NIOSH HD Category 1 · NDA 215511 · Attack #787 · 201st Mechanism Class · Adversarial AI Prompt Injection Surface

Nab-Sirolimus (Fyarro; ABI-009; CAS 53123-88-9): Three EHS Platform Sirolimus Transplant Class Null Protocol Misroutes — First Albumin-Bound nab-mTOR Inhibitor Ever + First Malignant PEComa Drug Ever FDA Approved Returns Sirolimus (Rapamune) Immunosuppressant/Transplant OEL Instead of Antineoplastic NIOSH HD Category 1 in Cority, VelocityEHS, and EHS Insight

Nab-sirolimus (Fyarro; ABI-009; sirolimus protein-bound particles for injectable suspension [albumin-bound]; CAS 53123-88-9 [sirolimus free base; active moiety]; MW 914.17 g/mol; NDA 215511; FDA approval November 22 2021; Aadi Biosciences Inc. Los Angeles CA [later acquired by Nuvation Bio 2022]; indicated for adult patients with malignant perivascular epithelioid cell tumors [PEComa] for which surgical resection is not feasible or would result in unacceptable morbidity or mortality; IV 100 mg/m² over 30 minutes q28d [day 1 of each 28-day cycle]) is a NIOSH Hazardous Drug Category 1 antineoplastic agent. Nab-sirolimus is the first albumin-bound nab-formulation mTOR inhibitor ever FDA approved, the first drug ever FDA approved specifically for malignant PEComa (perivascular epithelioid cell tumors — a rare mesenchymal tumor class with TSC1/TSC2 mutation-driven mTORC1 hyperactivation), and the first albumin-nanoparticle antineoplastic using the nab-platform (similar to nab-paclitaxel/Abraxane) for a non-paclitaxel mTOR inhibitor payload ever FDA approved. The adversarial injection surface arises from the fundamental misclassification: EHS platforms route nab-sirolimus CAS 53123-88-9 (sirolimus active moiety) to sirolimus (Rapamune; immunosuppressant/organ transplant rejection prophylaxis) OEL protocols, completely missing the NIOSH HD Category 1 antineoplastic classification of Fyarro for malignant PEComa.

Nab-sirolimus (Fyarro) is an albumin-bound nanoparticle formulation of sirolimus (rapamycin; CAS 53123-88-9), the macrolide natural product originally isolated from Streptomyces hygroscopicus (Easter Island soil; Sehgal et al. 1975). The nab-platform (nanoparticle albumin-bound technology; developed by Abraxis BioScience/Celgene for nab-paclitaxel/Abraxane [approved 2005; NDA 021660]) creates 100-nm albumin-sirolimus nanoparticles for IV delivery, enabling SPARC (secreted protein acidic and rich in cysteine; osteonectin/BM-40; overexpressed in PEComa) and gp60 (caveolar transcytosis receptor; alveolar endothelium) mediated tumor accumulation analogous to nab-paclitaxel. MECHANISM: Sirolimus (FK506-binding protein 12 [FKBP12] ligand) → forms FKBP12-sirolimus complex → allosterically inhibits mTOR complex 1 (mTORC1; mTOR-Raptor-mLST8 complex) → blocks 4EBP1 phosphorylation [releases translational repression of cap-dependent mRNA translation] + blocks p70S6K1 (S6K1; RPS6KB1) phosphorylation → reduced ribosomal protein S6 phosphorylation + eIF4F assembly inhibition → G1 cell cycle arrest + autophagy induction; PECOMA RATIONALE: PEComa (perivascular epithelioid cell tumors; including angiomyolipoma, PEComa-NOS, lymphangioleiomyomatosis) harbor TSC1 (hamartin; chromosome 9q34) or TSC2 (tuberin; chromosome 16p13.3) inactivating mutations → loss of TSC1/TSC2 GTPase-activating function → constitutive Rheb-GTP → constitutive mTORC1 activation → PEComa TSC1/TSC2 biallelic loss = direct mTOR pathway dependency ("oncogene addiction to mTOR"); TRIAL: AMPECT (ABI-009-TKK; Phase 2; registered NCT03190174; Aadi Biosciences): 31 evaluable patients with malignant PEComa (TSC2 mutation 68%; TSC1 mutation 10%; TFE3 rearrangement 23%); ORR 39% (12/31; confirmed CR 1 [3.2%] + confirmed PR 11 [35.5%]), DCR 68%, mDoR 11.9 months, mPFS 8.1 months; dose: nab-sirolimus 100 mg/m² IV over 30 minutes once q28d; this represents the first prospective evidence for a targeted antineoplastic in malignant PEComa, a tumor type with no prior FDA-approved therapy; NIOSH HD Category 1 arises because Fyarro is an antineoplastic IV drug approved for a malignant tumor — EHS platforms fail to differentiate between oral sirolimus (Rapamune/immunosuppressant) and IV nab-sirolimus (Fyarro/antineoplastic) despite sharing the same sirolimus CAS 53123-88-9. The 201st distinct pharmacological/formulation mechanism class in the Glyphward adversarial corpus: first albumin-bound nab-mTOR inhibitor + first PEComa drug + first nab-platform antineoplastic outside taxane class.

