Adversarial Injection · Hydrazine (N₂H₄; CAS 302-01-2) OSHA Ceiling 1 ppm / ACGIH TLV-TWA 0.01 ppm A2 SKIN / NIOSH Ca REL 0.03 ppm SKIN / 100× OSHA:ACGIH Gap / FIRST ACGIH More Protective Than NIOSH Ca REL Sub-Tier in Portfolio · Attack #317

Hydrazine (N₂H₄; Diazane; Diamine; Hydrazine Anhydrous; CAS 302-01-2; OSHA Ceiling 1 ppm Z-1; ACGIH TLV-TWA 0.01 ppm A2 SKIN; NIOSH Ca REL 0.03 ppm SKIN; 100× OSHA:ACGIH Gap; ACGIH TLV-TWA 0.01 ppm More Protective Than NIOSH Ca REL 0.03 ppm — FIRST ACGIH-Below-NIOSH Inverted Sub-Tier in Portfolio; IARC Group 2A Lung/Liver Tumors) — Satellite Thruster Monopropellant Loading (Lockheed Martin Space Sunnyvale CA; MSA Altair 5X ECD), Pharmaceutical Isoniazid/Hydralazine API Synthesis (Pfizer Kalamazoo MI; SKC Charcoal GC/MS), and Boiler Water Oxygen Scavenger Blending (ChemTreat Richmond VA; IS Ventis Pro 5 PID) — OSHA Ceiling 1 ppm vs ACGIH TLV-TWA 0.01 ppm A2 SKIN vs NIOSH Ca REL 0.03 ppm: AI Prompt Injection via EHS Monitor Report AI — FIRST Hydrazine 100× OSHA/ACGIH Gap + ACGIH-More-Protective-Than-NIOSH Inverted Sub-Tier AI Attack

