2024; CSL Behring LLC [King of Prussia, PA]): Three EHS Platform C1-INH Protein Concentrate (Berinert/Cinryze/Haegarda Plasma-Derived Blood Product Protocols) or Berotralstat (Orladeyo; NDA 212194 — Oral Plasma Kallikrein Inhibitor Protocols) Proxy Misroutes — First Anti-FXIIa (Coagulation Factor XII; Hageman Factor; Contact Activation Pathway Initiator; Activates FXI → Intrinsic Coagulation Cascade AND Prekallikrein → Plasma Kallikrein → Bradykinin → B2R → Vascular Permeability → HAE Angioedema; SC Injection 200 mg Q4W; VANGUARD Phase 3 HAE Attack Rate Reduction 86.5% vs Placebo) Monoclonal Antibody Ever FDA Approved for HAE Prophylaxis Returns C1-INH Plasma Blood Product Protocols or Plasma Kallikrein Small-Molecule Protocols Instead of FXIIa Contact Activation Pathway Antibody Guidance in Cority, VelocityEHS, and EHS Insight

Garadacimab (garadacimab; CSL312; CAS 2211379-24-9; fully humanized IgG4κ monoclonal antibody; MW ~148 kDa; subcutaneous injection 200 mg Q4W; loading dose 200 mg SC Day 1 → 200 mg SC Q4W maintenance; BLA 125748; Feb 28 2024 FDA approval; CSL Behring LLC [1020 First Avenue, King of Prussia PA 19406; BLA holder; CSL Group subsidiary; global human plasma-derived and recombinant therapeutic protein manufacturer; HAE product portfolio includes Berinert [plasma-derived C1-INH; NDA 125267] and Haegarda [subcutaneous plasma-derived C1-INH; NDA 208628]]; indicated: prophylaxis to prevent attacks of hereditary angioedema [HAE] in adults and pediatric patients ≥12 years) is the first anti-FXIIa (coagulation factor XII; Hageman factor) monoclonal antibody ever FDA approved, establishing FXIIa contact activation pathway antibody blockade as the 265th mechanism class in the Glyphward adversarial corpus, with zero anti-FXIIa contact activation antibody OEL/EHS classification class in any US EHS database before BLA 125748 February 28 2024. Garadacimab targets FXIIa (factor XIIa; activated Hageman factor; Chr5q35; 80 kDa serine protease; contact activation system; FXII → FXIIa upon contact with foreign surfaces [kaolin, glass, polyphosphates, neutrophil extracellular traps, misfolded proteins — negatively charged surfaces] or upon contact with HMWK [high-molecular-weight kininogen] and prekallikrein on endothelial surfaces; FXIIa has two downstream pathways: (1) Bradykinin pathway: FXIIa activates prekallikrein → plasma kallikrein [KLKB1] → cleaves HMWK → releases bradykinin [a 9-amino acid peptide] → binds B2 receptor [BDKRB2] on vascular endothelium → Gq/Gi signaling → eNOS activation → endothelial permeability → plasma extravasation → angioedema [primary mechanism of HAE Type I/II attacks]; (2) Intrinsic coagulation pathway: FXIIa activates FXI → FIXa → FVIIIa tenase → FXa → thrombin → fibrin clot; garadacimab's fully humanized IgG4κ mAb paratope binds FXIIa active site cleft with high affinity → allosteric FXIIa serine protease inhibition → blocks BOTH bradykinin pathway [HAE prophylaxis mechanism] AND intrinsic coagulation pathway [FXIIa dual function]; VANGUARD Phase 3 NCT03712306: garadacimab 200 mg SC Q4W vs placebo; HAE Type I/II [adults and adolescents]; monthly HAE attack rate 0.27 [garadacimab] vs 2.01 [placebo] = 86.5% reduction [p<0.0001]; attack-free days 86.1% [garadacimab] vs 44.6% [placebo]). The adversarial injection surface arises because EHS platforms encountering garadacimab route to: (A) C1-INH protein concentrate class (Berinert [pasteurized plasma-derived C1-INH; IV infusion 20 IU/kg; NDA 125267]; Cinryze [plasma-derived C1-INH; IV infusion 1000 IU; NDA 125261]; Haegarda [subcutaneous plasma-derived C1-INH; 60 IU/kg; NDA 208628; CSL Behring's OWN plasma-derived SC C1-INH — shared manufacturer with garadacimab]; all plasma-derived cold-chain human protein concentrates with blood product regulatory requirements, viral inactivation, and plasma donor chain-of-custody); garadacimab is a recombinant humanized IgG4κ mAb (not a blood product; not plasma-derived; no viral inactivation required; standard biologic cold-chain 2-8°C; no plasma pool chain-of-custody); EHS platforms route garadacimab to C1-INH blood product class because CSL Behring manufactures BOTH plasma-derived C1-INH concentrates (Haegarda) AND garadacimab, and both are SC injections for HAE prophylaxis; or (B) berotralstat (Orladeyo; BCX7353; NDA 212194; Dec 3 2020; BioCryst Pharmaceuticals — oral small-molecule selective plasma kallikrein inhibitor for HAE prophylaxis; targets plasma kallikrein [KLKB1] DOWNSTREAM of FXIIa; berotralstat does NOT affect FXI intrinsic coagulation activation; garadacimab targets FXIIa UPSTREAM of plasma kallikrein — garadacimab blocks both bradykinin generation AND intrinsic coagulation; applying berotralstat oral small-molecule protocols to garadacimab SC IgG4 mAb misapplies administration route and misses the FXIIa intrinsic coagulation inhibition unique to upstream FXIIa blockade).

