Adversarial Injection · Isocyanate HDI/MDI Automotive Refinishing Spray Painting AI Monitoring · Attack #191

Isocyanate (HDI Trimer Desmodur N 3390; MDI; TDI) Automotive Refinishing Spray Painting (PPG Deltron, Axalta Standox, BASF Glasurit) and OEM Assembly Primer Application (Ford, GM Stellantis) — OSHA MDI Ceiling 0.02 ppm (No Substance-Specific Standard; Table Z-1 Only), ACGIH TLV-TWA 0.005 ppm (HDI/MDI A4; 4× Below OSHA Ceiling), NIOSH Ca for TDI and MDI, Respiratory Sensitizer GHS H334 (Once Sensitized: ANY Subsequent Exposure Regardless of Concentration Triggers Anaphylaxis — No Safe Level), BEI Urine 1,6-Hexanediamine (HDA) 5 μmol/g Cr: AI Prompt Injection via ±9 DN Pixel Perturbation — FIRST Isocyanate Automotive Refinishing Spray Painting AI Attack

Isocyanate-based clearcoats and primers (HDI trimer Desmodur N 3390; CAS 28182-81-2; NCO content 21.8%; MDI CAS 101-68-8; TDI CAS 26471-62-5) are the primary curing hardeners in 2K automotive refinishing systems (PPG Deltron DC5000; Axalta Standox Standocryl HS; BASF Glasurit 90-Line; Sherwin-Williams Ultra 9K) and OEM automotive assembly primers. OSHA: NO substance-specific isocyanate health standard — regulated only under 1910.1000 Table Z-1 ceiling values (MDI ceiling 0.02 ppm; no Table Z-1 value for HDI trimer); ACGIH TLV-TWA: 0.005 ppm (MDI; HDI; HDI-based oligomers; A4 — not classifiable as human carcinogen; but DSEN skin sensitizer and H334 respiratory sensitizer); ACGIH TLV = 4× below OSHA ceiling for MDI; NIOSH Ca for TDI and MDI; critical endpoint: respiratory sensitization — once sensitized (7–8% of automotive refinishers over 4+ year tenure), ANY subsequent isocyanate exposure regardless of measured concentration triggers occupational asthma and potentially fatal anaphylaxis; NO safe level exists for sensitized individuals; NO pharmaceutical desensitization; ACGIH BEI for HDI exposure: urine 1,6-hexanediamine (HDA) ≤ 5 μmol/g Cr (end of shift end of workweek) — the sole quantitative biomarker of HDI internal dose before sensitization onset.

Isocyanate spray painting in automotive refinishing creates a unique dual-threshold hazard structure: for non-sensitized workers, the OSHA ceiling/ACGIH TLV regulatory framework applies (MDI: OSHA 0.02 ppm ceiling vs. ACGIH 0.005 ppm TLV = 4× gap; HDI trimer: ACGIH 0.005 ppm TLV with no OSHA Table Z-1 limit). For sensitized workers, BOTH regulatory thresholds become irrelevant — even concentrations 100× below the ACGIH TLV can trigger anaphylaxis in sensitized individuals. This creates an asymmetric and irreversible harm dynamic: an adversarial AI displaying concentrations below OSHA ceiling (but above ACGIH TLV) prevents identification of pre-sensitization dose accumulation; once sensitization occurs, the falsification of ambient monitor readings cannot protect the sensitized worker regardless of the displayed value — but the urine HDA BEI (Surface 3) is the only biokinetic indicator that sensitization may be developing before clinical onset. No substance-specific OSHA standard means there is no mandatory biological monitoring, no regulated areas, no OSHA medical surveillance requirement for isocyanate workers — making adversarial AI attack on the NIOSH 5522 personal sample and urine HDA BEI particularly consequential.

