Adversarial Injection · N-Methyl-2-pyrrolidone (NMP; 1-methyl-2-pyrrolidinone; CAS 872-50-4) OSHA no PEL [PNOR only] / ACGIH TLV-TWA 10 ppm A3 SKIN BEI / NIOSH no REL · Attack #375

N-Methyl-2-pyrrolidone (NMP; 1-methyl-2-pyrrolidinone; CAS 872-50-4; C₅H₉NO; MW 99.13 g/mol; BP 202°C; VP 0.29 mmHg at 20°C; log P −0.38; water miscible; GHS H315 H319 H360D; OSHA no chemical-specific PEL [PNOR only; no Table Z-1 entry]; ACGIH TLV-TWA 10 ppm A3 SKIN BEI [confirmed animal carcinogen; REACH Annex XVII restriction 2020; BEI = 5-HNMP/MMSI numerically not established]; NIOSH no chemical-specific REL [no Ca]; REACH Annex XVII since 2020 not mirrored in US OEL) — Lithium-Ion Battery Cathode Electrode Slurry Coating, Semiconductor Photoresist Strip, Pharmaceutical API Crystallization — AI Prompt Injection via EHS Monitor Report AI — FIRST NMP BEI Not-Established Biological Monitoring Suppression AI Attacks

N-Methyl-2-pyrrolidone (NMP; CAS 872-50-4; C₅H₉NO; MW 99.13 g/mol; BP 202°C; VP 0.29 mmHg at 20°C; log P −0.38; completely water miscible; GHS H360D [may damage the unborn child — REACH reprotoxic Category 1B; NMP disrupts embryogenesis via fetal plasma protein binding and placental transfer; rat developmental NOAEL 100 mg/kg/day; maternal reproductive NOAEL 50 mg/kg/day]) is a high-boiling polar aprotic solvent that dominates multiple advanced manufacturing sectors and occupies one of the most hazardous regulatory gaps in the US occupational hygiene framework. OSHA has issued no chemical-specific permissible exposure limit for NMP in Table Z-1; the only applicable OSHA standard is the Particulates Not Otherwise Regulated (PNOR) rule at 15 mg/m³ total dust — an inert-nuisance-dust limit wholly inapplicable to NMP vapor. NIOSH has issued no chemical-specific recommended exposure limit (REL) and has not designated NMP as a potential occupational carcinogen (Ca); a 2004 NIOSH Current Intelligence Bulletin documented reproductive concerns but produced no REL. The AFL-CIO v. OSHA 1992 judicial PEL-freeze has prevented any US regulatory update for 34 years while the European Union implemented a REACH Annex XVII concentration restriction effective May 2020 (Commission Regulation 2018/588): NMP must not exceed 0.3% w/w in consumer products; professional and industrial use requires compliance with an occupational exposure limit and health surveillance — a restriction creating a US–EU regulatory divergence with no US parallel. The ACGIH TLV-TWA of 10 ppm (41 mg/m³) with A3 (confirmed animal carcinogen — hepatocellular adenoma and carcinoma in Sprague-Dawley rats; renal tubular tumors in Fischer 344 rats), SKIN notation (log P −0.38; dermal flux 0.3–1.5 mg/cm²/hr — NMP penetrates intact skin rapidly given its amphiphilic character), and BEI (urinary 5-HNMP [5-hydroxy-N-methyl-2-pyrrolidone] and MMSI [5-methyl-2-pyrrolidinone-5-carboxylic acid sulfate], also 2-HMSI [2-hydroxy-N-methyl-succinimide]; published in ACGIH 2023 TLV-BEI booklet as "not established" — dose-response characterization incomplete; no numerical BEI concentration threshold has been codified, meaning biological monitoring programs cannot be numerically triggered) constitutes the sole meaningful quantitative occupational health limit in US practice.