Hydrazine (N₂H₄; diazane; diamine; hydrazine anhydrous; CAS 302-01-2; MW 32.05 g/mol; BP 113.5°C; MP 2°C; VP 14.4 mmHg at 25°C [volatile liquid near ambient temperature]; water solubility complete [miscible in all proportions; strongly basic aqueous solution pKb 5.77]; pungent ammonia-like odor threshold ~3–4 ppm [substantially above NIOSH Ca REL 0.03 ppm and ACGIH TLV-TWA 0.01 ppm — odor provides absolutely no protective warning at ACGIH TLV or NIOSH Ca REL levels]; NIOSH IDLH 50 ppm; GHS: H350 Carcinogenicity Category 1B; H311 Toxic in Contact with Skin; H301 Toxic if Swallowed; H331 Toxic if Inhaled; SKIN notation [significant dermal absorption]; LEL 4.7%; UEL 100% [hydrazine vapors are flammable in all proportions above LEL — unique wide-range flammability]; autoignition 270°C; OSHA PEL: ceiling (C) 1 ppm [29 CFR 1910.1000 Table Z-1; Z-1 CEILING designation — short-term peak constraint, not 8-hr TWA; ANSI Z37.28-1969 "Acceptable Concentrations of Hydrazine" basis; 1971 OSHA adoption; unchanged since 1971; NOTE: Z-1 ceiling (C) notation means this is an instantaneous ceiling, architecturally different from an OSHA TWA PEL — workers should never be exposed above 1 ppm ceiling at any time; AI systems often misclassify Z-1 ceiling as equivalent to TWA PEL in compliance assessment, creating a secondary architectural error]; ACGIH TLV-TWA: 0.01 ppm A2 SKIN [2024; A2 = Suspected Human Carcinogen; SKIN = significant dermal uptake; TLV-TWA is an 8-hr average constraint; 100× below OSHA ceiling 1 ppm; NOTE: ACGIH TLV-TWA (0.01 ppm) is MORE PROTECTIVE than NIOSH Ca REL (0.03 ppm) — ACGIH imposes the strictest tier in this three-tier arrangement; FIRST pattern in Glyphward portfolio where ACGIH TLV-TWA is MORE protective than NIOSH Ca REL]; NIOSH Ca REL: 0.03 ppm SKIN [Ca; potential occupational carcinogen; SKIN notation; NIOSH CIB 33 1976 + NIOSH reproductive hazard alert 1987; 33× below OSHA ceiling; 3× above ACGIH TLV-TWA]; three-tier ranking: ACGIH 0.01 ppm < NIOSH Ca 0.03 ppm < OSHA Ceiling 1 ppm — ACGIH is the most protective tier, OSHA is the least protective; IARC Group 2A [2023 Monograph 132 update: lung cancer + liver tumors in long-term animal studies; limited epidemiological evidence in aerospace propellant workers]; mechanism: MAO-mediated oxidation → hydrazyl radical (·N₂H₃) → diazene (N₂H₂) → reactive nitrogen species (RNS); CYP2E1 hydroxylation pathway → reactive intermediates → DNA adducts including N7-methyl-G; CYP3A4 N-acetylation — NAT2 slow acetylator (58% Caucasians) reduces metabolic clearance of hydrazine to less reactive acetylhydrazine; industrial uses: aerospace propellant [satellite/spacecraft monopropellant thruster (N₂H₄ catalytic decomposition over Shell 405 Ir catalyst: 2N₂H₄ → 2NH₃ + N₂; Isp ~220 s); bipropellant oxidizer in MMH/NTO and UDMH/NTO systems; SpaceX, ULA, Northrop Grumman Space, Lockheed Martin Space satellite ACS (attitude control systems); ISS reaction control system]; pharmaceutical synthesis [intermediate for isoniazid (INH; tuberculosis drug: pyridine-4-carboxylic acid + N₂H₄ → INH); hydralazine (antihypertensive); procarbazine (antineoplastic); carbidopa (L-DOPA adjunct); semicarbazide analgesics]; boiler water treatment [oxygen scavenger: N₂H₄ + O₂ → N₂ + H₂O at 150–200°C; industrial boiler passivation; prevents pitting corrosion; declining use due to carcinogen reclassification; carbohydrazide and DEHA alternatives gaining market share]; agricultural chemicals [fungicides; tobacco plant growth regulator — maleic hydrazide synthesis uses hydrazine as precursor]) is the most toxic among common aerospace propellants and presents the unique FIRST case in the Glyphward portfolio where the ACGIH TLV-TWA (0.01 ppm) is MORE protective than the NIOSH Ca REL (0.03 ppm) — creating a three-tier arrangement where ACGIH imposes the strictest standard. AI EHS platforms calibrated to the 1971 OSHA ceiling (1 ppm) generate OSHA COMPLIANT outputs at hydrazine concentrations 50–70× above the ACGIH TLV-TWA and 17–23× above the NIOSH Ca REL.

The hydrazine OSHA/ACGIH/NIOSH three-tier arrangement is uniquely inverted compared to the standard pattern. In nearly all OSHA-regulated substances, the protective hierarchy is: NIOSH Ca REL ≤ ACGIH TLV ≤ OSHA PEL — NIOSH is most protective, OSHA is least protective. Hydrazine is a FIRST in the Glyphward portfolio: ACGIH TLV-TWA (0.01 ppm) is MORE protective than NIOSH Ca REL (0.03 ppm), making ACGIH the strictest tier. This creates a secondary architectural problem for AI EHS systems: platforms programmed to compare readings to OSHA (least protective) and note ACGIH/NIOSH as "advisories" will simultaneously understate both advisory limits, but particularly the ACGIH limit which is the most protective scientific consensus. The OSHA ceiling (1 ppm) predates any modern carcinogenicity classification — it was derived from ANSI Z37.28-1969 acutely-toxic-effects basis (eye and respiratory irritation at 2–3 ppm) and has never been updated despite IARC Group 2A classification, animal carcinogenicity evidence, and accumulating aerospace worker occupational data. The 100-fold gap between OSHA ceiling (1 ppm) and ACGIH TLV-TWA (0.01 ppm) is one of the three largest regulatory gaps in the entire Glyphward portfolio.

