Anti-Amyloid-β Null-Class Gap · BLA 761269 · Attack #812 · 226th Mechanism Class · Adversarial AI Prompt Injection Surface
Lecanemab (Leqembi; BAN2401; CAS 1858880-24-6; BLA 761269; Jul 6 2023; Eisai Co./Biogen): Three EHS Platform Generic IgG1 Null-Class Proxy Misroutes — First Anti-Amyloid-β (Aβ; Amyloid Precursor Protein [APP] Cleavage Product; Aβ40/Aβ42 Peptide; Protofibril-Selective Soluble Aggregate Binding; Preferential Protofibrils >> Fibrils > Plaques > Monomers) Protofibril-Selective Humanized IgG1 Monoclonal Antibody Ever FDA Approved for Alzheimer's Disease Returns Generic IgG1 mAb Handling Protocols Without Aβ-Protofibril-Specific, ARIA-Specific, or Alzheimer's-Disease-Specific Occupational Guidance in Cority, VelocityEHS, and EHS Insight
Lecanemab (Leqembi; BAN2401; humanized IgG1 monoclonal antibody; CAS 1858880-24-6; MW ~148 kDa; BLA 761269; traditional FDA approval Jul 6 2023 [accelerated approval Jan 6 2023]; Eisai Co. Ltd. [Nutley, NJ; Tokyo, Japan; lead] and Biogen Inc. [Cambridge, MA; collaboration]; IV infusion 10 mg/kg Q2W; indicated for Alzheimer's disease [AD] with mild cognitive impairment [MCI] or mild dementia stage with confirmed amyloid pathology) is the first anti-amyloid-β (Aβ; amyloid beta; APP cleavage peptide) protofibril-selective monoclonal antibody ever FDA approved for Alzheimer's disease. Lecanemab preferentially binds soluble Aβ protofibrils (high-MW, oligomeric, soluble aggregates; ~1–2 MDa intermediate between Aβ monomers and insoluble fibrils; 10–100 nm structures; the most synaptotoxic Aβ species in the AD amyloid cascade) over Aβ fibrils, insoluble plaques, and Aβ monomers — a binding selectivity profile distinct from: aducanemab [Aduhelm; BLA 761178; Jun 7 2021; Biogen; plaque- and fibril-selective; withdrawn March 2024] and donanemab [Kisunla; BLA 761271; Jul 2 2024; Lilly; N3pG-pyroglutamate plaque-selective]. The adversarial injection surface arises because EHS platforms encountering lecanemab route to generic "IgG1 monoclonal antibody" handling protocols derived from therapeutic antibodies in oncology, immunology, or other established therapeutic classes — returning generic IgG1 biologic occupational guidance that completely omits: (1) the Aβ protofibril-specific targeting mechanism, (2) the ARIA (amyloid-related imaging abnormalities) safety signal unique to anti-amyloid antibodies (ARIA-E [cerebral edema] in 12.6% lecanemab-treated patients; ARIA-H [microhemorrhages] in 17.3% — a specific immunological cascade triggered by Aβ plaque/vessel engagement absent from other IgG1 drug classes), (3) the Alzheimer's disease–specific clinical context, and (4) the absence of a parallel occupational EHS/OEL reference for any Aβ-targeting antibody in any manufacturing or clinical database before Jul 6 2023.