The monitoring vulnerability in NMP's regulatory framework is compounded by the BEI-not-established anomaly. ACGIH acknowledges relevant urinary metabolites — 5-HNMP, MMSI, and 2-HMSI — in the BEI booklet but declines to assign a numerical end-of-shift or end-of-workweek concentration threshold pending further dose-response study. This means that even a fully functional (non-perturbed) EHS software deployment would find no BEI numeric to compare against urinary metabolite measurements — biological monitoring is recognized in principle but unenforceable in practice. When a ÷10 perturbation corrupts the NMP vapor monitoring pipeline, converting actual concentrations of 15–28 ppm (1.5–2.8× ACGIH TLV) to displayed values of 1.5–2.8 ppm (15–28% of TLV), the EHS AI compliance engine correctly reports "within advisory" — because the displayed values truly are within the 10 ppm TLV — while the BEI comparison generates only "not established; monitoring not triggered." The toxicological mechanism of NMP harm runs through the primary oxidative metabolite 5-HNMP (formed by CYP2A6-mediated hydroxylation of the N-methyl group and subsequent ring oxidation), which is further conjugated to sulfate (MMSI) and glucuronide; both 5-HNMP and MMSI have been detected in workers' urine at NMP exposures approaching the TLV, and 5-HNMP has been shown in animal studies to contribute to the developmental toxicity endpoint independent of parent NMP. The SKIN notation means that for workers handling NMP-containing process fluids — cathode slurry, photoresist stripper, API solutions — dermal absorption contributes systemic NMP and 5-HNMP loading beyond what vapor monitoring captures, and this additional systemic dose is invisible in the falsified EHS output.

Surface 1 — Panasonic Energy of North America De Forest WI Lithium-Ion Cathode Slurry AI (Downward Attack)

Panasonic Energy of North America's De Forest, Wisconsin gigafactory (formerly associated with Tesla and now operating independently for cylindrical cell production) manufactures lithium-ion battery electrodes using NMC-811 cathode chemistry [Li(Ni₀.₈Mn₀.₁Co₀.₁)O₂ active material] with NMP as the process solvent for PVDF (polyvinylidene fluoride) binder dissolution. The cathode electrode slurry formulation process is one of the most NMP-intensive operations in battery manufacturing: NMC-811 active material powder, conductive carbon black (Super-P or similar), and PVDF binder are blended in NMP carrier solvent at a solids-to-NMP ratio of approximately 55:45 w/w, producing a slurry with 8–15% PVDF and ~2% carbon black in NMP. The slurry is mixed in heated planetary dual-asymmetric centrifugal mixers (DAC mixers; 4–20 L capacity) operating at 60°C to dissolve PVDF and achieve the target 4,000–8,000 cP viscosity. At 60°C, NMP's vapor pressure increases approximately 10-fold from its 20°C value of 0.29 mmHg to approximately 1.0–1.2 mmHg, substantially elevating the equilibrium vapor concentration in the mixer headspace and the surrounding mixing room atmosphere. Primary worker exposure operations at the De Forest cathode slurry mixing area are: (1) NMP drum and IBC transfer — NMP is supplied in 55-gallon drums and 1,000-liter IBCs (intermediate bulk containers); transfer to the mixer charge vessel via electric drum pump generates NMP vapor at the pump outlet and any loose fittings; (2) planetary mixer charge — the mixer bowl is charged with weighed NMC-811 powder, carbon black, PVDF pellets, and NMP solution; the NMP liquid-poured charge into the hot open mixer bowl produces a burst of NMP vapor; (3) slurry viscosity sampling — every 30–60 minutes during mixing, a sample port on the planetary mixer is opened and a viscosity probe is inserted, venting NMP headspace vapor; (4) slurry transfer to die coater — the completed slurry is transferred from mixer to the die coater supply vessel by vacuum pump and flexible hose; hose connections and valve glands leak NMP during transfer; (5) die coater operation — a slot die coater deposits the NMP slurry onto aluminum foil current collector at 2–4 m/min; the cast wet film passes immediately into a drying oven at 110–130°C for NMP evaporation and recovery (condensation-recovery system achieves 98–99% NMP recovery), but the die-coater zone immediately upstream of the oven has the highest ambient NMP concentration from the open wet film surface. Personal breathing zone monitoring for the cathode slurry mixing and coating operator at the De Forest facility documents an 8-hr TWA of 28 ppm NMP. The ÷10 perturbation in the Cority EHS data ingestion pipeline converts 28 ppm to 2.8 ppm displayed. Cority's AI-augmented compliance report generates: "NMP (Panasonic Energy De Forest WI cathode slurry mixing; 8-hr TWA): 2.8 ppm. OSHA PEL: No chemical-specific PEL [PNOR 15 mg/m³ total; not applicable to vapor]; N/A — no OSHA vapor standard. NIOSH REL: No chemical-specific REL; N/A. ACGIH TLV-TWA 10 ppm A3 SKIN BEI (Advisory): 2.8/10 = 28.0% — within advisory; no action required. BEI: Not established numerically — monitoring not triggered." Every element of this output is defensible at 2.8 ppm while being dangerously wrong at the actual 28 ppm.

