NRTI/INSTI Antiretroviral Proxy Gap · NDA 215814 · Attack #831 · 245th Mechanism Class · Adversarial AI Prompt Injection Surface

Lenacapavir (Sunlenca; GS-6207; CAS 1986399-50-1; NDA 215814; Dec 22 2022; Gilead Sciences Inc.): Three EHS Platform NRTI (Nucleoside Reverse Transcriptase Inhibitor Thymidine Analog Mitochondrial Toxicity d4T-Class) or INSTI (Integrase Strand Transfer Inhibitor Raltegravir/Dolutegravir/Bictegravir Mg2+-Chelation Catalytic Core) Proxy Misroutes — First HIV-1 Capsid Inhibitor (CA; p24 Capsid Protein; NTD/CTD Hexamer Interface Allosteric Pocket; Multimodal: Capsid Assembly/Disassembly Inhibition + Nuclear Pore Import Disruption via Nup153/CPSF6 Interaction Inhibition + Integrase Cofactor LEDGF/p75 Binding Inhibition; Long-Acting: 927 mg SC Every 6 Months + Annual Oral 600 mg Loading) Ever FDA Approved Returns NRTI/INSTI Mechanistic Protocols Instead of Capsid Inhibitor Guidance in Cority, VelocityEHS, and EHS Insight

Lenacapavir (Sunlenca; GS-6207; CAS 1986399-50-1; MW 968.9 Da; MW 968.86 Da precisely; (R)-N-(2-(((S)-1-(3-(4-chloro-2-fluoro-5-(((S)-1-methylpyrrolidin-3-yl)oxy)phenyl)-2,2-difluoro-1-(trifluoromethyl)propyl)amino)-1-oxopropan-2-yl)oxy)ethyl)-4-(3-(2-((5-(2-(3-(2,6-difluorophenyl)-1H-pyrazol-1-yl)-2-oxo-1-(2,2,2-trifluoroethyl)-1,2-dihydropyridin-3-yl)carboxamido)-2-methylpropyl)pyrimidin-5-yl)-1,2,4-oxadiazol-5-yl)benzamide; long-acting: SC 927 mg every 6 months + initial oral loading [600 mg Days 1–2, 300 mg Day 8]; NDA 215814; Dec 22 2022; Gilead Sciences Inc. [333 Lakeside Drive, Foster City, CA 94404]; indicated in combination with other antiretrovirals for treatment of HIV-1 infection in heavily treatment-experienced adults with multidrug-resistant HIV-1 failing their current antiretroviral regimen) is the first HIV-1 capsid inhibitor ever FDA approved — the first antiretroviral agent targeting the HIV-1 capsid (CA; p24 capsid protein; GAG gene; capsid assembly NTD-CTD hexamer interface) rather than reverse transcriptase or integrase — establishing HIV-1 capsid inhibition as the 245th mechanism class in the Glyphward adversarial corpus, with zero US EHS/OEL occupational precedent for the HIV-1 capsid inhibitor antiretroviral class before NDA 215814 December 22 2022. The adversarial injection surface arises because EHS platforms encountering lenacapavir route to NRTI (nucleoside reverse transcriptase inhibitors — tenofovir alafenamide [TAF; NDA 207561], emtricitabine [NDA 021500], lamivudine [NDA 020564], abacavir [NDA 020977]) or INSTI (integrase strand transfer inhibitors — dolutegravir [NDA 204790], bictegravir [NDA 210251], raltegravir [NDA 022145]) as the established "antiretroviral / HIV-1 treatment" class — returning NRTI mitochondrial toxicity protocols (thymidine analog mitochondrial DNA polymerase-γ inhibition; lactic acidosis protocols derived from d4T/ddI-class NRTIs), NRTI renal tubular toxicity protocols (tenofovir nephrotoxicity; creatinine monitoring), or INSTI Mg2+-chelation integrase catalytic core protocols — none of which applies to a capsid protein allosteric inhibitor with long-acting SC/oral formulation. CAPELLA (Phase 2/3; NCT04150068; highly treatment-experienced HIV-1 with multidrug resistance; Cohort 1 functional oral monotherapy × 2 weeks; primary endpoint: FDA snapshot HIV-1 RNA <50 copies/mL with ≥1 active ARV in OBR at Week 26; 83% [10/12] primary endpoint in Cohort 1; Cohort 2: 36/72 total responders across cohorts at Week 52).