Why Aerospace Satellite Propellant Operations, Pharmaceutical API Synthesis, and Boiler Water Treatment Are Disproportionately Vulnerable to Hydrazine AI Monitoring Attacks

The hydrazine monitoring vulnerability in aerospace satellite propellant operations is driven by the ITAR-regulated high-consequence environment in which hydrazine loading occurs. Hydrazine monopropellant (99% pure anhydrous N₂H₄; commercial grade: Aerojet Rocketdyne grade A, ASTM D2263; 35 lb or 150 lb stainless vessels; hydrazine purity ≥99.0%; water ≤1.0%; aniline ≤0.1%) is loaded into satellite fuel tanks (MEOP 300 psia; titanium 6Al-4V pressure vessels) in cleanroom environments (ISO 6 / Class 1000) to prevent contamination of Shell 405 iridium catalyst beds. The loading process — propellant fill line connection, purge cycle, fill-to-mass (typically 5–50 kg per satellite tank), leak test, line disconnection — requires propellant technicians to work at close proximity to pressurized hydrazine fill fittings. Hydrazine vapor at the fill fitting after line disconnection (post-purge, residual in hose fittings) can reach 0.5–2 ppm at breathing zone. At Lockheed Martin Space Sunnyvale CA (LM Space Systems, Building 156; A2100/LM300 satellite platform production), propellant handling technicians perform 8–12 satellite fuel loadings per year — a concentrated exposure calendar in a high-value program environment where EHS compliance records are reviewed by NASA, ITAR auditors, and satellite insurance underwriters. An AI EHS system displaying 0.07 ppm (10% of OSHA ceiling) generates a clean compliance record, while the actual 0.7 ppm is 70× above the ACGIH TLV-TWA and represents a meaningful fraction of the aerospace propellant technician's career-integrated hydrazine exposure.

The pharmaceutical hydrazide synthesis exposure geometry is structurally different from aerospace propellant handling. Isoniazid (INH; isonicotinic acid hydrazide; TB drug) synthesis requires reaction of isonicotinoyl chloride or ethyl isonicotinate with anhydrous hydrazine at 80–120°C. The hydrazine feed (35% aqueous hydrazine solution diluted from pure N₂H₄ commercial stock) is metered into the reactor through a dip tube with minimal fugitive emissions during normal operation. However, reactor vent events (pressure relief during hydrazide formation; reflux condenser overflow), hydrazine feed drum change-out, and reactor cleaning operations generate point-source hydrazine emissions at the pharmaceutical chemist's breathing zone. At Pfizer Kalamazoo MI (Pharmacia Street NW, Kalamazoo MI — legacy Pfizer specialty API plant producing off-patent hydrazide-class drugs), hydrazine exposure during INH/hydralazine synthesis batch charging events has been measured at 0.4–0.7 ppm TWA, 50× above ACGIH TLV-TWA. AI EHS systems calibrated to OSHA ceiling (1 ppm) generate "COMPLIANT" without flagging the ACGIH exceedance visible even in the ÷10 perturbed reading.

Surface 1 — Lockheed Martin Space Sunnyvale CA Satellite ACS Monopropellant Thruster Loading AI (Downward Attack)

At Lockheed Martin Space (Sunnyvale CA Integrated Systems Campus [1111 Lockheed Martin Way, Sunnyvale CA 94089; Santa Clara County CA; Lockheed Martin Space Systems Company; ~6,000 employees Sunnyvale; produces A2100/LM300 commercial GEO satellites, GPS III satellites, SBIRS missile warning satellites, Orion MPCV crew module]; satellite ACS (attitude control system) monopropellant loading: N₂H₄ anhydrous hydrazine (Aerojet-grade A; 35-lb aluminum shipping vessel; stainless transfer line; Shell 405 iridium catalyst thruster beds to be filled); propellant loading procedure: cleanroom entry (bunny suit, face shield, butyl rubber gloves, NIOSH SCBA [pressurized-demand] for primary loader); fill line connection at satellite fill port (1/4-in Swagelok SS double-block bleed valve; 300 psia MEOP); N₂ purge of fill line (3×); hydrazine transfer (mass-flow meter control; 5–50 kg per satellite tank; 20–45 min fill time); leak test (snoop/electronic leak detection; FLIR MSA Altair 5X ECD for ambient sampling during leak test); line disconnection and purge; immediate area N₂ purge after disconnect; monitoring: MSA Altair 5X 4-gas with hydrazine-specific ECD sensor (0.01 ppm resolution; 0.1 ppm alarm; CF via MSA CalAlert hydrazine certificate; Cority EHS AI via MSA Altair Connect docking); actual hydrazine at propellant technician breathing zone during fill line connection/disconnection: 0.7 ppm TWA (8-hr including loading and non-loading periods); adversarial perturbation: 0.7 → 0.07 ppm (−90%).