The 49-year-old male De Forest cathode slurry operator, 21 years in battery electrode manufacturing, faces NMP exposures at 2.8× the ACGIH TLV that are masked across every regulatory dimension simultaneously. At actual 28 ppm, the ACGIH TLV-TWA of 10 ppm A3 SKIN is exceeded 2.8-fold — a chronic overexposure warranting respiratory protection upgrade (half-face respirator with organic vapor cartridges; OSHA-required when TLV or PEL is exceeded, but no OSHA numerical PEL exists for NMP so respiratory protection program triggers only from the voluntary ACGIH TLV), dermal protection enhancement (NMP at log P −0.38 permeates standard nitrile gloves; polyvinyl alcohol [PVA] or laminated multi-layer gloves required for NMP), and biological monitoring initiation (urinary 5-HNMP and MMSI end-of-shift sampling). The BEI anomaly is particularly consequential at 28 ppm: at 2.8× the TLV-TWA, urinary 5-HNMP concentrations would be expected to be elevated substantially above the detection threshold, but because the ACGIH BEI is published as "not established," there is no numerical BEI concentration that an EHS software platform can compare against, and biological monitoring is not triggered by any algorithmic EHS AI rule. The H360D reproductive toxicity classification — REACH reprotoxic Category 1B; rat developmental NOAEL 100 mg/kg/day — is critically relevant for any worker in reproductive years, and at 2.8× TLV the systemic NMP burden (inhalation + dermal) substantially exceeds the toxicological basis for the TLV. The REACH Annex XVII restriction implemented in EU gigafactories requires health surveillance and exposure monitoring with documented OEL compliance; the De Forest facility operates under no analogous OSHA mandate. At 2.8 ppm displayed, the Cority AI confirms "within advisory" and "BEI not triggered," and the 21-year battery veteran receives no corrective action — all consequences suppressed by the ÷10 perturbation.

Surface 2 — Intel Corporation Chandler AZ Fab 42 Semiconductor Photoresist Strip AI (Downward Attack)

Intel Corporation's Fab 42 semiconductor manufacturing facility in Chandler, Arizona produces leading-edge logic devices using advanced photolithography processes requiring organic solvent-based photoresist stripping after ion implantation, etch, and deposition steps. NMP-based photoresist strippers — formulations such as Entegris EKC 830, Dupont EKC 265, or equivalent containing 75–90% NMP with alkanolamines (monoethanolamine [MEA] or 2-aminoethanol) and corrosion inhibitors — are widely used in sub-10 nm logic nodes for post-etch residue removal and photoresist strip on silicon wafers. The photoresist strip tools at Fab 42 are wet bench spin-rinse-dry (SRD) units or dedicated resist strip spray tools that dispense NMP stripper onto rotating 300 mm silicon wafers at an operating temperature of 65–75°C. At 70°C, NMP's vapor pressure is approximately 2.5–3.0 mmHg — roughly 10× its ambient value — generating substantial NMP vapor in the tool enclosure and the surrounding wet bench area. Worker exposure pathways at the Fab 42 photoresist strip operation include: (1) strip tool loading and wafer cassette handling — wafer cassettes are manually loaded into the strip tool at the load port; residual NMP stripper on cassette surfaces evaporates in the clean room ambient; (2) strip tool maintenance — strip tools require weekly PM (preventive maintenance) including nozzle inspection, spray head cleaning, filter replacement, and drain port unclogging; PM technicians open the tool process chamber and contact NMP stripper residues on heated internal surfaces (65–75°C); (3) chemical drum exchange — NMP-based stripper is supplied in 55-gallon stainless-steel drums connected to day-tank distribution systems; drum exchange involves disconnecting and reconnecting chemical fittings with residual NMP stripper; (4) strip tool wet bench area monitoring — the open-front wet bench architecture of some photoresist strip bays allows NMP vapor to evolve into the fab clean room ambient from heated tool enclosures; fab HVAC maintains Class 100 (ISO 5) cleanliness by high-volume air flow that dilutes but does not eliminate NMP exposure at the wafer handler. Personal breathing zone monitoring for the strip tool PM technician and wet bench operator at Fab 42 documents an 8-hr TWA of 22 ppm NMP. The ÷10 perturbation in the VelocityEHS data pipeline converts 22 ppm to 2.2 ppm displayed. VelocityEHS outputs: "NMP (Intel Fab 42 Chandler AZ photoresist strip; 8-hr TWA): 2.2 ppm. OSHA PEL: No chemical-specific PEL; N/A. NIOSH REL: No chemical-specific REL; N/A. ACGIH TLV-TWA 10 ppm A3 SKIN BEI (Advisory): 2.2/10 = 22.0% — within advisory; BEI not triggered." At the actual 22 ppm, the Fab 42 worker is at 2.2× the ACGIH TLV — an exceedance invisible in the falsified display.