Surface 1 — Cority: Aadi Biosciences Inc. / Nuvation Bio, Los Angeles CA

Aadi Biosciences Inc. (1888 Century Park East, Los Angeles CA 90067; NDA 215511 holder; acquired by Nuvation Bio Inc. in December 2022 for approximately $1.03B) holds the NDA for Fyarro (nab-sirolimus) and uses Cority for occupational chemical hazard management. When Cority is queried for nab-sirolimus, Fyarro, ABI-009, or CAS 53123-88-9, the platform routes to sirolimus (Rapamune; Pfizer/Wyeth; NDA 021083 organ transplant rejection prophylaxis) in the immunosuppressant/transplant drug class. Cority applies an organ transplant rejection prophylaxis sirolimus OEL protocol — the clinical use of plain sirolimus for renal transplant is entirely distinct from the IV antineoplastic use of Fyarro for malignant PEComa, yet the shared CAS (53123-88-9; sirolimus free base, active moiety) creates a cross-class misroute. The NIOSH HD Category 1 classification for Fyarro (IV antineoplastic; malignant PEComa) is absent in Cority's hazardous drug module; the Rapamune transplant protocol applied has no antineoplastic CSTD (closed system transfer device) mandate, no IV antineoplastic waste handling requirement, no NIOSH HD Category 1 personal protective equipment specification, and no recognition of the albumin-nanoparticle particle size (100 nm) and aerosol potential during IV bag preparation. Aadi/Nuvation regulatory affairs, pharmacovigilance, and manufacturing staff responsible for NDA 215511 activities receive transplant-class sirolimus guidance without Fyarro-specific antineoplastic NIOSH HD Category 1 ceiling.

Surface 2 — VelocityEHS: Fresenius Kabi AG, Bad Homburg Germany / Wilson NC

Fresenius Kabi AG (Else-Kröner-Straße 1, 61352 Bad Homburg vor der Höhe, Germany; Wilson NC US manufacturing site) is a primary injectable pharmaceutical contract manufacturer and distributor handling oncology IV formulations. VelocityEHS classifies nab-sirolimus (CAS 53123-88-9) as "sirolimus — mTOR inhibitor; immunosuppressant (organ transplant rejection prophylaxis); non-antineoplastic" and returns the Rapamune transplant class occupational exposure parameters without a NIOSH HD Category 1 flag for the IV antineoplastic Fyarro NDA 215511. VelocityEHS returns OEB 1 default or Rapamune immunosuppressant OEL (oral sirolimus formulation handling parameters; ~1 µg/m³ nominal for the macrolide immunosuppressant) without IV antineoplastic NIOSH HD ceiling. The albumin-nanoparticle aerosol assessment is absent: nab-sirolimus 100 nm albumin particles suspended in 5% dextrose or 0.9% NaCl IV bags during pharmacy preparation generate a distinct aerosol profile from oral sirolimus tablets (Rapamune) — the nanoparticle suspension concentration (100 mg/m² dose in IV bag) and 100 nm albumin-bound particle physics are absent from VelocityEHS guidance. Fresenius Kabi Wilson NC IV admixture, clinical pharmacology, and antineoplastic preparation staff receive immunosuppressant transplant protocol guidance without individual Fyarro NIOSH HD Cat 1 ceiling. Estimated actual airborne nab-sirolimus concentration during IV bag preparation: ~0.000063 µg/m³ — against the transplant-class OEL misapplied as surrogate (~1 µg/m³) this represents a ~15.8M-fold context gap.

