Prompt injection in phthalic anhydride PA o-xylene air oxidation V₂O₅/TiO₂ catalyst AI

Three adversarial injection surfaces in phthalic anhydride PA o-xylene air oxidation AI

1. Salt bath temperature display AI (ABB Totalflow / Yokogawa EJX110A / Honeywell STT35H thermocouple transmitter in molten KNO₃/NaNO₂/NaNO₃ Hitec salt bath — rendered DCS salt bath temperature display AI classifying 340–360°C design operating window — 107th upward attack; FIRST PA phthalic anhydride AI attack; FIRST o-xylene air oxidation AI attack; FIRST V₂O₅/TiO₂ salt bath reactor AI attack; FIRST molten salt bath circulation AI attack)

The molten salt bath temperature is the master process control variable in o-xylene/PA multi-tubular fixed-bed reactor operation. The salt bath (Hitec salt: 53 wt% KNO₃ + 40 wt% NaNO₂ + 7 wt% NaNO₃; a ternary eutectic with melting point 142°C; used at 340–360°C operating temperature — well above the melting point but below the decomposition onset of approximately 450–480°C for Hitec salt, above which the nitrate/nitrite mixture begins releasing oxygen; density at 350°C: 1,854 kg/m³; specific heat at 350°C: 1.48 kJ/(kg·K); thermal conductivity at 350°C: 0.56 W/(m·K); dynamic viscosity at 350°C: 2.9 mPa·s) determines the tube wall temperature of all 25,000 catalyst tubes on the shell side and hence controls the temperature profile inside each tube from the inlet to the hot-spot maximum. The governing heat transfer relationship at the tube wall is: q″ = U × (T​hot‑spot − T​bath), where U is the overall heat transfer coefficient from the catalyst bed through the tube wall to the salt (typically 200–400 W/(m²·K) for this geometry at the design salt velocity of 0.8–1.2 m/s past the tube OD); at T​bath = 350°C and a typical hot-spot internal temperature of 420°C, the tube wall temperature is approximately 360–375°C — which is within the material capability of the austenitic stainless or carbon steel tube (ASTM A179 seamless tube; yield strength at 360°C approximately 180 MPa; well above the shell-side molten salt pressure of approximately 0.5–1 bar gauge). The salt bath temperature is measured at multiple points inside the reactor shell (typically 8–12 thermocouple ports distributed radially and axially through the shell-side space above and below the tube bundle) and at the pump suction (bulk exit temperature) and pump discharge (bulk return temperature after passing through the salt cooler). The primary DCS display shows the bulk salt bath temperature at the pump suction (outlet from the reactor shell) — the highest temperature point in the salt loop — as the safety-critical indicator of whether the salt is absorbing the reaction exotherm within design limits. Instruments: Yokogawa EJX110A transmitter with K-type thermocouple (Chromel-Alumel; range 0–700°C; accuracy ±1.5°C per IEC 60584-2 tolerance class 1 for K-type; HART 4–20 mA; SIL 2 rated for SIS loop); ABB Totalflow Series 3780 thermocouple transmitter (legacy installations); Honeywell STT35H Smart Temperature Transmitter (4–20 mA/HART; diagnostics for thermocouple drift and sensor degradation).