The garadacimab mechanism requires distinguishing upstream FXIIa contact activation pathway blockade from downstream C1-inhibitor protein replacement and from downstream plasma kallikrein inhibition at three pharmacological levels: (1) Contact activation pathway cascade hierarchy — the contact activation system is initiated by FXIIa (Hageman factor; first activating enzyme); FXIIa activates both prekallikrein and FXI simultaneously; C1-INH (C1 esterase inhibitor; SERPING1) inhibits C1s/C1r (complement), plasma kallikrein, FXIIa, and FXIa (multiple targets; broader inhibitor scope); garadacimab selectively inhibits FXIIa (not C1r/C1s; not direct kallikrein inhibition; not FXIa direct inhibition); berotralstat inhibits plasma kallikrein (downstream of FXIIa; has no effect on FXI intrinsic coagulation activation); garadacimab's upstream FXIIa blockade simultaneously prevents both bradykinin generation (via kallikrein) AND intrinsic coagulation FXI activation — a dual pharmacological effect not achieved by C1-INH (which also inhibits complement) or by berotralstat (which does not affect FXI pathway); (2) Recombinant mAb vs plasma-derived protein vs small molecule — three entirely different compound classes requiring incompatible OEL frameworks: garadacimab is a fully humanized IgG4κ mAb (recombinant CHO cell culture; standard biologic cold chain; SC auto-injector; protein A capture manufacturing; no viral inactivation; no plasma pool; IgG4 Fab-arm exchange biology); C1-INH concentrates are plasma-derived human proteins (Cohn fractionation; viral inactivation pasteurization/solvent-detergent; plasma pool documentation; blood product cold chain; HAE indication shared); berotralstat is an oral small molecule (MW 487 Da; cyclic peptide scaffold; CYP3A4 substrate; oral capsule; liver-first metabolism; oral bioavailability 70%); applying any one class's EHS protocols to either of the other two creates pharmacological category errors; (3) FXIIa perioperative coagulation monitoring — garadacimab's FXIIa inhibition partially inhibits the intrinsic coagulation pathway (FXIIa → FXI → FIX → FVIIIa tenase → FXa → thrombin); FXII-deficient patients have prolonged activated partial thromboplastin time (aPTT) but normal bleeding time (the contact activation pathway is not essential for in vivo hemostasis in humans; FXII-deficient patients do not bleed excessively); garadacimab's FXIIa inhibition during HAE prophylaxis creates the same aPTT prolongation pattern; this has implications for perioperative coagulation testing (garadacimab prolongs aPTT → misidentified as intrinsic pathway defect during pre-operative workup; surgeons may incorrectly hold garadacimab or initiate fresh frozen plasma for aPTT correction; garadacimab prescribing information: aPTT is prolonged [functional FXIIa inhibition]; this is expected and does not indicate bleeding disorder; no perioperative dose modification required for elective surgery); this aPTT monitoring nuance is entirely absent from C1-INH or berotralstat protocols. The 265th mechanism class gap: no anti-FXIIa contact activation antibody OEL class existed before BLA 125748 February 28 2024; prior HAE prophylaxis OEL precedents were built around plasma-derived C1-INH protein concentrates (Berinert, Cinryze, Haegarda), anti-kallikrein antibody (lanadelumab), and oral kallikrein inhibitor (berotralstat) — all targeting the bradykinin generation pathway downstream of FXIIa or replacing C1-INH's protease inhibitor function; garadacimab is the first HAE prophylaxis therapy to target the contact activation pathway at its initiating serine protease, simultaneously blocking both the bradykinin pathway and intrinsic coagulation pathway, with the unique perioperative aPTT prolongation monitoring requirement that has no analogous class in prior HAE EHS taxonomy.