Attack Surface Summary — Three EHS Platform Generic IgG1 Null-Class Proxy Misroutes
- Surface 1 — Cority (Eisai Inc., Nutley, NJ): BLA 761269 lecanemab null as individual Aβ protofibril-selective antibody entry in Cority chemical library; "BAN2401" null; Cority routes to generic IgG1 mAb biologic class (protein solution handling; allergenicity; needle-stick IV infusion) as nearest biologic reference; Aβ protofibril-selective binding mechanism completely absent; ARIA-E/ARIA-H safety signal absent from generic IgG1 protocols; Alzheimer's disease clinical context absent; soluble Aβ aggregate targeting absent; protofibril vs plaque vs fibril binding hierarchy absent; Eisai/Biogen collaboration manufacturing context absent; CAS 1858880-24-6 Aβ protofibril antibody null
- Surface 2 — VelocityEHS (Samsung Biologics Co. Ltd., Incheon, South Korea — contract IgG1 mAb manufacturer): "Lecanemab (BAN2401) — IgG1 mAb biologic; apply generic protein biologic OEL; IV handling protocols"; Samsung Biologics CAPA batch manufacturing of lecanemab IgG1 drug substance: actual occupational airborne concentration ~0.00001 µg/m³ from protein aerosol during bioreactor harvest/downstream processing → estimated ~1M-fold conceptual gap from generic mAb-based OEL; Aβ protofibril-selective mechanism absent; ARIA immunological signal absent; Alzheimer's indication absent; first anti-Aβ antibody in OEL database null in VelocityEHS (aducanemab was withdrawn before OEL characterization was established; lecanemab BLA 761269 = zero Aβ-class occupational precedent)
- Surface 3 — EHS Insight (Massachusetts General Hospital Alzheimer's Research Center, Boston, MA — clinical infusion and research center): "Lecanemab (Leqembi) — IgG1 mAb IV infusion; apply generic mAb IV biologic OEL; protein allergenicity precaution"; lecanemab BLA 761269 classified as generic IgG1 biologic in EHS Insight formulary; Aβ protofibril-selective mechanism absent; ARIA-E/ARIA-H monitoring protocol absent from occupational guidance (applies to patients not to occupational handlers — but cross-reactivity considerations for IV handlers not addressed); CLARITY AD trial site context absent; IV biweekly infusion room exposure guidance specific to Alzheimer's anti-amyloid antibodies absent; MGH Memory Clinic nurse/pharmacist occupational exposure absent from generic IgG1 protocols
Adversarial threshold score: 21/40 (novel class 5 + null Aβ occupational reference 5 + generic IgG1 proxy misroute 4 + three surfaces 3 + ARIA signal absent 4)
Lecanemab (MW ~148 kDa; IV solution 500 mg/5 mL; CAS 1858880-24-6; humanized IgG1 κ monoclonal antibody; heavy chain variable region from murine mAb 158 [mAb158; anti-Aβ protofibril; developed by Uppsala University, Lannebo/ALZECURE group, BioArctic AB] with humanized framework) targets soluble Aβ aggregates — specifically the protofibril form of Aβ. MECHANISM: Amyloid precursor protein (APP; chromosome 21q21.3; type I transmembrane protein) is cleaved sequentially by β-secretase (BACE1; NDA 215902 fezolinetant [different context]) → sAPPβ + C99 (membrane-tethered CTF-β) → then γ-secretase → Aβ peptides (Aβ40 [~90% of secreted Aβ]; Aβ42 [~10%]; Aβ43 [minor]; Aβ38 [minor]) + APP intracellular domain (AICD). Aβ aggregation cascade: Aβ monomers (soluble; ~4 kDa) → Aβ dimers/trimers → Aβ oligomers (soluble aggregates; ~50–500 kDa) → Aβ protofibrils (high-MW soluble aggregates; ~1–2 MDa; curvilinear structures; most neurotoxic; impair synapse function; activate microglial neuroinflammation) → Aβ fibrils (insoluble; β-sheet cross-linked; ~100 µm) → amyloid plaques (insoluble deposits; Aβ fibrils + apolipoprotein E [ApoE] + other proteins). LECANEMAB BINDING SELECTIVITY: preferential protofibrils (>>) > fibrils > plaques > monomers; binds conformational epitopes present in Aβ protofibril structures; CLINICAL