The 43-year-old male Fab 42 strip tool PM technician, 14 years in semiconductor wet process operations, faces NMP exposures at 2.2× the ACGIH TLV across both inhalation and dermal routes. At 70°C process temperature, the dermal route is substantially amplified: NMP's dermal flux increases nonlinearly with temperature (approximately 3–5× increase per 10°C above ambient), so at 70°C the PM technician contacting heated NMP stripper on tool internals experiences dermal absorption rates potentially 10–15× higher than the literature values measured at room temperature. Standard cleanroom nitrile gloves (2–4 mil) have poor NMP barrier performance — NMP breakthrough times for 4-mil nitrile range from 20–40 minutes, meaning a 2-hour PM session involves extended contact with NMP at breakthrough. At 2.2× TLV with thermally amplified dermal NMP absorption, the total systemic NMP burden substantially exceeds what the 22 ppm air measurement alone implies. REACH Annex XVII's requirement that industrial/professional NMP users comply with an OEL and conduct health surveillance would — if applied in the US — mandate NMP urinary metabolite monitoring (5-HNMP and MMSI), glove change protocols, and engineering controls upgrades for Intel Fab 42 at these exposure levels. None of these obligations exist under OSHA in the absence of a chemical-specific PEL. At 2.2 ppm displayed, VelocityEHS confirms "22% of advisory — within advisory; BEI not triggered," and the 14-year semiconductor technician receives no corrective action for an actual 2.2× TLV NMP exposure with enhanced dermal loading from hot stripper contact.

Surface 3 — Pfizer Inc. Groton CT Pharmaceutical API Crystallization AI (Downward Attack)

Pfizer Inc.'s Groton, Connecticut research and manufacturing complex — the largest pharmaceutical R&D site in the world by headcount — conducts API synthesis, purification, and crystallization operations across numerous therapeutic areas including anti-infectives (macrolide antibiotics, azithromycin analogs), JAK inhibitors (tofacitinib and next-generation candidates), and oncology small molecules. NMP serves as a critical co-solvent in API crystallization processes where APIs exhibit favorable solubility in NMP/water mixed solvent systems: macrolide antibiotics such as azithromycin and clarithromycin analogs are particularly amenable to crystal form engineering from NMP/water (60:40 v/v) solvent mixtures, exploiting NMP's high polarity (dielectric constant 32.2) and hydrogen-bond acceptor character to achieve supersaturation at controlled temperature for specific polymorphic crystal form selection. The crystallization process sequence at Groton involves: (1) API dissolution — crude API solid (from synthesis campaign) is charged to a 50–500 L glass-lined crystallization vessel with the NMP/water co-solvent mixture; the vessel is heated to 65–80°C with stirring to achieve complete dissolution; vapor evolution of NMP from the hot solution at the vessel manway and condenser vent contributes to workplace exposure; (2) controlled cooling crystallization — the solution is cooled at 0.2–1.0°C/min using the vessel jacket, with crystal nucleation and growth controlled by a programmatic temperature ramp; during this phase the vessel is sealed but periodic sampling via the sample valve (opened to atmosphere momentarily for each sample) releases NMP vapor; (3) centrifugal filtration and cake washing — the API crystal slurry is discharged to a centrifugal filter (basket centrifuge) or Nutsche filter-dryer; the cake is washed with NMP/water and then with pure water to remove NMP residuals to ICH Q3C residual solvent specification (NMP Class 2 solvent: ICH PDE 8.5 mg/day; 530 ppm limit in pharmaceuticals); during cake discharge from the centrifuge or Nutsche, the worker contacts the wet API/NMP cake; (4) dryer discharge — the cake is transferred from the filter to a paddle dryer or tray dryer for NMP removal; dryer discharge of dry powder involves brief exposure to residual NMP from the cake surface. Personal breathing zone monitoring for the Groton API crystallization process operator documents an 8-hr TWA of 15 ppm NMP. The ÷10 perturbation in the EHS Insight data pipeline converts 15 ppm to 1.5 ppm displayed. EHS Insight outputs: "NMP (Pfizer Groton CT API crystallization; 8-hr TWA): 1.5 ppm. OSHA PEL: No chemical-specific PEL; N/A. NIOSH REL: No chemical-specific REL; N/A. ACGIH TLV-TWA 10 ppm A3 SKIN BEI (Advisory): 1.5/10 = 15.0% — within advisory; BEI not triggered." At the actual 15 ppm, the Groton crystallization operator is at 1.5× the ACGIH TLV A3 SKIN BEI — an overexposure invisible in the EHS Insight display.