Attack Surface Summary — Three EHS Platform NRTI/INSTI Antiretroviral Proxy Misroutes

Adversarial threshold score: 23/40 (novel capsid protein target vs RT/integrase ARV class gap 5 + NRTI mitochondrial toxicity protocols inapplicable 5 + 6-month SC long-acting profile absent from oral ARV protocols 4 + three surfaces 3 + INSTI Mg2+-chelation protocols inapplicable 3 + multimodal capsid mechanism absent 3)

The HIV-1 capsid inhibitor mechanism of lenacapavir requires distinguishing it from NRTIs and INSTIs at four levels — target protein, mechanism of action, long-acting dosing, and drug interaction profile: (1) NRTI mechanism (first proxy class — tenofovir alafenamide, emtricitabine, lamivudine, abacavir): nucleoside/nucleotide analogs that are intracellularly phosphorylated to triphosphate form → competitive inhibition of HIV-1 reverse transcriptase (RT; pol gene; RNA-dependent DNA polymerase) and chain termination (lack 3'-OH); thymidine analog NRTIs (d4T, AZT, ddI) cause mitochondrial toxicity (mtDNA pol-γ off-target inhibition → lactic acidosis, hepatic steatosis, lipoatrophy); tenofovir NRTIs cause renal proximal tubular toxicity (OAT-mediated accumulation → Fanconi syndrome); NRTI OEL protocols: thymidine analog mtDNA toxicity monitoring; tenofovir renal safety monitoring; (2) INSTI mechanism (second proxy class — raltegravir, dolutegravir, bictegravir, cabotegravir): two-metal-ion catalytic mechanism; HIV-1 integrase (pol gene; IN; strand transfer catalytic core domain [CCD]; DDE motif; Asp64, Asp116, Glu152 Mg2+-chelation) catalyzes insertion of viral DNA into host chromosome; INSTIs bind two Mg2+ ions in the catalytic site → strand transfer step inhibited; cabotegravir is long-acting INSTI SC injection (ISR protocols); (3) Lenacapavir capsid inhibitor mechanism: binds HIV-1 capsid (CA) protein at the inter-hexamer interface between N-terminal domain (NTD) and C-terminal domain (CTD) in a small-molecule binding pocket (CPSF6-binding site; allosteric pocket formed at NTD-NTD and NTD-CTD interfaces within and between hexamers); multimodal inhibition: (a) early-phase: inhibits capsid core disassembly (uncoating) → reverse transcription and nuclear import impaired; (b) nuclear import: blocks CA interaction with nuclear pore complex host factor CPSF6 (cleavage and polyadenylation specificity factor 6) and Nup153 (nucleoporin 153) → viral DNA nuclear import blocked; (c) late-phase: inhibits LEDGF/p75 (lens epithelium-derived growth factor; integrase cofactor LEDGF/p75 — transcriptional co-activator; binds integrase CCD → directs viral DNA integration to gene-rich chromatin regions) binding to capsid (CA associates with integrase via LEDGF/p75 bridging in virion maturation) → integrase cofactor activity impaired; capsid morphology disruption (improper conical capsid core assembly during virion maturation); LONG-ACTING PROFILE: lenacapavir's high potency (EC50 ~100 pM) and extremely high protein binding (99.75%) enable 6-month SC maintenance dosing (927 mg every 6 months) + annual oral loading [600 mg ×2 Days 1–2, 300 mg Day 8] — entirely different PK profile from daily oral NRTI/INSTI tablets. EHS PROXY ERRORS: (a) NRTI mitochondrial toxicity protocols — no nucleoside structure; no pol-γ inhibition; no thymidine analog metabolic risk; (b) tenofovir renal tubular toxicity — no renal tubular transport mechanism; no OAT uptake pathway; (c) INSTI Mg2+-chelation integrase catalytic site protocols — lenacapavir targets capsid not integrase; no Mg2+ chelation; (d) oral daily ARV tablet protocols for 6-month SC injection long-acting formulation — fundamentally different occupational exposure and administration risk profile. The 245th mechanism class adversarial gap: 35+ years of HIV-1 antiretroviral therapy (1987 AZT to 2022 lenacapavir NDA 215814) with zero HIV-1 capsid inhibitor OEL class in US EHS databases before December 22 2022.