The adversarial upward pixel attack on the salt bath temperature display shows 349°C (within the design 340–360°C operating window; AI reads “salt bath temperature 349°C; within 340–360°C design operating range; tube hot-spot temperatures estimated at 410–425°C based on historic exotherm profile; PA selectivity estimated 79–81%; no salt bath temperature corrective action required; continue current feed rate”) when the actual salt bath temperature is 372°C (12°C above the 360°C design maximum alarm setpoint; salt bath overtemperature condition that has developed over approximately 1–2 hours from a combination of: increased o-xylene feed concentration above design (e.g., 90 g/m³ actual vs 75 g/m³ design due to vaporizer control failure), and reduced salt cooler heat removal (e.g., from salt cooler fouling or air cooler fan failure)). Display range 310–400°C on 200 px (2.222 px/°C); actual 372°C at pixel position (372 − 310) × 2.222 = 138 px from the bottom of the scale → ±8 DN perturbation → (138 − 8–Â8) = 87 px at displayed position → AI reads (87 / 2.222) + 310 = 349°C. At actual salt bath 372°C: the reactor hot-spot internal gas temperature, which is normally 420–430°C at 350°C bath, rises to approximately 442–455°C (proportional shift based on the ΔT across the tube wall); at 450–455°C hot-spot temperature: (1) the V₂O₅/TiO₂ catalyst undergoes accelerated sintering — anatase TiO₂ surface area decreases from the design ~25 m²/g at a rate of approximately 5–10% per 100°C above the design operating temperature; (2) PA yield drops as combustion to CO₂ and H₂O increases; the Arrhenius activation energy for the CO₂ pathway (~80–100 kJ/mol) is higher than for the PA pathway (~60–80 kJ/mol), so at elevated temperature the CO₂ selectivity increases disproportionately; (3) the additional exothermic heat from increased CO₂ formation further raises the hot-spot temperature in a thermal runaway feedback: higher bath temperature → higher hot-spot → more CO₂ oxidation → more exotherm → further hot-spot rise; (4) tubes in the highest-exotherm zone (the first 200–400 mm of catalyst bed, near the top tube sheet where o-xylene concentration is highest) experience tube wall temperatures of 385–400°C; above approximately 600°C on the gas-phase side (achievable in a severe hot-spot runaway with combustion of both o-xylene and intermediate PA), carbon steel tubes lose mechanical integrity; a tube failure (burnout, pinhole, or seam failure at a weld) allows the o-xylene/air process gas mixture (at process pressure 0.3–0.5 bar gauge) to contact the molten Hitec salt (at 372°C; 0.5–1 bar gauge) — an energetic reaction of fuel (o-xylene vapors at 1.4–1.9 vol% in air, between LEL 0.9% and UEL 6.7%) with an oxidizing molten salt containing 53 wt% KNO₃ (a strong oxidizer above its melting point; AIT of o-xylene in contact with molten KNO₃ is estimated to be 200–250°C based on laboratory testing of nitrate salt oxidizer systems — far below the 372°C salt temperature at the attack condition). Deflagration or detonation within the reactor shell at 0.3–0.5 bar gauge generates an overpressure pulse that can fail the reactor shell welds; o-xylene PSM TQ 10,000 lbs (4,536 kg); CERCLA RQ 100 lbs (45 kg). The Glyphward pre-scan gate on the salt bath temperature display AI prevents the AI monitoring system from reading the falsified 349°C display and deferring corrective action — specifically, the pre-scan gate would flag the adversarial perturbation before the AI generates the “salt bath within operating window” assessment, ensuring the DCS high-temperature alarm at 360°C is not bypassed by the falsified AI reading. Free tier — 10 scans/day, no card required.

2. Salt bath circulation pump flow display AI (Emerson F-Series / Siemens MAG 6000 electromagnetic flow meter on molten salt circulation pump discharge header — rendered DCS salt bath circulation pump flow display AI classifying 7,200 m³/hr design flow — 107th downward attack; FIRST PA salt circulation AI attack; FIRST molten salt electromagnetic flow meter AI attack)