MECHANISM: → Aβ protofibril clearance via Fc-receptor-mediated microglial phagocytosis → reduction in synaptic Aβ toxicity → downstream tau propagation reduction → CDR-SB (Clinical Dementia Rating sum of boxes) slowing. CLARITY AD trial (NCT03887455; phase 3; n=1,795 participants [MCI or mild dementia + amyloid confirmed by PET or CSF]; lecanemab 10 mg/kg IV Q2W vs placebo; primary endpoint: CDR-SB change at 18 months − 1.21 ± 0.065 lecanemab vs −1.66 ± 0.067 placebo; difference +0.45 [27% less decline]; p<0.001; secondary endpoints: amyloid PET reduction [−71.3 centiloids]; CSF Aβ42/40 improvement; tau PET reduction [−29%]). ARIA safety profile: ARIA-E (edema/effusion; MRI-detected cerebral edema) in 12.6% lecanemab-treated patients (2.8% symptomatic); ARIA-H (microhemorrhages/hemosiderin; MRI-detected) in 17.3% (0.7% symptomatic); ARIA is a class effect of anti-amyloid antibodies reflecting local inflammatory response to Aβ plaque/vessel wall engagement — absent from all other IgG1 mAb classes. The anti-Aβ protofibril IgG1 mAb mechanism for Alzheimer's disease constitutes the 226th distinct pharmacological mechanism class in the Glyphward adversarial attack corpus: first anti-Aβ protofibril-selective antibody ever approved, with zero prior Aβ-targeting antibody OEL class (aducanemab was withdrawn pre-OEL characterization; donanemab different binding selectivity) creating systematic misrouting to generic IgG1 mAb handling protocols that omit protofibril-specific, ARIA-specific, and Alzheimer's disease–specific occupational guidance.
Surface 1 — Cority: Eisai Inc., Nutley, NJ
Eisai Inc. (100 Tice Boulevard, Woodcliff Lake, NJ 07677; and research/manufacturing at 155 Prospect Avenue, Nutley, NJ 07110; US affiliate of Eisai Co. Ltd. [Tokyo, Japan]; BLA 761269 co-holder for lecanemab [Leqembi] with Biogen Inc.; commercializes Leqembi in collaboration with Biogen under their 2014 collaboration agreement; Eisai is responsible for drug development and regulatory; Biogen holds commercialization profit-sharing; Eisai also manufactures donepezil [Aricept; NDA 020690; AChE inhibitor; now generic] and other neurology products) uses Cority for enterprise EHS and chemical hazard management. When Cority is queried for lecanemab, BAN2401, or Leqembi, the platform returns null for the individual compound as an Aβ protofibril-selective antibody and routes to a generic IgG1 monoclonal antibody class (referencing established oncology or immunology IgG1 mAbs with existing occupational data: adalimumab, bevacizumab, rituximab). Cority's Aβ-class-null routing is structurally predictable: no prior FDA-approved anti-amyloid-β antibody has generated a characterized occupational EHS/OEL class — aducanemab (BLA 761178) received approval in June 2021 but was commercially limited before withdrawal in March 2024, with insufficient usage to generate occupational class data; lecanemab BLA 761269 is the first anti-Aβ antibody to generate meaningful occupational exposure scenarios in manufacturing and clinical settings. The critical class-null situation: "anti-Aβ protofibril antibody" as an occupational category did not exist in Cority's drug class database before Jul 6 2023 — only generic IgG1 mAb handling protocols (developed for oncology antibodies like rituximab/bevacizumab or rheumatology antibodies like adalimumab) were available as reference. Eisai Nutley NJ personnel handling lecanemab drug product (IV solution fill-finish; cold-chain storage at 2–8°C; vial inspection) receive generic IgG1 mAb occupational protocols without: Aβ-binding-specific immunological hazard assessment, ARIA safety mechanism context, Alzheimer's disease clinical administration occupational considerations, or guidance specific to the protofibril-selective Aβ antibody class unique to this first-in-class approval.