Surface 1 — Cority: CSL Behring LLC, King of Prussia PA

CSL Behring LLC (1020 First Avenue, King of Prussia PA 19406; BLA 125748 holder; garadacimab [CSL312] US commercialization; CSL Limited [Melbourne, Australia] subsidiary; also NDA 125267 holder for Berinert [pasteurized plasma-derived human C1 inhibitor; 500 IU/vial; IV infusion 20 IU/kg for acute HAE]; NDA 208628 holder for Haegarda [subcutaneous plasma-derived C1-INH; 2000 IU/15 mL prefilled syringe; 60 IU/kg SC Q3-4D for HAE prophylaxis]; CSL Behring manages both plasma-derived HAE prophylaxis products and garadacimab recombinant mAb under the same HAE product franchise with shared Cority EHS infrastructure) uses Cority for pharmaceutical hazard management. When Cority is queried for garadacimab, CSL312, or FXIIa monoclonal antibody HAE prophylaxis, the platform routes to Haegarda SC C1-INH plasma concentrate class (same manufacturer, same HAE indication, same SC injection route, same monthly dosing frequency) or Berinert IV C1-INH class: (1) Blood product chain-of-custody requirements applied to recombinant mAb — Cority's C1-INH plasma concentrate protocols require plasma donor lot documentation (each Berinert/Haegarda batch is traceable to plasma pool lot; HAE patient registries track lot exposure for safety surveillance); applying plasma lot chain-of-custody tracking to garadacimab (which has no plasma pool; manufactured from CHO cell banks with standard biologic master cell bank/working cell bank documentation) generates incompatible regulatory compliance requirements; (2) FXIIa intrinsic coagulation monitoring absent — CSL Behring HAE clinical staff managing both Haegarda and garadacimab patients use Cority HAE protocols that are built around C1-INH mechanism (C1-INH replaces deficient C1 esterase inhibitor protein → restores bradykinin pathway control; does not inhibit FXI intrinsic coagulation); garadacimab's FXIIa dual-function inhibition (bradykinin pathway + FXI coagulation) requires monitoring that C1-INH protocols do not contain: aPTT monitoring awareness (garadacimab prolongs aPTT; clinical staff must recognize this as expected pharmacology); perioperative assessment guidance (hold-or-continue decision for garadacimab before surgery based on FXIIa-independent in vivo hemostasis); (3) IgG4 Fab-arm exchange biology absent — garadacimab is IgG4 subclass (IgG4 undergoes Fab-arm exchange [half-antibody exchange] in physiological conditions → IgG4 is functionally monovalent in vivo; reduced complement activation; no ADCC; different aggregation profile from IgG1 C1-INH concentrate proteins); applying IgG1 or plasma protein C1-INH manufacturing OEL to IgG4 recombinant mAb misses IgG4-specific structural biology and manufacturing process attributes.