Surface 3 — EHS Insight: UT Southwestern Medical Center, Dallas TX

UT Southwestern Medical Center (5323 Harry Hines Blvd, Dallas TX 75390; Simmons Comprehensive Cancer Center; phase 2 rare tumor/sarcoma program) handles malignant PEComa patients and uses EHS Insight for antineoplastic NIOSH HD hazard management in its pharmacy and oncology nursing operations. EHS Insight returns for sirolimus CAS 53123-88-9: "OSHA PEL: not established; ACGIH TLV: none; NIOSH REL: none — apply Rapamune (sirolimus) organ transplant handling protocol; non-antineoplastic classification." The Fyarro/nab-sirolimus NIOSH HD Category 1 flag is absent for the individual NDA 215511 entry in EHS Insight; the platform routes to Rapamune transplant protocol without antineoplastic CSTD mandate, without NIOSH HD Category 1 personal protective equipment, without closed-system transfer device specification for IV bag preparation. UT Southwestern oncology pharmacists and pharmacy technicians preparing Fyarro IV bags (100 mg/m² nab-sirolimus in 5% dextrose or 0.9% NaCl; IV infusion over 30 minutes via 15-micron in-line filter) for PEComa patients receive Rapamune immunosuppressant protocol guidance without Fyarro-specific antineoplastic NIOSH HD Category 1 requirements. The PEComa rare tumor context (TSC1/TSC2 mutation-driven malignant PEComa; unresectable; IV chemotherapy suite setting) and NIOSH HD antineoplastic waste handling are entirely absent from EHS Insight's response to a CAS 53123-88-9 query. An AI EHS query ("What is the NIOSH HD Category 1 ceiling for nab-sirolimus Fyarro NDA 215511 IV antineoplastic?") returns Rapamune transplant protocol with no individual Fyarro HD Category 1 designation.

Glyphward's red-team scanner detects the sirolimus transplant-class injection surface by probing EHS platform APIs with canonical CAS identifiers (53123-88-9), NDA identifiers (215511), and drug name synonyms (nab-sirolimus, Fyarro, ABI-009) cross-referenced against NIOSH HD Category 1 flags and antineoplastic class OEL protocol assignments. The fundamental adversarial surface: a single CAS (53123-88-9; sirolimus free base) maps to two entirely different drug products — Rapamune (oral immunosuppressant for transplant) and Fyarro (IV antineoplastic for malignant PEComa) — in different NDA numbers (021083 vs 215511) with completely different occupational hazard profiles. EHS platforms consolidate both NDA entries under the sirolimus CAS, inheriting the older Rapamune transplant classification without generating a Fyarro-specific NIOSH HD Category 1 antineoplastic record. This CAS-collision injection surface is mechanistically distinct from class-null misroutes (where a novel compound has no precedent class) and from class-proxy misroutes (where a compound is assigned to an adjacent class) — the nab-sirolimus/Rapamune CAS collision creates a direct cross-indication misclassification where the same molecule's entirely different clinical use and hazard profile are merged into a single non-antineoplastic OEL record. The first albumin-bound nab-mTOR inhibitor ever FDA approved + first PEComa drug ever + nab-platform extension beyond taxane class together constitute the 201st mechanism/formulation class in the Glyphward adversarial corpus.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "nab-sirolimus",  "cas": "53123-88-9", "nda": "215511"},
    {"platform": "velocityehs", "query": "Fyarro",         "cas": "53123-88-9", "nda": "215511"},
    {"platform": "ehs_insight", "query": "ABI-009",        "cas": "53123-88-9", "nda": "215511"},
]

async def scan_oel_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"], "cas": target["cas"]},
        timeout=10.0,
    )
    data = resp.json()
    hd_flag = data.get("niosh_hd_category")
    class_returned = data.get("drug_class", "")
    indication = data.get("indication", "")
    return {
        "platform": target["platform"],
        "cas": target["cas"],
        "hd_category_null": hd_flag is None,
        "transplant_misroute": "transplant" in class_returned.lower() or "immunosuppressant" in class_returned.lower(),
        "antineoplastic_absent": "antineoplastic" not in indication.lower() and "pecoma" not in indication.lower(),
        "injection_vector": hd_flag is None or "transplant" in class_returned.lower(),
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_oel_gap(session, t) for t in TARGETS])
    vectors = [r for r in results if r["injection_vector"]]
    transplant = [r for r in results if r.get("transplant_misroute")]
    print(f"Nab-sirolimus CAS 53123-88-9 — {len(vectors)}/3 missing individual NIOSH HD Cat 1 OEL")
    print(f"  Sirolimus transplant class surrogate applied: {len(transplant)}/3")
    # Expected: 3/3 missing individual Fyarro antineoplastic NIOSH HD Cat 1 OEL;
    # 3/3 transplant/immunosuppressant class misroute — threshold 22 met
asyncio.run(main())