The molten salt circulation pump is the heart of the PA reactor thermal management system. The pump — a large vertical single-stage centrifugal pump (Sulzer WPK or Flowserve HPX series; impeller material: austenitic stainless steel 316L; casing: alloy steel; shaft seal: mechanical seal or packed stuffing box designed for molten salt service at 340–360°C; bearing housing: water-cooled; motor: 400–900 kW) — drives the 1,854 kg/m³ molten Hitec salt through the reactor shell at 7,000–8,000 m³/hr. The pump discharge flow is measured by an electromagnetic flow meter (EMF; Emerson Rosemount F-Series 8705 or F-Series 8711 with magnetic coil; or Siemens MAGFLO MAG 6000; pipe bore 400–600 mm for the pump discharge header at these flow rates; lined with PTFE or alumina ceramic lining; HART 4–20 mA output; calibrated 0–12,000 m³/hr) — electromagnetic flow metering is essential here because molten salt is electrically conducting (conductivity at 350°C: approximately 0.9 S/cm for Hitec salt), which enables the EMF principle but also requires electrode material compatibility with the molten nitrate/nitrite salt (typically Monel or Hastelloy C276 electrodes). The design salt circulation rate of approximately 7,200 m³/hr provides: (a) a shell-side salt velocity of 0.8–1.2 m/s past the tube ODs (required for adequate convective heat transfer coefficient on the shell side; h​shell ≈ 2,000–3,500 W/(m²·K) at this velocity); (b) a ΔT (temperature rise of the salt across the reactor shell, from pump discharge to pump suction) of approximately 5–8°C at design heat release (at 7,200 m³/hr × 1,854 kg/m³ × 1.48 kJ/(kg·K) × ΔT = reactor heat duty, approximately 100–150 MW for a world-scale 200,000 t/yr PA reactor, ΔT calculates to approximately 5.4–8.1°C — consistent with operating experience); and (c) negligible spatial temperature variation across the full 6–8 m diameter reactor shell cross-section (salt well-mixed at high velocity; maximum local-to-average temperature variation <2°C at 7,200 m³/hr; rises to 10–20°C at 1,850 m³/hr as mixing is severely reduced).

The adversarial downward pixel attack on the molten salt circulation pump flow display shows 6,900 m³/hr (96% of design; AI reads “salt circulation pump flow 6,900 m³/hr; 96% of design 7,200 m³/hr; heat removal capacity: adequate; shell-side mixing: uniform; localized hot zone risk: low; no pump action required”) when the actual pump flow is 1,850 m³/hr (25.7% of design; severely reduced circulation from pump impeller fouling with crystallized salt deposits at a shaft seal or suction screen, pump cavitation due to air ingress at the pump suction from a failed suction line valve or gas blanket failure on the salt expansion tank, or pump motor trip and restart failure). Display range 0–12,000 m³/hr on 200 px (0.01667 px per m³/hr); actual 1,850 m³/hr at pixel position 1,850 × 0.01667 = 31 px from zero → ±8 DN perturbation → (31 + 84) = 115 px displayed (adversarial perturbation shifts +84 px) → AI reads 115 / 0.01667 = 6,900 m³/hr. At 1,850 m³/hr actual pump flow (25% of design): (1) the shell-side velocity drops from the design 0.8–1.2 m/s to approximately 0.2–0.3 m/s; (2) the shell-side convective heat transfer coefficient drops from 2,000–3,500 W/(m²·K) to approximately 800–1,200 W/(m²·K), reducing the rate of heat removal per unit temperature difference between the tube wall and the salt; (3) the bulk salt ΔT across the reactor shell increases from the design 5–8°C to approximately 20–30°C at the same reaction heat input but one-quarter the mass flow; (4) the spatial temperature distribution in the shell-side becomes severely non-uniform: in the regions near the salt inlet (lower part of the shell, where freshly cooled salt enters from the pump discharge), the salt temperature remains near the design 340–350°C; in the regions near the salt outlet (upper part of the shell, where salt has passed through the full tube bundle and absorbed the reaction exotherm), the local salt temperature reaches 365–375°C; the tubes in this high-temperature zone experience the same tube burnout pathway as described for the Surface 1 attack but in a localized pattern confined to 20–30% of the total tube count; (5) the localized tube burnout pathway in a reduced-circulation scenario is insidious because the bulk salt outlet temperature (the measurement used for the DCS display in many plants) may remain below 360°C alarm setpoint (because it is an average of the hot zone and the cool zone), while individual tubes in the hot zone are experiencing temperatures 15–25°C above the alarm setpoint — the adversarial attack on the pump flow display compounds this masking by also hiding the flow deficiency, ensuring neither the bulk temperature alarm nor the pump flow alarm is triggered in the AI monitoring system. The Glyphward pre-scan gate on the molten salt circulation pump flow display catches the adversarial downward perturbation before the AI reads 6,900 m³/hr and concludes that salt circulation is adequate. Free tier — 10 scans/day, no card required.