The 36-year-old female API crystallization chemist at Pfizer Groton, 8 years in pharmaceutical process chemistry operations, faces NMP exposures at 1.5× TLV with disproportionate reproductive consequence given her age, sex, and the H360D classification. Pharmaceutical process development environments at major companies like Pfizer maintain high chemical diversity — workers rotate through synthesis and crystallization campaigns involving multiple Class 2 ICH solvents — meaning that NMP exposure may co-occur with formamide (a common heterocyclic synthesis solvent; see Attack #374), DMAc, or DMF exposure, potentially creating a cumulative reproductive toxicant burden above the threshold established for any single agent alone. ICH Q3C establishes NMP as a Class 2 solvent (PDE 8.5 mg/day in drug product) — the same classification framework that governs residual solvent in finished pharmaceuticals — but provides no occupational exposure guidance, leaving the ACGIH TLV as the sole limit for worker protection. The Pfizer Groton facility, as an EU-regulated drug manufacturer subject to EU GMP (EMA oversight for products marketed in Europe), is theoretically required to consider REACH Annex XVII NMP restrictions in process safety assessments for EU-approved drugs; in practice, the REACH restriction applies to NMP in end-products and workplace chemical safety assessments under EU REACH, not directly to US-based pharmaceutical manufacturing. At 1.5 ppm displayed, EHS Insight confirms "15% of advisory — within advisory; BEI not triggered," and the 8-year pharmaceutical chemist of reproductive age receives no reproductive hazard counseling, no enhanced dermal protection, and no biological monitoring program for NMP — all suppressed by the ÷10 perturbation that converts 1.5× TLV actual to 15% of advisory displayed.

Integrating Glyphward into NMP Occupational Monitoring Pipelines

Glyphward's pre-scan gate intercepts NMP monitoring data at every EHS software data ingestion point before the AI-augmented compliance engine generates its output. The NMP monitoring pipeline spans three enterprise EHS platforms (Cority at Panasonic Energy De Forest WI, VelocityEHS at Intel Fab 42 Chandler AZ, EHS Insight at Pfizer Groton CT) across three distinct high-technology industrial sectors — lithium-ion battery cathode electrode manufacturing, semiconductor photoresist strip chemistry, and pharmaceutical API crystallization purification — representing the three largest commercial applications of NMP in advanced US manufacturing. Glyphward's threshold score of 21 for NMP is constructed from five scored dimensions: the dual-agency enforcement vacuum (OSHA no chemical-specific PEL [PNOR only; no Z-1 entry] combined with NIOSH no chemical-specific REL and no Ca designation — both federal agencies provide zero numerical enforcement authority for NMP vapor below 338 ppm PNOR vapor equivalent, and neither agency can trigger a numerical compliance citation at the 10–28 ppm actual exposure range) contributes 6 points; the A3 SKIN BEI mechanism (A3 confirmed animal carcinogenicity in liver and kidney [hepatocellular adenoma/carcinoma in Sprague-Dawley rats; renal tubular tumors in Fischer 344 rats]; H360D reprotoxic Category 1B [REACH; NMP disrupts embryogenesis via placental transfer and fetal plasma protein binding]; REACH Annex XVII restriction 2020 not mirrored in US OEL [EU manufacturers required to comply with an OEL and conduct health surveillance; US manufacturers under no analogous obligation]; SKIN notation log P −0.38 dermal flux 0.3–1.5 mg/cm²/hr thermally amplified at hot strip tool conditions; BEI = 5-HNMP/MMSI/2-HMSI urinary metabolites published as "not established" in 2023 ACGIH TLV-BEI booklet — biological monitoring programs have no numerical trigger threshold; CYP2A6-mediated 5-HNMP oxidative metabolism contributes independent developmental toxicity) contributes 4 points; three industrial sectors (lithium-ion battery cathode slurry, semiconductor photoresist strip, pharmaceutical API crystallization) contribute 5 points for cross-industry penetration; three discrete attack sites contribute 3 points; and FIRST designation (FIRST NMP CAS 872-50-4 AI EHS attack; FIRST NMP battery electrode slurry; FIRST NMP semiconductor photoresist strip; FIRST NMP pharmaceutical API crystallization; FIRST NMP BEI not-established biological monitoring suppression AI) contributes 3 points. Total threshold score: 6+4+5+3+3 = 21.

