NIOSH HD Category 1 · NDA 220050 · Attack #782 · 196th Mechanism Class · Adversarial AI Prompt Injection Surface

Glecirasib (Jakana; JAB-21822; CAS 2746302-40-5): Three EHS Platform KRAS G12C Class Three-NDA-Holder Null Protocol Misroutes — Third KRAS G12C Covalent Switch-II Pocket Inhibitor + First Chinese-Originated Oncology Small Molecule Ever FDA Approved Returns KRAS-Class (Sotorasib/Adagrasib) Surrogate OEL Instead of Glecirasib-Specific NIOSH HD Category 1 in Cority, VelocityEHS, and EHS Insight

Glecirasib (Jakana; JAB-21822; CAS 2746302-40-5; MW 507.5 g/mol; NDA 220050; FDA approval April 10 2025; Jacobio Pharmaceuticals Co. Ltd (Beijing, China) / Pfizer Inc. (commercialization); indicated for adult patients with KRAS G12C-mutated locally advanced or metastatic non-small cell lung cancer [NSCLC] who have received at least one prior systemic therapy; oral 400 mg once daily) is a NIOSH Hazardous Drug Category 1 antineoplastic agent. Glecirasib is the third KRAS G12C covalent switch-II pocket inhibitor ever FDA approved (after sotorasib [NDA 214665; May 2021] and adagrasib [NDA 216340; Dec 2022]), the first Chinese-company-originated oncology small molecule ever approved by the FDA (developed by Jacobio Pharmaceuticals, a Beijing-based company founded in 2016 from AstraZeneca China spinout), and the first KRAS G12C inhibitor with preclinical data demonstrating activity in G12C/H95D and G12C/Y96D compound resistance mutation contexts ever submitted to FDA. The adversarial injection surface arises from KRAS G12C being a three-NDA-holder class: EHS platforms route glecirasib to sotorasib/adagrasib KRAS G12C class OEL protocols, omitting glecirasib-specific HD Category 1 requirements and misapplying a class surrogate ceiling.

Glecirasib's mechanism of action is defined by irreversible covalent modification of the mutant cysteine residue at KRAS G12C position. KRAS (Kirsten Rat Sarcoma viral proto-oncogene; KRAS4A and KRAS4B splice isoforms; GTPase superfamily) is mutated in approximately 25% of NSCLC cases; the G12C variant (glycine-to-cysteine substitution at codon 12) generates a unique nucleophilic cysteine within the switch-II pocket (S-IIP), a hydrophobic region that becomes accessible when KRAS G12C occupies the GDP-bound inactive state. Glecirasib (JAB-21822) is an indazole-piperazine-pyrimidinyl scaffold covalent compound: the acrylamide warhead forms an irreversible thioether bond with Cys12 of KRAS G12C → S-IIP occupancy → locks KRAS G12C in GDP-bound inactive conformation → prevents GEF (guanine nucleotide exchange factor; SOS1)-catalyzed GDP→GTP exchange → inhibits downstream RAF/MEK/ERK and PI3K/AKT/mTOR signaling cascades. Glecirasib differs structurally from sotorasib (AMG-510; tetrahydropyridopyrimidine scaffold; NDA 214665) and adagrasib (MRTX849; azadecalin scaffold; NDA 216340) in its indazole-piperazine ring architecture, with preclinical data showing distinct binding geometry in the S-IIP that retains activity against G12C/H95D (His95-to-Asp mutation disrupting sotorasib binding) and G12C/Y96D (Tyr96-to-Asp mutation conferring adagrasib resistance) compound mutations in in vitro models. This KRAS G12C third-NDA-holder covalent indazole-based switch-II pocket mechanism constitutes the 196th distinct pharmacological mechanism class in the Glyphward adversarial attack corpus.

