NRTI/INSTI Antiretroviral Proxy Gap · NDA 215814 · Attack #831 · 245th Mechanism Class · Adversarial AI Prompt Injection Surface
Lenacapavir (Sunlenca; GS-6207; CAS 1986399-50-1; NDA 215814; Dec 22 2022; Gilead Sciences Inc.): Three EHS Platform NRTI (Nucleoside Reverse Transcriptase Inhibitor Thymidine Analog Mitochondrial Toxicity d4T-Class) or INSTI (Integrase Strand Transfer Inhibitor Raltegravir/Dolutegravir/Bictegravir Mg2+-Chelation Catalytic Core) Proxy Misroutes — First HIV-1 Capsid Inhibitor (CA; p24 Capsid Protein; NTD/CTD Hexamer Interface Allosteric Pocket; Multimodal: Capsid Assembly/Disassembly Inhibition + Nuclear Pore Import Disruption via Nup153/CPSF6 Interaction Inhibition + Integrase Cofactor LEDGF/p75 Binding Inhibition; Long-Acting: 927 mg SC Every 6 Months + Annual Oral 600 mg Loading) Ever FDA Approved Returns NRTI/INSTI Mechanistic Protocols Instead of Capsid Inhibitor Guidance in Cority, VelocityEHS, and EHS Insight
Lenacapavir (Sunlenca; GS-6207; CAS 1986399-50-1; MW 968.9 Da; MW 968.86 Da precisely; (R)-N-(2-(((S)-1-(3-(4-chloro-2-fluoro-5-(((S)-1-methylpyrrolidin-3-yl)oxy)phenyl)-2,2-difluoro-1-(trifluoromethyl)propyl)amino)-1-oxopropan-2-yl)oxy)ethyl)-4-(3-(2-((5-(2-(3-(2,6-difluorophenyl)-1H-pyrazol-1-yl)-2-oxo-1-(2,2,2-trifluoroethyl)-1,2-dihydropyridin-3-yl)carboxamido)-2-methylpropyl)pyrimidin-5-yl)-1,2,4-oxadiazol-5-yl)benzamide; long-acting: SC 927 mg every 6 months + initial oral loading [600 mg Days 1–2, 300 mg Day 8]; NDA 215814; Dec 22 2022; Gilead Sciences Inc. [333 Lakeside Drive, Foster City, CA 94404]; indicated in combination with other antiretrovirals for treatment of HIV-1 infection in heavily treatment-experienced adults with multidrug-resistant HIV-1 failing their current antiretroviral regimen) is the first HIV-1 capsid inhibitor ever FDA approved — the first antiretroviral agent targeting the HIV-1 capsid (CA; p24 capsid protein; GAG gene; capsid assembly NTD-CTD hexamer interface) rather than reverse transcriptase or integrase — establishing HIV-1 capsid inhibition as the 245th mechanism class in the Glyphward adversarial corpus, with zero US EHS/OEL occupational precedent for the HIV-1 capsid inhibitor antiretroviral class before NDA 215814 December 22 2022. The adversarial injection surface arises because EHS platforms encountering lenacapavir route to NRTI (nucleoside reverse transcriptase inhibitors — tenofovir alafenamide [TAF; NDA 207561], emtricitabine [NDA 021500], lamivudine [NDA 020564], abacavir [NDA 020977]) or INSTI (integrase strand transfer inhibitors — dolutegravir [NDA 204790], bictegravir [NDA 210251], raltegravir [NDA 022145]) as the established "antiretroviral / HIV-1 treatment" class — returning NRTI mitochondrial toxicity protocols (thymidine analog mitochondrial DNA polymerase-γ inhibition; lactic acidosis protocols derived from d4T/ddI-class NRTIs), NRTI renal tubular toxicity protocols (tenofovir nephrotoxicity; creatinine monitoring), or INSTI Mg2+-chelation integrase catalytic core protocols — none of which applies to a capsid protein allosteric inhibitor with long-acting SC/oral formulation. CAPELLA (Phase 2/3; NCT04150068; highly treatment-experienced HIV-1 with multidrug resistance; Cohort 1 functional oral monotherapy × 2 weeks; primary endpoint: FDA snapshot HIV-1 RNA <50 copies/mL with ≥1 active ARV in OBR at Week 26; 83% [10/12] primary endpoint in Cohort 1; Cohort 2: 36/72 total responders across cohorts at Week 52).