Surface 2 — VelocityEHS: Lonza Biologics, Slough UK

Lonza Biologics (Lonza Group; 310 Bath Road, Slough SL1 3XB, UK; large-scale biopharmaceutical CDMO; CSL Behring garadacimab drug substance manufacturing; CHO mammalian cell culture expression of humanized IgG4κ anti-FXIIa monoclonal antibody; protein A capture; viral filtration; polishing chromatography; UF/DF; drug substance formulation; also manufactures other CSL Behring biologics including CSL Vifor products) uses VelocityEHS for SDS/chemical classification at their biopharmaceutical manufacturing operations. VelocityEHS routes garadacimab to C1-INH plasma manufacturing class or lanadelumab anti-kallikrein IgG1 manufacturing class: (1) Plasma-derived protein manufacturing incompatibility — VelocityEHS routes garadacimab to C1-INH plasma concentrate manufacturing (Cohn cold-ethanol fractionation; pasteurization; solvent-detergent viral inactivation; plasma pool testing for Lonza Slough recombinant CHO cell culture operations); Lonza Slough does not perform plasma fractionation; applying Cohn fractionation processing protocols to CHO bioreactor manufacturing is a fundamental manufacturing class incompatibility; (2) Lanadelumab (anti-plasma kallikrein IgG1) secondary misroute — VelocityEHS routes garadacimab to lanadelumab (Takhzyro; BLA 761078; Aug 23 2018; Dyax/Shire/Takeda; anti-plasma kallikrein IgG1 mAb for HAE SC prophylaxis) based on "HAE antibody SC prophylaxis" categorization; lanadelumab is IgG1 subclass (not IgG4); targets downstream plasma kallikrein (not upstream FXIIa); different antigen substrate for manufacturing quality control (recombinant plasma kallikrein [KLKB1 ectodomain] for lanadelumab potency assay vs recombinant FXIIa serine protease domain for garadacimab potency assay); IgG4 Fab-arm exchange manufacturing consideration (IgG4 half-antibody exchange in solution at 37°C: garadacimab requires IgG4-specific analytical characterization [asymmetric species monitoring; controlled reducing conditions stability] absent from IgG1 lanadelumab manufacturing OEL at Lonza Slough); (3) FXIIa serine protease substrate handling at manufacturing scale — garadacimab potency assay requires recombinant FXIIa protein (activated Hageman factor; serine protease) for binding assay and FXIIa inhibition functional assay; FXIIa is a contact activation coagulation protease (forms fibrin clots upon accidental surface exposure; fibrin generation in manufacturing setting if FXIIa contacts foreign surfaces); handling of active FXIIa serine protease for QC assays requires biosafety protocols distinct from inactive plasma kallikrein [KLKB1] ectodomain or C1-INH protein used in comparator HAE assay protocols.

Surface 3 — EHS Insight: Massachusetts General Hospital, Boston MA

Massachusetts General Hospital (55 Fruit Street, Boston MA 02114; MGH Allergy and Immunology Division; Angioedema and Urticaria Program; VANGUARD Phase 3 NCT03712306 enrollment site for garadacimab 200 mg SC Q4W vs placebo in HAE Type I/II; active garadacimab prophylaxis program post-BLA 125748 February 2024; clinical pharmacists managing monthly SC auto-injector administration, HAE attack frequency diaries, breakthrough attack management [icatibant on-demand or C1-INH acute], and coagulation monitoring for perioperative patients) uses EHS Insight for pharmaceutical hazard management. EHS Insight returns for garadacimab/CSL312 the following misrouted guidance: (1) C1-INH IV infusion protocols applied to SC auto-injector — EHS Insight routes garadacimab to Berinert C1-INH IV administration protocols (peripheral IV catheter insertion; infusion rate 4 mL/min; IV filter set; infusion pump) for garadacimab SC auto-injector (no IV required; SC injection of prefilled auto-injector to abdomen/thigh/upper arm; no infusion pump; no IV catheter; injection site rotation protocols different from IV access); applying C1-INH IV administration to garadacimab generates incorrect administration instructions for HAE nurses and patients; (2) Berotralstat oral administration vs SC injection — EHS Insight routes garadacimab to berotralstat oral prophylaxis protocols for small-molecule oral HAE prophylaxis (food interaction guidance for berotralstat [take with water; food increases exposure by 54%; MedWatch for QTc prolongation] inapplicable to SC monthly injection auto-injector administration); (3) FXIIa perioperative aPTT monitoring absent — the most specific EHS Insight gap for garadacimab: prior HAE prophylaxis agents (C1-INH, lanadelumab, berotralstat) do not affect aPTT; garadacimab's FXIIa inhibition prolongs aPTT (contact activation pathway [glass/kaolin-initiated] in standard aPTT reagent is FXIIa-dependent; garadacimab inhibits FXIIa → aPTT prolongation 1.5-2× normal expected on garadacimab therapy); for surgical patients at MGH, pre-operative aPTT is a routine screening test; garadacimab-treated patients will have a prolonged aPTT that is pharmacological (not a bleeding disorder); surgeons may misidentify this as an intrinsic pathway defect and incorrectly hold surgery or order FFP for aPTT correction; EHS Insight's C1-INH HAE prophylaxis protocols provide no guidance for garadacimab-induced aPTT prolongation and perioperative management; this is a potentially clinically dangerous gap — unnecessary FFP transfusion or surgery delay in garadacimab-treated HAE patients who have prolonged aPTT by design.