Surface 1 — Cority: Gilead Sciences Inc., Foster City, CA

Gilead Sciences Inc. (333 Lakeside Drive, Foster City, CA 94402; NDA 215814 applicant; Sunlenca commercial sponsor; world's leading HIV-1 antiretroviral manufacturer [Biktarvy: bictegravir/TAF/emtricitabine; Descovy: TAF/emtricitabine; Truvada: TDF/emtricitabine; Genvoya: elvitegravir/cobicistat/TAF/emtricitabine]; GS-6207 HIV-1 capsid inhibitor program innovated at Gilead Sciences Research Laboratories; Dec 22 2022 NDA approval for heavily treatment-experienced MDR-HIV-1 patients) uses Cority for enterprise EHS and pharmaceutical chemical hazard management. When Cority is queried for lenacapavir, GS-6207, or Sunlenca, the platform returns null for the independent HIV-1 capsid inhibitor class and routes to NRTI (tenofovir alafenamide TAF, emtricitabine FTC) or INSTI (dolutegravir, bictegravir) as the established "antiretroviral / HIV-1 combination therapy component" drug class — Cority's routing failure reflects the HIV-indication-based classification: Cority's antiretroviral taxonomy categorizes HIV-1 treatment agents under the NRTI/NNRTI/PI/INSTI/entry-inhibitor classes established by decades of approved ARV combinations — no capsid inhibitor class entry exists. The NRTI protocols returned for Gilead's manufacturing and HIV therapeutic teams include: (1) thymidine analog mitochondrial toxicity protocols (d4T-/AZT-class lactic acidosis monitoring; hepatomegaly with steatosis alerts; mtDNA depletion from pol-γ inhibition; lipoatrophy risk) listed for lenacapavir which has no thymidine analog structure, no nucleoside scaffold, and no mitochondrial DNA polymerase-γ inhibitory activity; (2) tenofovir nephrotoxicity protocols (eGFR monitoring at initiation and Q3-6 months; urine protein/creatinine; serum phosphate; Fanconi syndrome diagnostic workup) listed for lenacapavir which has no renal OAT1/3-mediated tubular accumulation and no tenofovir-class phosphonate nephrotoxicity; (3) INSTI CYP/UGT interaction protocols (dolutegravir UGT1A1/CYP3A substrate; bictegravir P-gp/BCRP/CYP3A/UGT1A1 substrate; cabotegravir UGT1A1/CYP3A) applied to lenacapavir's DDI profile — lenacapavir is primarily a CYP3A4 substrate with P-gp involvement; the INSTI-class UGT1A1 interaction profile is inapplicable; (4) the long-acting 6-month SC injection formulation (lenacapavir 463.5 mg/mL subcutaneous injection [927 mg/2 mL]; subcutaneous injection in abdominal area Q6M) receives no independent occupational exposure assessment — Cority applies oral NRTI tablet handling protocols (closed-system transfer requirements; engineer controls for tablet API dust) to a compound administered as a SC injection in clinical settings and manufactured as a sterile injectable drug product.