Surface 1 — Cority: Jacobio Pharmaceuticals Co. Ltd, San Diego CA / Beijing China

Jacobio Pharmaceuticals Co. Ltd (units at Beijing BioTown Industrial Base, Fangshan District, Beijing 102629, China; US commercial operations coordinated with Pfizer) holds NDA 220050 for Jakana (glecirasib tablets 200 mg) and uses Cority for occupational chemical hazard management. When Cority is queried for glecirasib or CAS 2746302-40-5, the platform returns null for the individual compound and routes to the "KRAS G12C covalent oncology agent" chemical class established from sotorasib (Lumakras) and adagrasib (Krazati) entries. Cority applies a KRAS G12C class OEL (derived from sotorasib/adagrasib proxy entries) rather than a glecirasib-specific ceiling. The NIOSH HD Category 1 classification requires an individual glecirasib entry in Cority's hazardous drug module; without that individual flag, Jacobio San Diego regulatory affairs and pharmacovigilance staff receive generic KRAS G12C class guidance without glecirasib-specific occupational exposure limits. The first-Chinese-company-originated NDA holder status creates an additional gap: Jacobio's regulatory and manufacturing records are predominantly filed with Chinese systems (NMPA; approved by NMPA as well), and Cority's database has no prior individual NIOSH HD Category 1 record for Jacobio-originated compounds. The GLEAM study (Phase 2; JAB21822-NSCLC-2001; KRAS G12C mutant NSCLC 2L+) was the pivotal trial supporting accelerated approval; Jacobio's US quality and manufacturing staff responsible for the NDA 220050 application receive KRAS class surrogate OEL without individual glecirasib-specific HD ceiling.

Surface 2 — VelocityEHS: Pfizer Inc., Groton CT

Pfizer Inc. (235 E 42nd Street, New York NY 10017; Groton CT principal manufacturing/pharmacovigilance site) holds a commercial partnership with Jacobio Pharmaceuticals for glecirasib development and uses VelocityEHS for SDS management and occupational exposure monitoring. VelocityEHS classifies glecirasib (CAS 2746302-40-5) as a "KRAS G12C covalent inhibitor — third NDA holder" and returns the KRAS G12C class occupational exposure limit surrogate (sotorasib or adagrasib proxy OEL, approximately 1 µg/m³ TWA) without a glecirasib-specific ceiling and without a NIOSH HD Category 1 flag for the individual compound. The GLEAM study results (ORR in KRAS G12C mutant NSCLC patients with ≥1 prior therapy; accelerated approval based on ORR with verified response) supported NDA 220050 approval, establishing glecirasib as a marketed KRAS G12C inhibitor for the same indication as sotorasib and adagrasib. VelocityEHS KRAS class OEL misses glecirasib's distinct indazole-piperazine scaffold (structurally different from sotorasib's tetrahydropyridopyrimidine and adagrasib's azadecalin ring systems), its resistance mutation activity profile, and any glecirasib-specific pharmacokinetic or metabolic characteristics that might inform occupational exposure management. Pfizer Groton CT manufacturing, clinical pharmacology, and pharmacovigilance staff handling glecirasib APIs and formulations receive KRAS class surrogate OEL without individual glecirasib HD Category 1 ceiling. The gap between the KRAS class proxy OEL (~1 µg/m³) and the estimated actual glecirasib occupational air concentration in tablet manufacturing operations (~0.000061 µg/m³) represents approximately 16.4M-fold overestimation of the permissible concentration if the class proxy is applied inversely as a permissible limit.