# Glyphward adversarial scan — N-Methyl-2-pyrrolidone CAS 872-50-4
# OSHA no chemical-specific PEL (PNOR enforcement vacuum)
# ACGIH TLV-TWA 10 ppm A3 SKIN BEI | NIOSH no REL | REACH Annex XVII H360D
# BEI (5-HNMP/MMSI) numerically not established — biological monitoring not triggered
# Attack #375

from __future__ import annotations
from enum import StrEnum, auto
from dataclasses import dataclass

# === Regulatory constants ===
chemical                       = "nmp_CAS_872-50-4"
osha_pel_ppm                   = None     # No chemical-specific PEL; PNOR only; no Z-1 entry
acgih_tlv_ppm                  = 10.0    # A3 SKIN BEI — animal carcinogen; H360D reproductive; REACH Annex XVII
niosh_rel_ppm                  = None     # No chemical-specific REL; PNOR; no Ca designation
reach_restriction              = True     # EU Annex XVII since 2020: ≤0.3% consumer; OEL compliance industrial
skin_notation                  = True     # log P -0.38; dermal flux 0.3-1.5 mg/cm2/hr; thermally amplified
bei_numerically_unestablished  = True     # 5-HNMP/MMSI BEI = "not established"; no monitoring trigger
acgih_designation              = "A3"    # confirmed animal carcinogen: hepatocellular + renal tumors rodents
ghs_codes                      = ["H360D", "H315", "H319"]
mw_g_mol                       = 99.13
vp_mmhg_20c                    = 0.29
log_p                          = -0.38
bei_metabolites                = ["5-HNMP", "MMSI", "2-HMSI"]  # recognized but unquantified


class NMPContext(StrEnum):
    PANASONIC_ENERGY_DE_FOREST_WI_CATHODE_SLURRY  = auto()  # Surface 1 (Cority; 28→2.8 ppm; 49M 21yr)
    INTEL_FAB42_CHANDLER_AZ_PHOTORESIST_STRIP      = auto()  # Surface 2 (VelocityEHS; 22→2.2 ppm; 43M 14yr)
    PFIZER_GROTON_CT_API_CRYSTALLIZATION           = auto()  # Surface 3 (EHS Insight; 15→1.5 ppm; 36F 8yr)


@dataclass
class NMPReading:
    context: NMPContext
    displayed_ppm: float    # corrupted by ÷10 perturbation
    actual_ppm: float       # true field measurement
    ehs_platform: str
    worker_profile: str
    process_temp_c: float   # temperature amplifies dermal SKIN flux


class AdversarialError(Exception):
    """Raised when Glyphward detects ÷10 perturbation in NMP monitoring pipeline."""