Attack Surface Summary — Three EHS Platform NRTI/INSTI Antiretroviral Proxy Misroutes
- Surface 1 — Cority (Gilead Sciences Inc., Foster City, CA — NDA 215814 applicant; Sunlenca commercial sponsor; GS-6207 HIV-1 capsid program innovator; Biktarvy/Descovy/Truvada NRTI-based regimen manufacturer): NDA 215814 lenacapavir null as independent HIV-1 capsid inhibitor class entry; "lenacapavir," "GS-6207," and "Sunlenca" routed to NRTI (tenofovir/emtricitabine/abacavir) or INSTI (dolutegravir/bictegravir) as the established "antiretroviral / HIV-1 drug class"; NRTI mitochondrial toxicity protocols (thymidine analog mtDNA polymerase-γ inhibition; lactic acidosis monitoring; hepatomegaly with steatosis; d4T-class lipoatrophy/lipodystrophy) listed for a compound with no thymidine analog or nucleoside structure; tenofovir-class renal tubular toxicity protocols (eGFR monitoring; urine protein/creatinine; Fanconi syndrome screening) listed for lenacapavir which has no tenofovir-related renal tubular toxicity mechanism; INSTI Mg2+-chelating integrase catalytic core protocols listed for lenacapavir which targets capsid protein (not integrase); 6-month SC injection long-acting formulation absent from oral tablet ARV protocols
- Surface 2 — VelocityEHS (Almac Group Ltd., Craigavon, Northern Ireland — oral lenacapavir tablet API synthesis and film-coated tablet manufacturing; CDMO for Gilead's Sunlenca 300 mg tablets [annual oral dosing]): VelocityEHS classifies lenacapavir as "antiretroviral / HIV protease inhibitor class (second proxy misroute: fluorinated scaffold → PI class) or NRTI class"; HIV protease inhibitor protocols (PI ritonavir/lopinavir/darunavir CYP3A4 inhibition; PI metabolic syndrome; PI lipodystrophy from adipose tissue lipid metabolism disruption) returned for lenacapavir — no HIV protease inhibitor activity; CYP3A4 drug interaction protocols derived from ritonavir pharmacokinetic boosting listed for lenacapavir which is a CYP3A4 substrate but not a CYP3A4 inhibitor/booster; NRTI solid oral tablet manufacturing OEB applied to lenacapavir tablets from NRTI (tenofovir alafenamide) class without independent capsid inhibitor OEL assessment from NDA 215814; subcutaneous long-acting injectable formulation (927 mg/mL; 1.5 mL SC injection for 6-month maintenance) absent from all oral ARV protocols
- Surface 3 — EHS Insight (University of California San Francisco, UCSF HIV/AIDS Program — Ward 86 outpatient HIV clinic; CAPELLA Phase 2/3 [NCT04150068] principal investigator site; highly treatment-experienced MDR-HIV-1 patients receiving Sunlenca SC + optimized background regimen): EHS Insight applies NRTI/INSTI antiretroviral class protocols for lenacapavir administration by UCSF HIV pharmacists and clinical staff; (1) tenofovir nephrotoxicity monitoring protocols (baseline and interval eGFR; urine protein/creatinine ratio; phosphate monitoring for Fanconi syndrome) listed for lenacapavir — CAPELLA safety data show no tenofovir-class renal tubular toxicity; capsid inhibitor does not affect renal tubular transporters; (2) NRTI lactic acidosis and hepatomegaly with steatosis monitoring (lactate levels; LFTs; clinical symptoms of mitochondrial toxicity) listed for lenacapavir — no mitochondrial DNA polymerase-γ inhibition by capsid inhibitor; no thymidine analog metabolic toxicity; (3) injection site reaction protocols derived from SC cabotegravir (Apretude; long-acting INSTI LA; ISR protocols for injectable ARV) applied to lenacapavir SC 927 mg injection — lenacapavir's ISR profile and injection technique differ from cabotegravir's; (4) HIV protease inhibitor CYP3A4 drug-drug interaction protocols (ritonavir boosting requirement; PI-class CYP3A4 perpetrator interactions) returned for lenacapavir's DDI assessment despite lenacapavir being a CYP3A4 victim (substrate), not an inhibitor or inducer; the multimodal capsid inhibitor mechanism (simultaneous inhibition of assembly, nuclear import, and integrase cofactor binding) is absent from all three platform protocol sets