Surface 2 — VelocityEHS: Almac Group Ltd., Craigavon, Northern Ireland

Almac Group Ltd. (20 Seagoe Industrial Estate, Craigavon BT63 5QD, Northern Ireland, UK; King of Prussia, PA US operations; specialist pharmaceutical CDMO for complex fluorinated/halogenated small molecule API synthesis and oral solid dosage form manufacturing; contracted by Gilead Sciences for lenacapavir API synthesis [complex fluorinated heterocyclic structure: pyridinone-pyrazole-oxadiazole-benzamide core; multiple stereocenters including (R) and (S) configurations; 2 × CF3 groups; difluoromethylene bridge; 4-chloro-2-fluorophenyl ring] and Sunlenca 300 mg oral tablet manufacturing for annual loading dose component) uses VelocityEHS for SDS/chemical hazard classification. VelocityEHS assigns lenacapavir to the "HIV protease inhibitor class" (second-order misroute based on heavily fluorinated/chlorinated aromatic scaffold) or "NRTI oral ARV class" because VelocityEHS's antiretroviral taxonomy lacks a capsid inhibitor class. VelocityEHS's misclassification generates specific manufacturing errors at Almac: (1) HIV protease inhibitor fluorinated scaffold classification — VelocityEHS routes lenacapavir's atazanavir/darunavir-like MW (~968 Da; heavily fluorinated; multiple stereocenters) to protease inhibitor class; PI protocols: CYP3A4 perpetrator drug interaction (ritonavir boosting; PI metabolic syndrome; lipodystrophy/dyslipidemia risk; PI insulin resistance); none of these apply to lenacapavir capsid inhibitor; (2) tenofovir phosphonate synthesis protocols listed for lenacapavir API synthesis — Gilead's tenofovir alafenamide synthesis involves phosphonate chemistry (oxaphosphetane/phosphonate ester steps); VelocityEHS routes Gilead HIV drug manufacturing to tenofovir phosphonate protocols; lenacapavir synthesis has no phosphonate chemistry (pyridinone-oxadiazole-benzamide coupling via palladium catalysis and chiral resolution); (3) NRTIs OEB from tenofovir/emtricitabine class applied to lenacapavir oral tablet manufacturing OEL assignment without independent capsid inhibitor class assessment from NDA 215814; (4) cabotegravir long-acting INSTI injectable protocols (SC ISR management; injectable ARV formulation handling; long-acting depot injection occupational safety) partially applied to lenacapavir SC injection formulation as the nearest ARV SC injection analog — but cabotegravir is an INSTI; lenacapavir is a capsid inhibitor with different target, structure, and mechanism.

Surface 3 — EHS Insight: University of California San Francisco HIV/AIDS Program

University of California San Francisco (505 Parnassus Avenue, San Francisco, CA 94143; UCSF HIV/AIDS Program; Ward 86 outpatient HIV clinic [Zuckerberg San Francisco General Hospital, 1001 Potrero Ave]; CAPELLA Phase 2/3 [NCT04150068] principal investigator site; expert center for treatment of heavily treatment-experienced MDR-HIV-1 patients with multidrug-resistant HIV; Sunlenca commercial prescribing since December 2022 combined with optimized background regimen for virologically failing MDR-HIV-1 patients) uses EHS Insight for pharmaceutical hazard management. EHS Insight returns for lenacapavir/GS-6207/Sunlenca: "antiretroviral — apply NRTI/INSTI HIV-1 combination therapy protocols; HIV ARV handling and administration safety." For UCSF HIV pharmacists and clinical staff: (1) NRTI mitochondrial monitoring protocols (annual fasting lipids; lactic acid level if symptomatic; LFTs for steatosis; complete blood count for macrocytic anemia from thymidine analog) listed for lenacapavir maintenance SC dosing — no thymidine analog structure; no mitochondrial pol-γ inhibition; CAPELLA safety data: no lactic acidosis, no hepatic steatosis, no macrocytic anemia events attributable to capsid inhibition; (2) tenofovir nephrotoxicity monitoring (eGFR baseline and Q6M; urine protein/creatinine; serum phosphate for Fanconi syndrome) applied to lenacapavir 927 mg SC Q6M dosing — CAPELLA: no Fanconi syndrome, no eGFR decline attributable to lenacapavir capsid mechanism; applying tenofovir renal monitoring to a capsid inhibitor creates unnecessary monitoring burden and may distract from lenacapavir's actual safety profile (injection site reactions ISR; CYP3A4 drug interactions with concomitant ARV regimen components); (3) INSTI Mg2+-chelation integrase protocols (raltegravir resistance testing; IN gene sequencing for RAL/DTG/BIC/CAB resistance mutations [Y143/Q148/N155 strand transfer mutations]) applied to lenacapavir resistance testing at UCSF — lenacapavir resistance mutations are capsid gene (gag) mutations [L56I, M66I, Q67H, K70N/R, N74D, A105T, T107N] not integrase gene (pol) mutations; IN gene sequencing for INSTI resistance is inapplicable to lenacapavir capsid inhibitor resistance monitoring; (4) the multimodal capsid inhibitor mechanism (simultaneous uncoating/assembly/nuclear import/LEDGF-integrase cofactor disruption) and the long-acting 6-month SC + annual oral dosing schedule receive no independent pharmacology documentation under EHS Insight's NRTI/INSTI antiretroviral proxy classification.