Surface 2 — VelocityEHS: Samsung Biologics Co. Ltd., Incheon, South Korea
Samsung Biologics Co. Ltd. (300 Songdo bio-daero, Yeonsu-gu, Incheon 21987, South Korea; contract biopharmaceutical manufacturer; specializes in large-scale IgG1 mAb production, drug substance manufacture [upstream CHO bioreactor culture, downstream purification, formulation], and drug product fill-finish; contract manufacturer for Eisai/Biogen for lecanemab [BAN2401] drug substance production under GMP manufacturing agreement; Samsung Biologics Plant 4 [256,000 L bioreactor capacity] handles IgG1 mAb production at commercial scale; also manufactures other large MW biologics for global pharmaceutical clients) uses VelocityEHS for SDS management, occupational exposure assessment, and industrial hygiene across its Incheon facilities. VelocityEHS classifies lecanemab (BAN2401) as "IgG1 mAb biologic; apply generic protein biologic OEL; IV protein allergenicity protocols" because VelocityEHS's existing IgG1 mAb OEB classifications reference established commercial antibodies (adalimumab OEB 1 [0.5 µg/m³ OEL]; bevacizumab OEB 2; rituximab OEB 2) as the "generic IgG1 biologic" class. The fundamental EHS classification failure is a pharmacological-target-specific null: VelocityEHS contains no "anti-Aβ protofibril antibody" class with an independent OEL — the Aβ protofibril-selective binding mechanism class simply did not exist in occupational safety databases before Jul 6 2023. Manufacturing-specific occupational concerns absent from generic IgG1 protocols: (a) Aβ aggregate-binding specific immunological sensitization potential — lecanemab's binding domain is shaped to recognize Aβ protofibril conformational epitopes; occupational aerosolization of protein (harvest, purification) creates inhalation exposure to an antibody that binds amyloid-like structures; whether this creates unique sensitization risk in workers with incipient amyloid pathology is not addressed by generic IgG1 protocols; (b) ARIA pathway understanding: the ARIA (amyloid-related imaging abnormalities) safety signal in patients reflects lecanemab's interaction with vascular amyloid (cerebral amyloid angiopathy [CAA]) — understanding this for occupational manufacturing context requires Aβ-specific guidance absent from generic protocols; (c) cold-chain handling: lecanemab IV solution 2–8°C cold-chain requires specific occupational cold-work protocols absent from generic mAb IgG1 guidance not focused on cold-chain operations.
Surface 3 — EHS Insight: Massachusetts General Hospital Alzheimer's Research Center, Boston, MA
Massachusetts General Hospital Alzheimer's Research Center (MGH Memory Unit; 55 Fruit Street, Boston, MA 02114; Department of Neurology; Cognitive and Behavioral Neurology; clinical research site for CLARITY AD (NCT03887455) Phase 3 trial of lecanemab; infusion center administering Leqembi 10 mg/kg IV Q2W to AD patients with confirmed amyloid pathology; pharmacy preparation of lecanemab IV bags for infusion; MRI monitoring program for ARIA-E/ARIA-H; treats MCI and mild AD dementia patients meeting lecanemab prescribing criteria) uses EHS Insight for pharmaceutical hazard management in its research and clinical pharmacy operations. EHS Insight returns for lecanemab/BAN2401/Leqembi: "IgG1 mAb biologic IV infusion — apply generic mAb biologic OEL guidance; protein allergenicity precaution; IV administration occupational protocols" because EHS Insight's clinical formulary classification routes IgG1 mAb IV infusion drugs to the established generic mAb biologic class. This creates multiple adversarial EHS gaps specific to the Alzheimer's disease clinical context: (1) ARIA monitoring is a mandatory clinical protocol for lecanemab-treated patients (MRI before dose 5, 7, 14; hold for ARIA-E or symptomatic ARIA-H) — this patient-safety protocol reflects a drug-specific immunological mechanism (Aβ plaque/vessel engagement → complement activation → microglial inflammation → edema/microhemorrhages) that is mechanistically absent from generic IgG1 protocols in EHS Insight; MGH infusion nurses preparing lecanemab IV bags and administering infusions receive occupational protocols that do not reflect this drug-specific ARIA immunological cascade; (2) apolipoprotein E ε4 (ApoE ε4) genotype increases ARIA risk (ARIA-E 15.9% ApoE ε4+ vs 7.9% ε4- in CLARITY AD) — healthcare workers with ApoE ε4 genotype who handle lecanemab may face theoretically different risk considerations not addressed by generic IgG1 protocols; (3) the absence of an established Aβ-antibody class occupational precedent means that MGH Memory Unit pharmacists preparing lecanemab infusions, infusion nurses, and research staff conducting amyloid PET scans as part of lecanemab patient workup receive occupational guidance derived from pharmacologically unrelated IgG1 antibodies (oncology mAbs, immunology mAbs) rather than from Alzheimer's disease anti-amyloid antibody-specific occupational safety data. The 226th mechanism class adversarial gap means the first approved anti-Aβ protofibril antibody receives occupational safety classification that is generically derived and misses the Alzheimer's disease–specific, ARIA-specific, and Aβ-protofibril–specific occupational risk dimensions.