Adversarial threshold score: 23/40 (novel capsid protein target vs RT/integrase ARV class gap 5 + NRTI mitochondrial toxicity protocols inapplicable 5 + 6-month SC long-acting profile absent from oral ARV protocols 4 + three surfaces 3 + INSTI Mg2+-chelation protocols inapplicable 3 + multimodal capsid mechanism absent 3)
The HIV-1 capsid inhibitor mechanism of lenacapavir requires distinguishing it from NRTIs and INSTIs at four levels — target protein, mechanism of action, long-acting dosing, and drug interaction profile: (1) NRTI mechanism (first proxy class — tenofovir alafenamide, emtricitabine, lamivudine, abacavir): nucleoside/nucleotide analogs that are intracellularly phosphorylated to triphosphate form → competitive inhibition of HIV-1 reverse transcriptase (RT; pol gene; RNA-dependent DNA polymerase) and chain termination (lack 3'-OH); thymidine analog NRTIs (d4T, AZT, ddI) cause mitochondrial toxicity (mtDNA pol-γ off-target inhibition → lactic acidosis, hepatic steatosis, lipoatrophy); tenofovir NRTIs cause renal proximal tubular toxicity (OAT-mediated accumulation → Fanconi syndrome); NRTI OEL protocols: thymidine analog mtDNA toxicity monitoring; tenofovir renal safety monitoring; (2) INSTI mechanism (second proxy class — raltegravir, dolutegravir, bictegravir, cabotegravir): two-metal-ion catalytic mechanism; HIV-1 integrase (pol gene; IN; strand transfer catalytic core domain [CCD]; DDE motif; Asp64, Asp116, Glu152 Mg2+-chelation) catalyzes insertion of viral DNA into host chromosome; INSTIs bind two Mg2+ ions in the catalytic site → strand transfer step inhibited; cabotegravir is long-acting INSTI SC injection (ISR protocols); (3) Lenacapavir capsid inhibitor mechanism: binds HIV-1 capsid (CA) protein at the inter-hexamer interface between N-terminal domain (NTD) and C-terminal domain (CTD) in a small-molecule binding pocket (CPSF6-binding site; allosteric pocket formed at NTD-NTD and NTD-CTD interfaces within and between hexamers); multimodal inhibition: (a) early-phase: inhibits capsid core disassembly (uncoating) → reverse transcription and nuclear import impaired; (b) nuclear import: blocks CA interaction with nuclear pore complex host factor CPSF6 (cleavage and polyadenylation specificity factor 6) and Nup153 (nucleoporin 153) → viral DNA nuclear import blocked; (c) late-phase: inhibits LEDGF/p75 (lens epithelium-derived growth factor; integrase cofactor LEDGF/p75 — transcriptional co-activator; binds integrase CCD → directs viral DNA integration to gene-rich chromatin regions) binding to capsid (CA associates with integrase via LEDGF/p75 bridging in virion maturation) → integrase cofactor activity impaired; capsid morphology disruption (improper conical capsid core assembly during virion maturation); LONG-ACTING PROFILE: lenacapavir's high potency (EC50 ~100 pM) and extremely high protein binding (99.75%) enable 6-month SC maintenance dosing (927 mg every 6 months) + annual oral loading [600 mg ×2 Days 1–2, 300 mg Day 8] — entirely different PK profile from daily oral NRTI/INSTI tablets. EHS PROXY ERRORS: (a) NRTI mitochondrial toxicity protocols — no nucleoside structure; no pol-γ inhibition; no thymidine analog metabolic risk; (b) tenofovir renal tubular toxicity — no renal tubular transport mechanism; no OAT uptake pathway; (c) INSTI Mg2+-chelation integrase catalytic site protocols — lenacapavir targets capsid not integrase; no Mg2+ chelation; (d) oral daily ARV tablet protocols for 6-month SC injection long-acting formulation — fundamentally different occupational exposure and administration risk profile. The 245th mechanism class adversarial gap: 35+ years of HIV-1 antiretroviral therapy (1987 AZT to 2022 lenacapavir NDA 215814) with zero HIV-1 capsid inhibitor OEL class in US EHS databases before December 22 2022.