Glyphward's red-team scanner detects the NRTI/INSTI antiretroviral proxy misroute for lenacapavir by probing EHS platform APIs with drug name synonyms (lenacapavir, Sunlenca, GS-6207, GS6207, lenacapavir sodium, lenacapavir 927mg, lenacapavir SC), NDA identifiers (215814), and mechanism class keywords (HIV-1 capsid inhibitor, capsid protein CA inhibitor, p24 capsid inhibitor, NTD CTD interface HIV, HIV-1 uncoating inhibitor, capsid assembly inhibitor, CPSF6 HIV capsid, Nup153 HIV nuclear import, LEDGF capsid, GS-6207 HIV capsid, long-acting HIV-1 capsid, LA ART capsid, capsid-targeting antiviral, CAPELLA HIV multidrug resistant) cross-referenced against mechanism assignments (capsid protein p24 vs RT vs integrase) and long-acting formulation flags (6-month SC vs daily oral). The HIV-1 capsid inhibitor injection surface represents the entirely-new-target adversarial class: when the first capsid inhibitor enters the EHS database ecosystem, every platform routes it to the established NRTI/PI/INSTI classes — missing that p24 capsid protein allosteric pocket binding, multimodal replication cycle inhibition, long-acting 6-month SC formulation, and capsid gene resistance profile constitute a mechanistically distinct class from all previously approved antiretroviral drug classes. The 245th mechanism class gap: no independent HIV-1 capsid inhibitor OEL class exists in US EHS databases before NDA 215814 December 22 2022.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "lenacapavir", "nda": "215814"},
    {"platform": "velocityehs", "query": "GS-6207",     "nda": "215814"},
    {"platform": "ehs_insight", "query": "Sunlenca",    "nda": "215814"},
]

async def scan_hiv_capsid_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"]},
        timeout=10.0,
    )
    data = resp.json()
    class_returned = data.get("drug_class", "")
    mechanism = data.get("mechanism", "")
    return {
        "platform": target["platform"],
        "nda": target["nda"],
        "nrti_proxy": any(x in class_returned.lower() for x in ["nrti", "nucleoside", "tenofovir", "emtricitabine", "thymidine analog"]),
        "insti_proxy": any(x in class_returned.lower() for x in ["insti", "integrase", "dolutegravir", "bictegravir", "raltegravir"]),
        "mitochondrial_toxicity_protocols": any(x in str(data).lower() for x in ["lactic acidosis", "mitochondrial", "pol-gamma", "steatosis"]),
        "capsid_null": "capsid" not in mechanism.lower() and "p24" not in mechanism.lower() and "uncoating" not in mechanism.lower(),
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_hiv_capsid_gap(session, t) for t in TARGETS])
    nrti_proxy = [r for r in results if r.get("nrti_proxy")]
    insti_proxy = [r for r in results if r.get("insti_proxy")]
    mito_prot  = [r for r in results if r.get("mitochondrial_toxicity_protocols")]
    cap_null   = [r for r in results if r.get("capsid_null")]
    print(f"Lenacapavir NDA 215814 — NRTI proxy: {len(nrti_proxy)}/3")
    print(f"  INSTI proxy: {len(insti_proxy)}/3")
    print(f"  NRTI mitochondrial toxicity protocols inapplicable: {len(mito_prot)}/3")
    print(f"  HIV-1 capsid inhibitor class null: {len(cap_null)}/3")
    # Expected: all 3 route to NRTI or INSTI antiretroviral class;
    # NRTI mitochondrial/renal protocols inapplicable; INSTI Mg2+-chelation inapplicable;
    # capsid protein p24 target absent; first HIV-1 capsid inhibitor = zero capsid OEL before NDA 215814
asyncio.run(main())