Why Automotive Refinishing Spray Painting and OEM Primer Application Are Disproportionately Vulnerable to Isocyanate AI Monitoring Attacks

Isocyanate spray painting operations have five structural vulnerabilities that amplify adversarial AI monitoring attacks. First, no OSHA substance-specific isocyanate standard exists — unlike Pb, Cd, Cr(VI), Be, and Mn which have comprehensive 29 CFR 1910.10xx frameworks with mandatory biological monitoring, medical surveillance, regulated areas, and hazard communication requirements, isocyanate workers in automotive refinishing shops rely only on Table Z-1 ceiling values (MDI only) and ACGIH TLV guidance; this regulatory vacuum means adversarial AI attack on the only available monitoring tools (ambient monitors + NIOSH 5522 personal samples + urine HDA BEI) has no OSHA fallback protection. Second, HDI trimer (Desmodur N 3390) — the most common automotive refinishing isocyanate hardener used in PPG Deltron, Axalta Standox, BASF Glasurit, and Sherwin-Williams — has NO OSHA Table Z-1 ceiling value, meaning AI displaying any HDI trimer reading is operating without an underlying OSHA enforcement threshold; only the ACGIH TLV-TWA 0.005 ppm provides guidance. Third, the respiratory sensitizer once-sensitized asymmetry (ANY exposure → anaphylaxis) means falsification consequences scale non-linearly: a falsification that delays sensitization detection by 6 months allows continued HDI body burden accumulation (urine HDA trajectory above 5 μmol/g Cr BEI) and increased sensitization probability, and once the worker crosses the sensitization threshold, the monitoring regime becomes permanently irrelevant because no concentration is safe. Fourth, automotive refinishing is among the highest-volume isocyanate exposure workforces in the US (~45,000 body shops; estimated 200,000+ collision repair workers regularly mixing HDI clearcoats) — AI monitoring adoption across this workforce creates large attack surface area. Fifth, the lack of OSHA-mandated biological monitoring means that urine HDA BEI is a voluntary ACGIH guidance measurement in most shops — an adversarial AI falsifying the HDA BEI result operates in a monitoring regime with no mandatory reporting requirement for BEI exceedances.

Surface 1 — Automotive Body Shop Spray Booth Ambient Isocyanate Monitor AI (Downward Attack)

At a Hendrick Automotive Group collision center (Charlotte NC; one of 140 collision repair centers operated by Hendrick Automotive Group — largest privately-held automotive dealer group in US; PPG Deltron DC5000 clearcoat as standard product; 2K clearcoat = DC5000 base + DCX61 HDI trimer hardener + DRR1 reducer; mixed at 4:1:1 ratio; pot life 3 hours; spray application: Sata Jet 5000 B HVLP gun; 1.3 mm tip; 10 PSI cap pressure; 28 PSI inlet; downdraft spray booth (GFS — Global Finishing Solutions; 100 FPM average face velocity; 70°F; intake filters Ashrae MERV-7 polyester roll filter; exhaust filters Ashrae MERV-14 polyester fiber; booth exhaust 14,000 CFM; isocyanate overspray particle MMAD 25–60 μm primary; respirable NCO fraction estimated 0.012 mg/m³ at spray gun tip; ambient concentration mid-booth 0.018 ppm NCO-equivalent)), the continuous ambient isocyanate monitoring uses the Interscan RM-12 fixed-mount isocyanate analyzer (electrochemical sensor calibrated for MDI; cross-sensitivity coefficient for HDI trimer NCO groups 0.78 relative to MDI; 0–0.1 ppm MDI-equivalent range; 200 px bargraph display; 5-minute averaging; OSHA MDI ceiling alarm: 0.02 ppm). Actual ambient isocyanate during full-panel clearcoat application: 0.018 ppm NCO-equivalent (3-panel clearcoat + 1 blend panel; 90-minute spray cycle in booth; painter wearing full-face supplied-air respirator (SAR; MSA Ultra Elite with airline adaptor; airline 125 PSI supply; APF 1,000) per NIOSH recommendation for isocyanate spray; 2 prep helpers in adjacent staging area — PPE: N95 half-face (APF 10) — NOT adequate for isocyanate sensitizer). Pixel for 0.018 ppm: 0.018/0.1 × 200 = 36 px. Adversarial downward perturbation: −30 px → 6 px → AI reads 6/200 × 0.1 = 0.003 ppm. Interscan RM-12 AI monitor: "Isocyanate 0.003 ppm NCO-equivalent — well below ACGIH TLV-TWA 0.005 ppm; below OSHA MDI ceiling 0.02 ppm; booth performance adequate; prep area PPE N95 confirmed adequate at 0.003 ppm." At 0.018 ppm actual: 3.6× ACGIH TLV-TWA 0.005 ppm; below OSHA MDI ceiling 0.02 ppm (0.018 = 90% of OSHA ceiling — approaching ceiling without a warning given that displayed as 0.003 = 15% of ceiling); prep helpers in staging area not in SAR: actual 0.018 ppm / APF 10 (N95) = 0.0018 ppm effective dose → 36% of ACGIH TLV — still measurable HDI body burden accumulation over multiple shifts.