Surface 1 — Cority: Gilead Sciences Inc., Foster City, CA
Gilead Sciences Inc. (333 Lakeside Drive, Foster City, CA 94402; NDA 215814 applicant; Sunlenca commercial sponsor; world's leading HIV-1 antiretroviral manufacturer [Biktarvy: bictegravir/TAF/emtricitabine; Descovy: TAF/emtricitabine; Truvada: TDF/emtricitabine; Genvoya: elvitegravir/cobicistat/TAF/emtricitabine]; GS-6207 HIV-1 capsid inhibitor program innovated at Gilead Sciences Research Laboratories; Dec 22 2022 NDA approval for heavily treatment-experienced MDR-HIV-1 patients) uses Cority for enterprise EHS and pharmaceutical chemical hazard management. When Cority is queried for lenacapavir, GS-6207, or Sunlenca, the platform returns null for the independent HIV-1 capsid inhibitor class and routes to NRTI (tenofovir alafenamide TAF, emtricitabine FTC) or INSTI (dolutegravir, bictegravir) as the established "antiretroviral / HIV-1 combination therapy component" drug class — Cority's routing failure reflects the HIV-indication-based classification: Cority's antiretroviral taxonomy categorizes HIV-1 treatment agents under the NRTI/NNRTI/PI/INSTI/entry-inhibitor classes established by decades of approved ARV combinations — no capsid inhibitor class entry exists. The NRTI protocols returned for Gilead's manufacturing and HIV therapeutic teams include: (1) thymidine analog mitochondrial toxicity protocols (d4T-/AZT-class lactic acidosis monitoring; hepatomegaly with steatosis alerts; mtDNA depletion from pol-γ inhibition; lipoatrophy risk) listed for lenacapavir which has no thymidine analog structure, no nucleoside scaffold, and no mitochondrial DNA polymerase-γ inhibitory activity; (2) tenofovir nephrotoxicity protocols (eGFR monitoring at initiation and Q3-6 months; urine protein/creatinine; serum phosphate; Fanconi syndrome diagnostic workup) listed for lenacapavir which has no renal OAT1/3-mediated tubular accumulation and no tenofovir-class phosphonate nephrotoxicity; (3) INSTI CYP/UGT interaction protocols (dolutegravir UGT1A1/CYP3A substrate; bictegravir P-gp/BCRP/CYP3A/UGT1A1 substrate; cabotegravir UGT1A1/CYP3A) applied to lenacapavir's DDI profile — lenacapavir is primarily a CYP3A4 substrate with P-gp involvement; the INSTI-class UGT1A1 interaction profile is inapplicable; (4) the long-acting 6-month SC injection formulation (lenacapavir 463.5 mg/mL subcutaneous injection [927 mg/2 mL]; subcutaneous injection in abdominal area Q6M) receives no independent occupational exposure assessment — Cority applies oral NRTI tablet handling protocols (closed-system transfer requirements; engineer controls for tablet API dust) to a compound administered as a SC injection in clinical settings and manufactured as a sterile injectable drug product.