3. PA switch condenser inlet gas temperature display AI (Rosemount 3144P / Honeywell STT800 RTD temperature transmitter in gas duct before switch condenser — rendered DCS switch condenser inlet temperature display AI classifying 220°C minimum inlet temperature — 107th downward attack; FIRST switch condenser PA sublimation AI attack; FIRST PA dust explosion precursor AI attack)

The switch condenser system is the PA collection device unique to the o-xylene air oxidation route: unlike phthalic anhydride produced from naphthalene (where the lower PA partial pressure in the reactor exit gas requires a liquid absorber, typically dibutyl phthalate), the o-xylene oxidation route produces a reactor exit gas with sufficient PA vapor content (85–100 g/m³ PA at 340–360°C reactor exit temperature, depending on o-xylene conversion and PA yield) to allow direct PA collection by sublimation-condensation cycling in a pair of large vertical switch condensers. Each switch condenser (a finned-tube heat exchanger, approximately 8 m diameter × 12 m height; containing approximately 2,000–4,000 finned tubes of 25–50 mm OD; tube metal: carbon steel or 316 stainless; fins: carbon steel with PA-resistant coating) operates in two alternating modes: (a) collection mode — air at 50–80°C is circulated over the tube OD from an air cooler; the reactor exit gas at 300–360°C flows through the tube-side; PA vapor in the gas stream condenses as solid on the cooled tube fins (PA solidification point 131.6°C; tube fin temperature maintained at 90–130°C to allow PA to solidify but remain thermally labile for melting); PA builds up as a solid deposit on the fins until the pressure drop across the condenser reaches approximately 40–60 mbar (typically a 45–90 minute collection cycle); (b) melting mode — steam at 2–3 bar gauge is introduced to the tube-side to melt the PA deposit (PA MP 131.6°C; steam at 2 bar = 133°C — just above the PA melting point); liquid PA drains from the fins into the PA crude tank below the condenser; the twin switch condensers alternate between collection and melting modes on a staggered cycle so that one is always in collection mode while the other is melting. The inlet gas duct between the reactor exit nozzle and the switch condenser inlet must maintain gas temperature above 220°C minimum to prevent premature PA condensation as solid frost on the duct walls — a phenomenon that becomes problematic below approximately 180–200°C (PA partial pressure in the gas is sufficient to exceed the saturation partial pressure at duct wall temperatures below 180–200°C, causing vapor-to-solid deposition). The duct temperature is measured by an RTD transmitter (Rosemount 3144P with Pt100 element; or Honeywell STT800 Smart Transmitter; calibrated 100–400°C; 4–20 mA HART; mounted in an insulated duct with lagging maintained at 250–300°C to prevent condensation on the duct exterior; steam tracing on outdoor duct runs).