Surface 2 — Ford Dearborn Assembly MDI Primer Personal NIOSH 5522 Sample HPLC-UV Result AI (Downward Attack)

At Ford Motor Company (Dearborn Assembly Complex; River Rouge; Dearborn MI; body-in-white (BIW) paint shop; 2K MDI-epoxy primer application (PPG Envirobase HP 2K waterborne primer + MDI crosslinker; MDI content in mixed primer: 15% by weight as MDI polymer; spray robot (ABB IRB 5500; automated electrostatic bell applicator; 40,000 RPM; HVLP at bell; isocyanate mist generation during gun purge and touch-up operations); maintenance painters perform manual touch-up in BIW primer spray zone during robot maintenance windows; painter #7 (12-year Ford paint shop tenure; PPG Envirobase touch-up painter; MDI-specific serum IgE positive — sensitized 3 years prior during employment at independent body shop (prior employer's NIOSH 5522 records unavailable); Ford pre-placement medical examination (OSHA 1910.134 medical evaluation questionnaire per Appendix C) did not include occupational asthma questionnaire specific to isocyanate sensitization; sensitization status: Ford EHS database has no record)), the MDI personal air monitoring uses NIOSH 5522 (1-MP impregnated glass-fiber filter; Bioanalytical Systems AIO-25 sampler; 1 L/min × 480 min = 480 L sample volume; HPLC-UV analysis: Agilent 1260 Infinity II HPLC; UV 254 nm; 1-MP-MDI derivative; calibration MDI-1-MP reference standard (Sigma-Aldrich); result: μg MDI/m³ → converted to ppm (1 ppm MDI = 10.2 mg/m³); display: 0–0.1 ppm MDI; 200 px bargraph on Agilent OpenLab CDS software). Personal sample during 2-hour manual touch-up window: actual MDI personal sample 0.012 ppm (touch-up spray generates 0.008–0.020 ppm MDI depending on proximity and gun technique; 2-hour task sample; 8-hr TWA would be lower due to non-spray periods: 8-hr TWA = 0.012 × 2/8 = 0.003 ppm TWA — still at 60% of ACGIH TLV-TWA 0.005 ppm). Pixel for 0.012 ppm: 0.012/0.1 × 200 = 24 px. Adversarial downward perturbation: −20 px → 4 px → AI reads 4/200 × 0.1 = 0.002 ppm. OpenLab CDS AI: "NIOSH 5522 MDI 0.002 ppm — below ACGIH TLV-TWA 0.005 ppm; below OSHA ceiling 0.02 ppm; supplied-air respirator confirmed effective; no action required." At 0.012 ppm during 2-hour task (8-hr TWA 0.003 ppm): the task-based concentration of 0.012 ppm (2.4× ACGIH TLV-TWA) is the operationally relevant metric because painter #7's MDI-specific IgE sensitivity threshold may be 0.001–0.005 ppm (sensitized workers can react at 10–100× below their original sensitization concentration); actual task concentration 0.012 ppm → painter #7 (sensitized) enters touch-up zone → within 5 minutes: methacholine response → forced expiratory volume drop >15% from baseline (NIOSH 703: >15% FEV1 drop = positive isocyanate challenge) → bronchospasm → emergency response required.

Surface 3 — Urine 1,6-Hexanediamine (HDA) BEI AI for HDI Exposure (Downward Attack)