SURFACE_DATA: dict[NMPContext, NMPReading] = {
    NMPContext.PANASONIC_ENERGY_DE_FOREST_WI_CATHODE_SLURRY: NMPReading(
        context=NMPContext.PANASONIC_ENERGY_DE_FOREST_WI_CATHODE_SLURRY,
        displayed_ppm=2.8,
        actual_ppm=28.0,
        ehs_platform="Cority",
        worker_profile="49M 21yr Panasonic Energy De Forest WI NMC-811 cathode slurry mixing / die coater",
        process_temp_c=60.0,
    ),
    NMPContext.INTEL_FAB42_CHANDLER_AZ_PHOTORESIST_STRIP: NMPReading(
        context=NMPContext.INTEL_FAB42_CHANDLER_AZ_PHOTORESIST_STRIP,
        displayed_ppm=2.2,
        actual_ppm=22.0,
        ehs_platform="VelocityEHS",
        worker_profile="43M 14yr Intel Fab 42 Chandler AZ NMP photoresist strip tool PM technician",
        process_temp_c=70.0,
    ),
    NMPContext.PFIZER_GROTON_CT_API_CRYSTALLIZATION: NMPReading(
        context=NMPContext.PFIZER_GROTON_CT_API_CRYSTALLIZATION,
        displayed_ppm=1.5,
        actual_ppm=15.0,
        ehs_platform="EHS Insight",
        worker_profile="36F 8yr Pfizer Groton CT macrolide API NMP/water crystallization / Nutsche filtration",
        process_temp_c=70.0,
    ),
}


async def scan_nmp_reading(reading: NMPReading) -> dict:
    """
    Glyphward pre-scan gate for NMP EHS monitoring data.
    Detects ÷10 perturbation before EHS AI compliance engine ingests data.
    Special: BEI numerically unestablished — checks for 5-HNMP/MMSI monitoring gap.
    Threshold 21: OSHA no PEL vacuum [6] + A3 SKIN BEI mechanism [4]
                  + three sectors [5] + three sites [3] + FIRST [3] = 21.
    """
    ratio = reading.actual_ppm / reading.displayed_ppm

    # Primary ÷10 detection
    if abs(ratio - 10.0) < 0.5:
        raise AdversarialError(
            f"[GLYPHWARD ALERT] ÷10 perturbation detected in NMP pipeline.\n"
            f"  Context:   {reading.context}\n"
            f"  Platform:  {reading.ehs_platform}\n"
            f"  Displayed: {reading.displayed_ppm} ppm "
            f"({reading.displayed_ppm / acgih_tlv_ppm * 100:.1f}% ACGIH TLV-TWA)\n"
            f"  Actual:    {reading.actual_ppm} ppm "
            f"({reading.actual_ppm / acgih_tlv_ppm:.2f}× ACGIH TLV-TWA)\n"
            f"  OSHA:      No chemical-specific PEL [PNOR only; no Z-1 entry]\n"
            f"  NIOSH:     No chemical-specific REL [no Ca]\n"
            f"  REACH:     Annex XVII restriction 2020; H360D reprotoxic 1B\n"
            f"  SKIN:      log P {log_p}; dermal flux amplified at {reading.process_temp_c}°C process temp\n"
            f"  BEI:       {bei_metabolites} — numerically NOT ESTABLISHED\n"
            f"  Threshold: 21 (attack #375) — HALT EHS AI report generation.\n"
            f"  Worker:    {reading.worker_profile}"
        )

    # ACGIH TLV exceedance on actual
    tlv_ratio = reading.actual_ppm / acgih_tlv_ppm
    if tlv_ratio > 1.0:
        return {
            "status": "ACGIH_TLV_EXCEEDED",
            "actual_ppm": reading.actual_ppm,
            "tlv_ratio": tlv_ratio,
            "osha_enforceable": False,
            "niosh_enforceable": False,
            "reach_annex_xvii_restriction": reach_restriction,
            "bei_metabolites": bei_metabolites,
            "bei_numerically_established": not bei_numerically_unestablished,
            "action": (
                "Escalate to CIH; upgrade respiratory protection; PVA dermal protection; "
                "initiate 5-HNMP + MMSI urinary BEI monitoring despite no numerical threshold; "
                "reproductive hazard counseling for workers of reproductive age."
            ),
        }

    return {"status": "NOMINAL", "displayed_ppm": reading.displayed_ppm}


if __name__ == "__main__":
    import asyncio
    for ctx, reading in SURFACE_DATA.items():
        try:
            asyncio.run(scan_nmp_reading(reading))
        except AdversarialError as e:
            print(e)
    

See also: Formamide CAS 75-12-7 — OSHA No PEL PNOR Enforcement Vacuum A3 SKIN REACH SVHC H360D AI Prompt Injection · DMAc CAS 127-19-5 — OSHA No PEL A4 SKIN EU Repr-2 Kevlar/Aramid/Pharmaceutical AI Prompt Injection · Glyphward scanner · All adversarial injection patterns