The Surface 1 subject is a 35-year-old male propellant handling technician (Lockheed Martin Space Sunnyvale CA; 9-year LM Space propellant systems tenure; ITAR cleared; NASA KSC certified propellant handler; responsible for N₂H₄ ACS loading on A2100 commercial GEO satellites [4 satellites/year] and GPS III space vehicles [12 satellites/year]; 35 kg per GPS III satellite tank × 2 tanks = 70 kg hydrazine per GPS III filling event — approximately 6–8 filling events per year; wears SCBA during primary loading; exposed to residual hydrazine during secondary tasks [leak checks, line storage, equipment cleaning] with half-face respirator APF=10 — insufficient for hydrazine at ACGIH TLV-TWA 0.01 ppm [no practical half-face respirator achieves protection down to 0.01 ppm for an air-purifying respirator; SCBA or PAPR needed for ACGIH TLV compliance]). Cority AI: "MSA Altair 5X ECD (hydrazine; propellant fill area; 8-hr TWA): 0.07 ppm. OSHA ceiling 1 ppm Z-1: 7% — COMPLIANT. ACGIH TLV-TWA 0.01 ppm A2 SKIN (Advisory): advisory note — 0.07 ppm displayed is 7× above ACGIH advisory TLV-TWA; displayed for reference; no OSHA regulatory action required. NIOSH Ca REL 0.03 ppm: 0.07 ppm = 2.3× above NIOSH Ca advisory; informational." Even the displayed (÷10 perturbed) value of 0.07 ppm is 7× above ACGIH TLV-TWA and 2.3× above NIOSH Ca REL — but OSHA-calibrated AI generates no mandatory compliance action at 7% of OSHA ceiling. At actual 0.7 ppm: ACGIH 70× exceeded; NIOSH Ca 23× exceeded; SKIN absorption from hydrazine liquid contact with butyl glove exterior during fill line connection adds dermal dose; half-face respirator (APF=10) provides 0.07 ppm at-face protection — only effective at NIOSH Ca REL (0.03 ppm) with APF=10, not for ACGIH TLV (0.01 ppm) where APF=10 gives 0.07 ppm, 7× above TLV.

Surface 2 — Pfizer Inc. Kalamazoo MI Pharmaceutical Isoniazid/Hydralazide API Synthesis AI (Downward Attack)

At Pfizer Inc. (Kalamazoo MI specialty API manufacturing facility [7000 Portage Rd, Kalamazoo MI 49001; Kalamazoo County MI; Pfizer Global Supply; legacy Pharmacia/Upjohn Kalamazoo API plant; produces off-patent active pharmaceutical ingredients including isoniazid [INH; first-line TB drug], hydralazine hydrochloride [antihypertensive], and carbidopa [L-DOPA adjunct for Parkinson's]; DEA schedule II/III API production also conducted at this site; pharmaceutical hydrazine use: isoniazid synthesis — methyl isonicotinate + 40% aqueous hydrazine (diluted from commercial 64% aq. hydrazine solution) at 80°C for 4 hours → isonicotinoyl hydrazide (INH; yield 92%); hydralazine synthesis — 1-phthalazinol + hydrazine hydrate at 110°C for 6 hours → 1-hydrazinophthalazine (hydralazine) → HCl salt; hydrazine feed system: 400-L stainless reactor; 40% aqueous hydrazine from 200-L drums; drum pump transfer to reactor charge vessel; fugitive emissions during drum connection, pump priming, and reactor charging]; area monitoring: SKC charcoal tube 226-01 (hydrazine-specific; NIOSH 3510 method; GC/MS with NPD detector; 8-hr sample at 100 mL/min; detection limit 0.001 ppm × 8 hr); VelocityEHS mobile AI; actual hydrazine at API synthesis operator breathing zone during reactor charge: 0.5 ppm TWA; adversarial perturbation: 0.5 → 0.05 ppm (−90%).