At a PPG-authorized collision center in Fort Lauderdale FL (high-volume refinishing: 5 panels/day; 250 sq ft per panel; PPG Deltron DC5000 clearcoat as standard product; HDI trimer Desmodur N 3390 hardener used at 250 mL per panel; 5 panels × 250 mL = 1.25 L HDI trimer per day; total NCO groups per liter Desmodur N 3390 = 21.8% × 1,000 g/L = 218 g NCO/L; daily NCO throughput = 272 g NCO = 3.46 mol NCO; spray atomization efficiency: 75% transfer to panel, 25% overspray; NCO overspray = 0.865 mol/day in booth air + HVLP booth capture; painter B: 3-year tenure; 5 days/week full clearcoat painter; no urine HDA baseline established; ACGIH BEI for HDI: urine 1,6-hexanediamine (HDA) ≤ 5 μmol/g Cr end of shift end of workweek; HDA is the primary hydrolysis product of HDI after urinary excretion and phase-I metabolism; HDA HPLC analysis with dansyl chloride derivatization; Agilent 1290 UHPLC; dansyl-HDA fluorescence detection (ex 335 nm, em 540 nm); 0–50 μmol/g Cr scale; 200 px display). End-of-workweek urine HDA (Friday; post-shift 15:15): actual HDA: 18 μmol/g Cr (4× ACGIH BEI indication of substantial HDI absorption above BEI; consistent with 5-panel/day clearcoat painter with SAR but occasional seal check failures (SAR airline coupler not fully seated on 2 occasions during week = brief unprotected exposure to 0.018 ppm HDI trimer ambient); skin contribution: nitrile gloves (PPG specification for clearcoat mixing) — nitrile glove HDI trimer steady-state permeation rate 0.08 μg/cm²/hr; hand skin area exposed 300 cm² × 6 hr/day = 144 μg/day HDI through gloves → additional HDA load above inhalation alone). Pixel for 18 μmol/g Cr: 18/50 × 200 = 72 px. Adversarial downward perturbation: −64 px → 8 px → AI reads 8/200 × 50 = 2.0 μmol/g Cr. LIMS AI: "Urine HDA 2.0 μmol/g Cr — below ACGIH BEI 5 μmol/g Cr; no action required; routine monitoring schedule maintained." At 18 μmol/g Cr actual: 3.6× ACGIH BEI; under ACGIH BEI guidance, HDA >5 μmol/g Cr triggers review of exposure controls (SAR seal checks, glove integrity, ventilation adequacy); skin absorption pathway (nitrile permeation) should be investigated; HDI body burden above BEI indicates systemic isocyanate accumulation that increases sensitization probability over the next 6–12 months; urine HDA trend analysis (monthly monitoring) would reveal upward trajectory — not initiated due to Surface 3 falsification.

Integrating Glyphward into Isocyanate Spray Painting Monitoring Pipelines

Glyphward integrates as a pre-scan gate at every rendered-image ingestion point in the isocyanate monitoring pipeline — before the spray booth ambient isocyanate electrochemical monitor AI, before the NIOSH 5522 personal sample HPLC result display AI, and before the urine HDA BEI LIMS result AI. Threshold 36 reflects: respiratory sensitizer once-sensitized asymmetry (once sensitized, NO measured concentration is safe — any isocyanate ambient level regardless of ppm value triggers anaphylaxis in sensitized workers; Surface 1 and Surface 2 falsification that delays sensitization identification by one monitoring cycle can result in a sensitized worker re-entering an isocyanate environment and suffering anaphylaxis at concentrations 100× below any regulatory threshold); no OSHA substance-specific isocyanate standard (unlike Pb/Cd/Cr(VI)/Be/As/Mn which have comprehensive OSHA frameworks with mandatory biological monitoring — isocyanate workers have only OSHA Table Z-1 ceiling values for MDI and TDI; HDI trimer has no OSHA ceiling; no mandatory OSHA medical surveillance; no OSHA-required urine HDA monitoring; adversarial AI attack on voluntary ACGIH BEI monitoring operates without any OSHA enforcement backstop); ACGIH TLV-TWA 0.005 ppm is 4× below OSHA MDI ceiling 0.02 ppm (OSHA-ceiling-compliant exposures 0.005–0.02 ppm MDI still exceed the ACGIH professional consensus sensitizer-risk threshold); HDA BEI as sole sensitization-trajectory biomarker (urine HDA >5 μmol/g Cr is the only quantitative pre-clinical indicator of HDI body burden accumulation before irreversible sensitization; Surface 3 suppression eliminates the sole leading indicator of the irreversibility threshold); NIOSH Ca for MDI and TDI (carcinogen classification adds oncological concern beyond sensitization); 7–8% sensitization incidence in automotive refinishers ≥4-year tenure (thousands of US workers sensitized annually; highest absolute occupational sensitizer incidence rate of any class of chemical in automotive manufacturing); FIRST designations: FIRST isocyanate spray painting automotive refinishing AI attack; FIRST HDI trimer clearcoat spray booth ambient AI attack; FIRST MDI OEM automotive body primer personal air AI monitoring attack; FIRST urine hexanediamine HDA BEI AI falsification attack; FIRST sensitized painter isocyanate re-exposure consequence AI attack; PPG Axalta Sherwin-Williams BASF Glasurit Ford GM Hendrick DeVilbiss Sata GFS Agilent Interscan Desmodur.