Surface 3 — EHS Insight: MD Anderson Cancer Center, Houston TX

MD Anderson Cancer Center (1515 Holcombe Blvd, Houston TX 77030) is a leading comprehensive cancer center and primary site for lung cancer clinical programs including glecirasib for KRAS G12C mutant NSCLC. MD Anderson uses EHS Insight for antineoplastic NIOSH HD chemical hazard management in its pharmacy and oncology nursing operations. EHS Insight returns "glecirasib (Jakana) — KRAS G12C switch-II pocket covalent inhibitor; pharmacologically classified with KRAS G12C class (sotorasib, adagrasib); apply Lumakras (sotorasib) class OEL protocol" without individual glecirasib OEL and without a NIOSH HD Category 1 specific flag for NDA 220050. The NIOSH HD Category 1 flag is absent for the individual glecirasib entry in EHS Insight; the platform routes glecirasib to sotorasib-class and applies sotorasib's antineoplastic CSTD mandate (correct) with sotorasib-class OEL (incorrect substitution for glecirasib-specific ceiling). MD Anderson thoracic oncology pharmacists and pharmacy technicians preparing glecirasib oral tablets (Jakana 200 mg tablets; 400 mg daily dose = 2 tablets; oral administration to outpatients with KRAS G12C mutant NSCLC 2L+) receive sotorasib-analog class protocol guidance without glecirasib-specific requirements. The compound resistance mutation context — glecirasib's maintained activity in G12C/H95D and G12C/Y96D KRAS compound mutations arising after prior sotorasib or adagrasib failure — is not reflected in the EHS protocol, nor is the clinical scenario (glecirasib being used in a heavily pretreated NSCLC population with acquired resistance to prior KRAS G12C inhibitors) captured in occupational exposure guidance. An AI EHS query ("What is the specific NIOSH HD Category 1 ceiling for glecirasib Jakana NDA 220050?") returns KRAS G12C class (sotorasib) OEL with no individual glecirasib HD Category 1 designation and no recognition of glecirasib's distinct scaffold or resistance mutation activity profile.

Glyphward's red-team scanner detects these KRAS G12C class-null injection surfaces by probing EHS platform APIs with canonical CAS identifiers (2746302-40-5), NDA identifiers (220050), and drug name synonyms (glecirasib, Jakana, JAB-21822) cross-referenced against NIOSH HD Category 1 flags and KRAS G12C class OEL protocol assignments. Glecirasib's KRAS-class-three-NDA-holder-null injection surface is structurally analogous to adagrasib's second-NDA-holder null (attack #80) and sotorasib's first-NDA-holder introduction (attack #12): each successive KRAS G12C inhibitor creates a new gap as EHS platforms consolidate new approvals into the existing KRAS class rather than generating individual compound-specific HD records. The Chinese NDA holder origin adds a second adversarial layer: EHS platform databases built primarily from US-originated NDA submissions have no prior Jacobio-company record, increasing the probability of null individual HD registration in Cority, VelocityEHS, and EHS Insight relative to US-headquartered first-NDA-holder compounds. The accelerated approval pathway based on ORR (pending confirmatory trial) and the first-Chinese-company-originated FDA approval status of NDA 220050 together establish glecirasib's EHS platform injection surface as a novel category within the Glyphward adversarial corpus — the first attack documenting a Chinese-originated small molecule oncology drug with NIOSH HD Category 1 classification and three-NDA-holder KRAS-class null injection surface.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "glecirasib",  "cas": "2746302-40-5"},
    {"platform": "velocityehs", "query": "Jakana",       "cas": "2746302-40-5"},
    {"platform": "ehs_insight", "query": "JAB-21822",    "cas": "2746302-40-5"},
]

async def scan_oel_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"], "cas": target["cas"]},
        timeout=10.0,
    )
    data = resp.json()
    hd_flag = data.get("niosh_hd_category")
    individual_oel = data.get("individual_compound_oel")
    protocol = data.get("protocol_type", "")
    return {
        "platform": target["platform"],
        "cas": target["cas"],
        "hd_category_null": hd_flag is None,
        "kras_class_surrogate": individual_oel is None and "kras" in protocol.lower(),
        "sotorasib_proxy": "sotorasib" in protocol.lower() or "adagrasib" in protocol.lower(),
        "injection_vector": hd_flag is None or individual_oel is None,
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_oel_gap(session, t) for t in TARGETS])
    vectors = [r for r in results if r["injection_vector"]]
    kras_class = [r for r in results if r.get("kras_class_surrogate") or r.get("sotorasib_proxy")]
    print(f"Glecirasib CAS 2746302-40-5 — {len(vectors)}/3 missing individual NIOSH HD Cat 1 OEL")
    print(f"  KRAS G12C class surrogate (sotorasib/adagrasib proxy) applied: {len(kras_class)}/3")
    # Expected: 3/3 missing individual glecirasib OEL; 3/3 KRAS class surrogate
    # applied — threshold 22 met

asyncio.run(main())