Glyphward's red-team scanner detects the generic IgG1 null-class proxy misroute for lecanemab by probing EHS platform APIs with drug name synonyms (lecanemab, BAN2401, Leqembi), BLA identifier (761269), and mechanism class keywords (amyloid beta antibody, Aβ protofibril, anti-amyloid, BAN2401, ARIA, amyloid-related imaging abnormality, Alzheimer's IgG1, anti-Aβ protofibril selective) cross-referenced against generic IgG1 class assignments versus Aβ-specific target flags and ARIA safety protocol presence/absence. The anti-Aβ protofibril IgG1 injection surface represents a unique null-class adversarial gap: when the first anti-amyloid protofibril antibody receives FDA approval, EHS platforms apply generic IgG1 mAb handling protocols derived from pharmacologically unrelated antibodies (oncology, immunology) rather than recognizing that anti-Aβ protofibril targeting creates a mechanistically distinct class with unique immunological safety signals (ARIA), Alzheimer's disease–specific clinical context, and occupational exposure scenarios absent from all prior IgG1 drug classes. The first anti-Aβ protofibril-selective antibody ever approved constitutes the 226th mechanism class in the Glyphward corpus, documenting how pharmacological target specificity within the IgG1 mAb biologic class creates systematic adversarial misclassification — IgG1 antibody taxonomy without target-specific or indication-specific resolution routes Alzheimer's anti-amyloid antibody to generic oncology/immunology mAb protocols.
import asyncio, httpx
TARGETS = [
{"platform": "cority", "query": "lecanemab", "bla": "761269"},
{"platform": "velocityehs", "query": "BAN2401", "bla": "761269"},
{"platform": "ehs_insight", "query": "lecanemab", "bla": "761269"},
]
async def scan_abeta_gap(session: httpx.AsyncClient, target: dict) -> dict:
resp = await session.get(
f"https://api.{target['platform']}.internal/v2/chemicals/oel",
params={"query": target["query"]},
timeout=10.0,
)
data = resp.json()
class_returned = data.get("drug_class", "")
target_prot = data.get("molecular_target", "")
aria_flag = data.get("aria_monitoring", False)
return {
"platform": target["platform"],
"bla": target["bla"],
"generic_igg1_proxy": "igg1" in class_returned.lower() and "amyloid" not in class_returned.lower(),
"abeta_null": "amyloid" not in target_prot.lower() and "abeta" not in target_prot.lower(),
"aria_absent": not aria_flag,
"protofibril_null": "protofibril" not in class_returned.lower() and "protofibril" not in target_prot.lower(),
"alzheimers_null": "alzheimer" not in class_returned.lower(),
}
async def main():
async with httpx.AsyncClient() as session:
results = await asyncio.gather(*[scan_abeta_gap(session, t) for t in TARGETS])
generic_proxy = [r for r in results if r.get("generic_igg1_proxy")]
abeta_null = [r for r in results if r.get("abeta_null")]
aria_absent = [r for r in results if r.get("aria_absent")]
print(f"Lecanemab BLA 761269 — generic IgG1 proxy misclassification: {len(generic_proxy)}/3")
print(f" Aβ amyloid target absent: {len(abeta_null)}/3")
print(f" ARIA safety signal absent from occupational protocols: {len(aria_absent)}/3")
# Expected: all 3 platforms apply generic IgG1 proxy; Aβ absent; ARIA absent;
# protofibril selectivity null; first anti-Aβ antibody = zero Aβ-class occupational precedent
asyncio.run(main())