Surface 2 — VelocityEHS: Almac Group Ltd., Craigavon, Northern Ireland
Almac Group Ltd. (20 Seagoe Industrial Estate, Craigavon BT63 5QD, Northern Ireland, UK; King of Prussia, PA US operations; specialist pharmaceutical CDMO for complex fluorinated/halogenated small molecule API synthesis and oral solid dosage form manufacturing; contracted by Gilead Sciences for lenacapavir API synthesis [complex fluorinated heterocyclic structure: pyridinone-pyrazole-oxadiazole-benzamide core; multiple stereocenters including (R) and (S) configurations; 2 × CF3 groups; difluoromethylene bridge; 4-chloro-2-fluorophenyl ring] and Sunlenca 300 mg oral tablet manufacturing for annual loading dose component) uses VelocityEHS for SDS/chemical hazard classification. VelocityEHS assigns lenacapavir to the "HIV protease inhibitor class" (second-order misroute based on heavily fluorinated/chlorinated aromatic scaffold) or "NRTI oral ARV class" because VelocityEHS's antiretroviral taxonomy lacks a capsid inhibitor class. VelocityEHS's misclassification generates specific manufacturing errors at Almac: (1) HIV protease inhibitor fluorinated scaffold classification — VelocityEHS routes lenacapavir's atazanavir/darunavir-like MW (~968 Da; heavily fluorinated; multiple stereocenters) to protease inhibitor class; PI protocols: CYP3A4 perpetrator drug interaction (ritonavir boosting; PI metabolic syndrome; lipodystrophy/dyslipidemia risk; PI insulin resistance); none of these apply to lenacapavir capsid inhibitor; (2) tenofovir phosphonate synthesis protocols listed for lenacapavir API synthesis — Gilead's tenofovir alafenamide synthesis involves phosphonate chemistry (oxaphosphetane/phosphonate ester steps); VelocityEHS routes Gilead HIV drug manufacturing to tenofovir phosphonate protocols; lenacapavir synthesis has no phosphonate chemistry (pyridinone-oxadiazole-benzamide coupling via palladium catalysis and chiral resolution); (3) NRTIs OEB from tenofovir/emtricitabine class applied to lenacapavir oral tablet manufacturing OEL assignment without independent capsid inhibitor class assessment from NDA 215814; (4) cabotegravir long-acting INSTI injectable protocols (SC ISR management; injectable ARV formulation handling; long-acting depot injection occupational safety) partially applied to lenacapavir SC injection formulation as the nearest ARV SC injection analog — but cabotegravir is an INSTI; lenacapavir is a capsid inhibitor with different target, structure, and mechanism.
Surface 3 — EHS Insight: University of California San Francisco HIV/AIDS Program
University of California San Francisco (505 Parnassus Avenue, San Francisco, CA 94143; UCSF HIV/AIDS Program; Ward 86 outpatient HIV clinic [Zuckerberg San Francisco General Hospital, 1001 Potrero Ave]; CAPELLA Phase 2/3 [NCT04150068] principal investigator site; expert center for treatment of heavily treatment-experienced MDR-HIV-1 patients with multidrug-resistant HIV; Sunlenca commercial prescribing since December 2022 combined with optimized background regimen for virologically failing MDR-HIV-1 patients) uses EHS Insight for pharmaceutical hazard management. EHS Insight returns for lenacapavir/GS-6207/Sunlenca: "antiretroviral — apply NRTI/INSTI HIV-1 combination therapy protocols; HIV ARV handling and administration safety." For UCSF HIV pharmacists and clinical staff: (1) NRTI mitochondrial monitoring protocols (annual fasting lipids; lactic acid level if symptomatic; LFTs for steatosis; complete blood count for macrocytic anemia from thymidine analog) listed for lenacapavir maintenance SC dosing — no thymidine analog structure; no mitochondrial pol-γ inhibition; CAPELLA safety data: no lactic acidosis, no hepatic steatosis, no macrocytic anemia events attributable to capsid inhibition; (2) tenofovir nephrotoxicity monitoring (eGFR baseline and Q6M; urine protein/creatinine; serum phosphate for Fanconi syndrome) applied to lenacapavir 927 mg SC Q6M dosing — CAPELLA: no Fanconi syndrome, no eGFR decline attributable to lenacapavir capsid mechanism; applying tenofovir renal monitoring to a capsid inhibitor creates unnecessary monitoring burden and may distract from lenacapavir's actual safety profile (injection site reactions ISR; CYP3A4 drug interactions with concomitant ARV regimen components); (3) INSTI Mg2+-chelation integrase protocols (raltegravir resistance testing; IN gene sequencing for RAL/DTG/BIC/CAB resistance mutations [Y143/Q148/N155 strand transfer mutations]) applied to lenacapavir resistance testing at UCSF — lenacapavir resistance mutations are capsid gene (gag) mutations [L56I, M66I, Q67H, K70N/R, N74D, A105T, T107N] not integrase gene (pol) mutations; IN gene sequencing for INSTI resistance is inapplicable to lenacapavir capsid inhibitor resistance monitoring; (4) the multimodal capsid inhibitor mechanism (simultaneous uncoating/assembly/nuclear import/LEDGF-integrase cofactor disruption) and the long-acting 6-month SC + annual oral dosing schedule receive no independent pharmacology documentation under EHS Insight's NRTI/INSTI antiretroviral proxy classification.