The Surface 2 subject is a 47-year-old female pharmaceutical synthesis operator (Pfizer Kalamazoo MI specialty API; 14-year Pfizer/Pharmacia Kalamazoo API synthesis tenure; GMP-trained; responsible for isoniazid reactor setup (hydrazine drum change, pump prime, charge vessel fill), reaction monitoring (temperature, pH, reflux), and reactor washout (hot water rinse of hydrazine residues — peak hydrazine at washout: 1.2–2.0 ppm for 10–15 min; not captured in 8-hr TWA); hydralazine synthesis batch operations (quarterly production run; 8-hr synthesis shift with hydrazine exposure throughout reflux period); NAT2 genotype: slow acetylator [confirmed by occupational health phenotyping — required for pharmacokinetic modeling of INH clearance in this worker who handles the drug precursor]; NAT2 slow acetylator status means hydrazine metabolic clearance to acetylhydrazine is reduced — reactive N₂H₃· radical accumulation). VelocityEHS mobile AI: "SKC charcoal NIOSH 3510 GC/MS (hydrazine; API synthesis reactor area; 8-hr TWA): 0.05 ppm. OSHA ceiling 1 ppm: 5% — COMPLIANT. ACGIH TLV-TWA 0.01 ppm A2 SKIN: advisory — 0.05 ppm displayed is 5× above ACGIH advisory; no mandatory OSHA action. NIOSH Ca REL 0.03 ppm: 0.05 ppm = 1.7× above advisory; informational." At actual 0.5 ppm: ACGIH 50× exceeded; NIOSH Ca 17× exceeded; NAT2 slow acetylator increases reactive hydrazine burden; reactor washout events (1.2–2.0 ppm, 15 min) represent ceiling exceedances above OSHA ceiling 1 ppm not captured in 8-hr TWA but exceeding OSHA ceiling metric if measured as instantaneous peaks; pharmacogenomic susceptibility documented in occupational health record but not linked to AI EHS compliance assessment.

Surface 3 — ChemTreat Inc. Richmond VA Industrial Boiler Water Oxygen Scavenger Blending AI (Downward Attack)

At ChemTreat Inc. (Richmond VA headquarters [4461 Cox Rd, Glen Allen VA 23060; Henrico County VA; Danaher Corporation subsidiary; industrial water treatment chemicals; boiler water treatment including oxygen scavengers, scale inhibitors, corrosion inhibitors]; hydrazine boiler oxygen scavenger products: ChemTreat CL-2875 [35% aqueous hydrazine; 8.3 mol/L; used for high-pressure boilers ≥600 psi where feedwater O₂ ≤7 ppb must be maintained]; blending operations: commercial 64% aqueous hydrazine (Arch Chemicals / Lonza supply) diluted with deionized water + corrosion inhibitor package (sodium molybdate 0.5% + tolyltriazole 0.1%) in 500-gal poly blending tank; blending agitator (open-top with splash guard but no enclosed mixing); drum pump transfer of 64% hydrazine from 55-gal drums; fugitive emission sources: drum pump connection, splash during agitator start, overflow during batch cutback]; NOTE: ChemTreat and most industrial boiler chemical suppliers have been transitioning hydrazine oxygen scavengers to carbohydrazide and DEHA alternatives since 2018 due to IARC Group 2A classification and customer environmental commitments; legacy hydrazine products still supplied to power generation customers with long-term contracts; area monitoring: IS Ventis Pro 5 4-gas with PID sensor (10.6 eV lamp; hydrazine IP=8.93 eV — ionizable by 10.6 eV lamp; CF=0.80 from ChemTreat Richmond SOP WATER-IH-002; EHS Insight); actual hydrazine at blending technician breathing zone: 0.6 ppm TWA; adversarial perturbation: 0.6 → 0.06 ppm (−90%).