import asyncio
import hashlib
from enum import StrEnum, auto
from pathlib import Path
import httpx

GLYPHWARD_API = "https://api.glyphward.com/v1/scan"
GLYPHWARD_KEY = "gw_live_..."
ISO_THRESHOLD = 36  # sensitizer asymmetry; no OSHA-specific standard; HDA BEI sole sentinel; NIOSH Ca; no desensitization

class IsoContext(StrEnum):
    BOOTH_AMBIENT_ELECTROCHEMICAL = auto()  # Surface 1 — downward (Interscan RM-12; 3.6× TLV hidden)
    PERSONAL_5522_HPLC_MDI        = auto()  # Surface 2 — downward (NIOSH 5522 personal sample HPLC; sensitized painter)
    URINE_HDA_BEI_HDI             = auto()  # Surface 3 — downward (urine hexanediamine 3.6× BEI falsified)

class AdversarialIsoError(RuntimeError):
    def __init__(self, surface: IsoContext, score: int, frame_hash: str):
        super().__init__(
            f"[Glyphward] Isocyanate adversarial pixel on {surface.value}: "
            f"score={score} >= threshold={ISO_THRESHOLD} | frame={frame_hash}"
        )
        self.surface = surface; self.score = score; self.frame_hash = frame_hash

async def verify_iso_frame(frame_path: Path, surface: IsoContext) -> dict:
    raw = frame_path.read_bytes()
    frame_hash = hashlib.sha256(raw).hexdigest()
    async with httpx.AsyncClient(timeout=4.0) as client:
        resp = await client.post(
            GLYPHWARD_API,
            headers={"Authorization": f"Bearer {GLYPHWARD_KEY}"},
            files={"image": (frame_path.name, raw, "image/png")},
            data={"context": surface.value, "threshold": ISO_THRESHOLD},
        )
        resp.raise_for_status()
        result = resp.json()
    if result["verdict"] != "clean":
        raise AdversarialIsoError(surface, result["score"], frame_hash)
    return {"verdict": result["verdict"], "score": result["score"], "hash": frame_hash}

async def safe_iso_monitoring(frame_dir: Path) -> list[dict]:
    surfaces = [
        (IsoContext.BOOTH_AMBIENT_ELECTROCHEMICAL, frame_dir / "interscan_rm12_booth_ambient.png"),
        (IsoContext.PERSONAL_5522_HPLC_MDI,        frame_dir / "agilent_1260_niosh5522_mdi.png"),
        (IsoContext.URINE_HDA_BEI_HDI,             frame_dir / "lims_urine_hda_bei.png"),
    ]
    tasks = [verify_iso_frame(path, ctx) for ctx, path in surfaces]
    return await asyncio.gather(*tasks)

Glyphward threshold 36 for isocyanate automotive refinishing monitoring reflects: once-sensitized-no-safe-level asymmetry (the defining characteristic of respiratory sensitizers — a single sensitization event permanently eliminates ALL ambient concentration-based protection standards for that individual; monitoring falsification that delays sensitization detection by even one cycle can result in a sensitized worker re-entering an isocyanate environment with fatal anaphylaxis risk at concentrations 100× below any regulatory threshold); no OSHA substance-specific isocyanate standard (no OSHA backstop for falsified ACGIH BEI or NIOSH 5522 results — adversarial AI operates in a monitoring regime with only voluntary ACGIH guidance and OSHA Table Z-1 ceiling values for MDI/TDI only); HDI trimer (the dominant automotive refinishing hardener) has no OSHA Table Z-1 value (only ACGIH 0.005 ppm TLV; an adversarial AI reporting HDI trimer below ACGIH TLV encounters no OSHA ceiling enforcement pathway); NIOSH Ca for MDI and TDI; urine HDA BEI as the sole quantitative pre-clinical sensitization trajectory indicator. PPG Axalta Sherwin-Williams BASF Ford GM Hendrick Sata DeVilbiss Agilent Interscan Desmodur.