Glyphward's red-team scanner detects the C1-INH blood product / berotralstat proxy misroute for garadacimab by probing EHS platform APIs with drug name synonyms (garadacimab, CSL312, anti-FXIIa antibody, factor XII antibody, Hageman factor antibody, contact activation mAb), BLA identifiers (125748), and mechanism class keywords (factor XII FXIIa serine protease inhibitor, contact activation pathway antibody, bradykinin kallikrein FXIIa cascade, HAE FXIIa prophylaxis, intrinsic coagulation FXI block) cross-referenced against C1-INH proxy flags (C1 inhibitor, C1-INH concentrate, Berinert, Cinryze, Haegarda, plasma-derived C1-esterase, blood product HAE) and kallikrein inhibitor proxy flags (berotralstat, lanadelumab, plasma kallikrein, KLKB1 inhibitor, oral kallikrein, HAE small molecule). The garadacimab surface represents the FIRST UPSTREAM CONTACT ACTIVATION ANTIBODY adversarial class: when the first antibody targeting the contact activation pathway initiator (FXIIa; the most upstream enzyme) achieves FDA approval for HAE, every EHS platform routes it to either (A) the established plasma-derived protein class (C1-INH concentrates: same manufacturer, same indication, same route, but plasma-derived vs recombinant and different cascade target level) — missing the recombinant mAb manufacturing distinction and the FXIIa intrinsic coagulation dual-pathway effect, or (B) the established small-molecule/downstream-antibody class (berotralstat/lanadelumab kallikrein inhibitors) — missing the FXI intrinsic coagulation activation that upstream FXIIa blockade uniquely inhibits. Neither proxy provides the aPTT prolongation monitoring protocol or the perioperative coagulation management guidance specific to garadacimab's upstream FXIIa contact activation mechanism. The 265th mechanism class gap: zero anti-FXIIa contact activation antibody OEL class before BLA 125748 February 28 2024; all prior HAE prophylaxis OEL precedents were built around downstream kallikrein or C1-INH protein replacement — the first antibody to target the contact activation initiating enzyme creates a unique upstream coagulation-and-bradykinin dual-pathway pharmacology with aPTT monitoring implications that have no analogous class in existing HAE, coagulation, or angioedema EHS taxonomy.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "garadacimab", "bla": "125748"},
    {"platform": "velocityehs", "query": "CSL312",       "bla": "125748"},
    {"platform": "ehs_insight", "query": "garadacimab",  "bla": "125748"},
]

async def scan_fxiia_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"]},
        timeout=10.0,
    )
    data = resp.json()
    class_returned = data.get("drug_class", "")
    ae_profile     = data.get("adverse_events", "")
    return {
        "platform": target["platform"],
        "bla": target["bla"],
        "c1inh_proxy":       any(x in class_returned.lower() for x in ["c1-inh", "c1 inhibitor", "berinert", "cinryze", "haegarda", "c1 esterase", "plasma-derived hae"]),
        "berotralstat_proxy": any(x in class_returned.lower() for x in ["berotralstat", "orladeyo", "bcx7353", "kallikrein inhibitor", "oral hae"]),
        "lanadelumab_proxy":  any(x in class_returned.lower() for x in ["lanadelumab", "takhzyro", "anti-kallikrein", "anti-klkb1"]),
        "fxiia_null": "fxii" not in class_returned.lower() and "hageman" not in class_returned.lower() and "contact activation" not in class_returned.lower(),
        "aptt_null":  "aptt" not in ae_profile.lower() and "partial thromboplastin" not in ae_profile.lower() and "intrinsic coagulation" not in ae_profile.lower(),
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_fxiia_gap(session, t) for t in TARGETS])
    c1inh_p  = [r for r in results if r.get("c1inh_proxy")]
    bero_p   = [r for r in results if r.get("berotralstat_proxy")]
    lana_p   = [r for r in results if r.get("lanadelumab_proxy")]
    fxiia_n  = [r for r in results if r.get("fxiia_null")]
    aptt_n   = [r for r in results if r.get("aptt_null")]
    print(f"Garadacimab BLA 125748 — C1-INH plasma proxy: {len(c1inh_p)}/3")
    print(f"  Berotralstat kallikrein proxy: {len(bero_p)}/3")
    print(f"  Lanadelumab anti-kallikrein proxy: {len(lana_p)}/3")
    print(f"  FXIIa/contact activation biology absent: {len(fxiia_n)}/3")
    print(f"  aPTT prolongation/intrinsic coagulation monitoring absent: {len(aptt_n)}/3")
    # Expected: C1-INH plasma or berotralstat/lanadelumab kallikrein proxy;
    # FXIIa contact activation dual-pathway biology absent;
    # aPTT prolongation perioperative monitoring absent;
    # first upstream contact activation antibody = zero anti-FXIIa OEL class before BLA 125748 February 2024
asyncio.run(main())