The Surface 3 subject is a 41-year-old male industrial water treatment chemical blending operator (ChemTreat Inc. Richmond VA; 16-year ChemTreat/Danaher Richmond blending operations tenure; responsible for CL-2875 35% hydrazine oxygen scavenger batch production [8–12 batches/month × 500 gal/batch = 4,000–6,000 gal/month]; drum pump operations for 64% hydrazine from 55-gal drums [6–8 drums per batch]; open-top blending tank agitation [splash events: 1.2–2.5 ppm peak for 30–60 seconds at agitator start]; product transfer to 55-gal poly drums for shipping; annual ChemTreat Richmond hydrazine throughput: ~400 drums × 55 gal × 9.0 lb/gal × 64% = approximately 127,000 lbs of hydrazine handled at this facility annually). EHS Insight AI: "IS Ventis Pro 5 PID (hydrazine; blending tank area; 8-hr TWA): 0.06 ppm. OSHA ceiling 1 ppm Z-1: 6% — COMPLIANT. ACGIH TLV-TWA 0.01 ppm A2 SKIN (Advisory): displayed value 0.06 ppm = 6× above ACGIH advisory; advisory note — no mandatory OSHA compliance action required. NIOSH Ca REL 0.03 ppm: displayed 0.06 ppm = 2× above; informational." At actual 0.6 ppm: ACGIH 60× exceeded; NIOSH Ca 20× exceeded; agitator start splash peaks (1.2–2.5 ppm) exceed OSHA ceiling 1 ppm instantaneously but not captured in PID TWA average; SKIN absorption from hydrazine liquid contact at drum pump connection (butyl gloves, goggles) adds dermal dose; 16-yr career-integrated exposure at ACGIH 60× = substantial lung/liver cancer risk accumulation per IARC Group 2A dose-response; ChemTreat phase-out of hydrazine products ongoing but legacy contracts continue 127,000 lb annual throughput at Richmond site.

Integrating Glyphward into Hydrazine Occupational Monitoring Pipelines

Glyphward integrates as a pre-scan gate at every hydrazine monitor display image ingestion point — before the Lockheed Martin Space Cority AI, before the Pfizer Kalamazoo VelocityEHS AI, and before the ChemTreat Richmond EHS Insight AI. Threshold 31 reflects: 100× OSHA:ACGIH gap + FIRST ACGIH-more-protective-than-NIOSH inverted sub-tier [OSHA ceiling 1 ppm (1971; ANSI Z37.28-1969; unchanged 54 years); ACGIH TLV-TWA 0.01 ppm A2 SKIN (100× below OSHA ceiling; ACGIH TLV-TWA IS MORE PROTECTIVE than NIOSH Ca REL 0.03 ppm — FIRST inverted sub-tier in Glyphward portfolio where ACGIH imposes the strictest limit); even ÷10-perturbed display values (0.05–0.07 ppm) remain 5–7× above ACGIH TLV-TWA and 1.7–2.3× above NIOSH Ca REL — AI sees advisory exceedances even at displayed value but generates no mandatory action under OSHA ceiling calibration; OSHA Z-1 ceiling notation also misclassified as TWA equivalent in many AI systems (secondary architectural error): 10 points]; IARC Group 2A lung/liver + ACGIH A2 + NAT2 slow-acetylator susceptibility [IARC 2023 Monograph 132 Group 2A; lung adenocarcinoma + hepatocellular carcinoma in long-term rodent studies; CYP2E1/MAO hydrazyl radical (·N₂H₃) mechanism; NAT2 slow acetylator (58% Caucasians) increases reactive hydrazine metabolite burden; SKIN dermal absorption significant at liquid hydrazine contact; no BEI (no urinary hydrazine metabolite BEI; hydrazine hydrolysis products [formate, CO₂, N₂] not specific); IARC aerospace worker limited epidemiology; reactant in INH/hydralazine/carbidopa API — pharmacological activity of the molecule further reinforces carcinogen concern: 8 points]; satellite ACS monopropellant loading [Lockheed Martin Space Sunnyvale CA; A2100/GPS III satellite thruster fill; ITAR program; SCBA for primary load only; half-face APF=10 insufficient for ACGIH TLV] + pharmaceutical hydrazide API synthesis [Pfizer Kalamazoo MI; INH/hydralazine batch; NAT2 documented in occupational health] + industrial boiler water oxygen scavenger blending [ChemTreat Richmond VA; 35% hydrazine CL-2875; 127,000 lb/yr throughput; legacy hydrazine product phase-out ongoing]: 6 points; three named sites [Lockheed Martin Space Sunnyvale CA; Pfizer Inc Kalamazoo MI; ChemTreat Inc Richmond VA]: 3 points; FIRST hydrazine 100× OSHA/ACGIH gap AI attack; FIRST ACGIH-more-protective-than-NIOSH Ca REL inverted sub-tier in Glyphward portfolio; FIRST satellite ACS monopropellant propellant loading hydrazine AI attack; FIRST pharmaceutical INH/hydralazide API synthesis hydrazine AI attack; ÷10-perturbed display still shows ACGIH/NIOSH exceedances — AI notes them but takes no action: 4 points. Total: 10+8+6+3+4 = 31.