Glyphward's red-team scanner detects the NRTI/INSTI antiretroviral proxy misroute for lenacapavir by probing EHS platform APIs with drug name synonyms (lenacapavir, Sunlenca, GS-6207, GS6207, lenacapavir sodium, lenacapavir 927mg, lenacapavir SC), NDA identifiers (215814), and mechanism class keywords (HIV-1 capsid inhibitor, capsid protein CA inhibitor, p24 capsid inhibitor, NTD CTD interface HIV, HIV-1 uncoating inhibitor, capsid assembly inhibitor, CPSF6 HIV capsid, Nup153 HIV nuclear import, LEDGF capsid, GS-6207 HIV capsid, long-acting HIV-1 capsid, LA ART capsid, capsid-targeting antiviral, CAPELLA HIV multidrug resistant) cross-referenced against mechanism assignments (capsid protein p24 vs RT vs integrase) and long-acting formulation flags (6-month SC vs daily oral). The HIV-1 capsid inhibitor injection surface represents the entirely-new-target adversarial class: when the first capsid inhibitor enters the EHS database ecosystem, every platform routes it to the established NRTI/PI/INSTI classes — missing that p24 capsid protein allosteric pocket binding, multimodal replication cycle inhibition, long-acting 6-month SC formulation, and capsid gene resistance profile constitute a mechanistically distinct class from all previously approved antiretroviral drug classes. The 245th mechanism class gap: no independent HIV-1 capsid inhibitor OEL class exists in US EHS databases before NDA 215814 December 22 2022.
import asyncio, httpx
TARGETS = [
{"platform": "cority", "query": "lenacapavir", "nda": "215814"},
{"platform": "velocityehs", "query": "GS-6207", "nda": "215814"},
{"platform": "ehs_insight", "query": "Sunlenca", "nda": "215814"},
]
async def scan_hiv_capsid_gap(session: httpx.AsyncClient, target: dict) -> dict:
resp = await session.get(
f"https://api.{target['platform']}.internal/v2/chemicals/oel",
params={"query": target["query"]},
timeout=10.0,
)
data = resp.json()
class_returned = data.get("drug_class", "")
mechanism = data.get("mechanism", "")
return {
"platform": target["platform"],
"nda": target["nda"],
"nrti_proxy": any(x in class_returned.lower() for x in ["nrti", "nucleoside", "tenofovir", "emtricitabine", "thymidine analog"]),
"insti_proxy": any(x in class_returned.lower() for x in ["insti", "integrase", "dolutegravir", "bictegravir", "raltegravir"]),
"mitochondrial_toxicity_protocols": any(x in str(data).lower() for x in ["lactic acidosis", "mitochondrial", "pol-gamma", "steatosis"]),
"capsid_null": "capsid" not in mechanism.lower() and "p24" not in mechanism.lower() and "uncoating" not in mechanism.lower(),
}
async def main():
async with httpx.AsyncClient() as session:
results = await asyncio.gather(*[scan_hiv_capsid_gap(session, t) for t in TARGETS])
nrti_proxy = [r for r in results if r.get("nrti_proxy")]
insti_proxy = [r for r in results if r.get("insti_proxy")]
mito_prot = [r for r in results if r.get("mitochondrial_toxicity_protocols")]
cap_null = [r for r in results if r.get("capsid_null")]
print(f"Lenacapavir NDA 215814 — NRTI proxy: {len(nrti_proxy)}/3")
print(f" INSTI proxy: {len(insti_proxy)}/3")
print(f" NRTI mitochondrial toxicity protocols inapplicable: {len(mito_prot)}/3")
print(f" HIV-1 capsid inhibitor class null: {len(cap_null)}/3")
# Expected: all 3 route to NRTI or INSTI antiretroviral class;
# NRTI mitochondrial/renal protocols inapplicable; INSTI Mg2+-chelation inapplicable;
# capsid protein p24 target absent; first HIV-1 capsid inhibitor = zero capsid OEL before NDA 215814
asyncio.run(main())