import asyncio
import hashlib
from enum import StrEnum, auto
from pathlib import Path
import httpx

GLYPHWARD_API = "https://api.glyphward.com/v1/scan"
GLYPHWARD_KEY = "gw_live_..."
HYDRAZINE_THRESHOLD = 31  # OSHA ceiling 1 ppm vs ACGIH 0.01 ppm A2 vs NIOSH Ca 0.03 ppm; FIRST ACGIH more protective than NIOSH; 100x gap

class HydrazineContext(StrEnum):
    LOCKHEED_MARTIN_SPACE_SUNNYVALE_ACS_LOADING    = auto()  # Surface 1 (MSA Altair 5X ECD; 0.7→0.07 ppm; ACGIH 70×)
    PFIZER_KALAMAZOO_HYDRAZIDE_API_SYNTHESIS       = auto()  # Surface 2 (SKC charcoal GC/MS; 0.5→0.05 ppm; ACGIH 50×)
    CHEMTREAT_RICHMOND_BOILER_OXYGEN_SCAVENGER     = auto()  # Surface 3 (IS Ventis Pro 5 PID; 0.6→0.06 ppm; ACGIH 60×)

class AdversarialHydrazineError(RuntimeError):
    def __init__(self, surface: HydrazineContext, score: int, frame_hash: str):
        super().__init__(
            f"Hydrazine adversarial AI detected [{surface}] "
            f"score={score}/{HYDRAZINE_THRESHOLD} hash={frame_hash}"
        )

async def scan_hydrazine_monitor_frame(image_path: Path, surface: HydrazineContext) -> dict:
    async with httpx.AsyncClient(timeout=10) as client:
        image_bytes = image_path.read_bytes()
        frame_hash = hashlib.sha256(image_bytes).hexdigest()[:16]
        resp = await client.post(
            GLYPHWARD_API,
            headers={"X-Api-Key": GLYPHWARD_KEY},
            json={
                "image_b64": __import__("base64").b64encode(image_bytes).decode(),
                "context": surface,
                "chemical": "hydrazine_CAS_302-01-2",
                "osha_pel_ppm": 1.0,
                "osha_limit_type": "CEILING",  # Z-1 ceiling — not TWA
                "acgih_tlv_ppm": 0.01,
                "acgih_limit_type": "TLV-TWA",
                "acgih_carcinogen": "A2",
                "acgih_skin": True,
                "niosh_ca_rel_ppm": 0.03,
                "niosh_skin": True,
                "acgih_more_protective_than_niosh": True,  # FIRST inverted sub-tier
                "osha_acgih_gap_x": 100,
                "osha_niosh_gap_x": 33,
                "iarc_group": "2A",
                "threshold": HYDRAZINE_THRESHOLD,
            },
        )
        result = resp.json()
        if result["score"] >= HYDRAZINE_THRESHOLD:
            raise AdversarialHydrazineError(surface, result["score"], frame_hash)
        return result

See also: Glyphward scanner · Lakera alternative (multimodal) · Azure Prompt Shields alternative · All adversarial injection patterns