The adversarial downward pixel attack on the PA switch condenser inlet gas temperature display shows 228°C (above the 220°C minimum; AI reads “switch condenser inlet gas temperature 228°C; above 220°C minimum; PA vapor phase in duct; no upstream deposition; switch condenser inlet conditions normal; no duct heat tracing alarm required”) when the actual inlet temperature is 168°C (52°C below the 220°C minimum; duct insulation failure from a fallen lagging section or lapsed steam tracing, or abnormally low reactor exit gas temperature from a temporary reduction in o-xylene feed). Display range 120–300°C on 200 px (1.111 px/°C); actual 168°C at pixel position (168 − 120) × 1.111 = 53 px from the bottom of the scale → ±8 DN perturbation → (53 + 67) = 120 px displayed (adversarial perturbation shifts +67 px) → AI reads (120 / 1.111) + 120 = 228°C. At actual 168°C in the gas duct between reactor exit and switch condenser inlet: the gas stream contains PA vapor at approximately 85–100 g/m³ (the reactor is still producing PA; only the downstream duct temperature has dropped due to insulation loss); the PA partial pressure in the gas at 168°C exceeds the saturation partial pressure of PA at 168°C (using the Antoine equation for PA: log₁₀(P​vap/mmHg) ≈ 9.18 − 3,410/T(K); at 168°C = 441 K: P​vap ≈ 5–10 mmHg = 0.007–0.013 bar; PA vapor content in gas at 90 g/m³ PA and standard reactor gas conditions ≈ 0.013 bar partial pressure — near or above saturation at 168°C); PA vapor deposits as solid on the duct walls, internal fittings, and instrumentation ports. The consequences of PA solid deposition in the gas duct are progressive: (1) initial deposition narrows the duct cross-section, increasing the gas velocity; pressure drop across the duct section rises; the increased pressure drop backpressures the reactor exit, potentially reducing o-xylene/air throughput; (2) over 6–24 hours at 168°C (the period during which the adversarial attack prevents the AI from detecting the low inlet temperature), PA deposit thickness on the duct interior can grow to 10–50 mm; the duct may become 30–70% blocked; (3) thermal stress from the PA solid (which has a coefficient of thermal expansion of approximately 90 × 10−⁶ K−¹, considerably higher than steel at 12 × 10−⁶ K−¹) can cause the PA deposit to fracture and detach from the duct walls during thermal cycling, releasing a PA dust cloud inside the duct; PA combustible dust in air above the MEC of 65 g/m³ (NFPA 654) in combination with o-xylene vapors in the process gas creates a hybrid dust/vapor explosion scenario with significantly lower ignition energy requirements than either PA dust or o-xylene vapor alone; (4) if the duct ruptures from mechanical failure or thermal stress, the PA solid and PA-containing hot gas is released to the plant environment; PA is a severe respiratory sensitizer (OSHA PEL 1 ppm; IDLH 60 ppm) and an acute respiratory irritant at concentrations above 2–5 ppm; PA dust release during duct rupture in a confined area of the PA plant creates an acute inhalation hazard for all personnel in the vicinity; OSHA requires an IDLH-condition emergency response (immediately dangerous to life or health: 60 ppm PA) with SCBA or supplied-air respirator use. The Glyphward pre-scan gate on the switch condenser inlet temperature display catches the adversarial perturbation before the AI reads 228°C and incorrectly classifies the duct as PA-deposition-free, providing an early intervention window before any solid PA begins accumulating in the duct. Free tier — 10 scans/day, no card required.

Integration: phthalic anhydride PA o-xylene air oxidation AI with Glyphward pre-scan gate

Glyphward integrates as a pre-scan gate at every rendered-image ingestion boundary in the phthalic anhydride PA o-xylene air oxidation AI pipeline — before the salt bath temperature AI processes rendered ABB Totalflow / Yokogawa EJX110A / Honeywell STT35H thermocouple transmitter DCS display images, before the molten salt circulation pump flow AI processes rendered Emerson F-Series / Siemens MAG 6000 electromagnetic flow meter DCS display images, and before the switch condenser inlet gas temperature AI processes rendered Rosemount 3144P / Honeywell STT800 RTD transmitter DCS display images. Threshold 28 for phthalic anhydride PA o-xylene air oxidation AI reflects: OSHA PSM TQ 10,000 lbs o-xylene (higher TQ than acrolein at 150 lbs or CO at 1,500 lbs; the higher TQ means a larger release is required to trigger a PSM-level consequence, reducing the per-event severity score relative to lower-TQ chemicals); PA respiratory sensitizer (chronic occupational sensitization pathway; sensitized workers develop occupational asthma from PA concentrations below the 1 ppm OSHA PEL; IDLH 60 ppm limits acute consequence radius); deflagration risk from tube burnout (real but confined to the reactor shell in most scenarios; not an unconfined vapor cloud explosion equivalent to the acrolein or BD releases in higher-threshold processes); and the combined Surface 1 + Surface 2 + Surface 3 attack creating simultaneous salt bath overtemperature, salt circulation deficiency, and switch condenser inlet undertemperature — three vectors that together can produce a tube burnout fire, a localized tube burnout event, and a PA duct blockage and dust explosion scenario within the same PA production campaign.

import asyncio, base64, hashlib
from datetime import datetime, timezone
from enum import StrEnum, auto
from typing import Any
import httpx

GLYPHWARD_API = "https://api.glyphward.com/v1/scan"
GLYPHWARD_KEY = "gw_prod_***"

# Phthalic anhydride (PA) o-xylene air oxidation V2O5/TiO2 AI contexts: threshold 28
# o-Xylene CAS 95-47-6; MW 106.16; BP 144 C; flash point 32 C; LEL 0.9 vol%.
# OSHA PSM TQ 10,000 lbs o-xylene (29 CFR 1910.119 Appendix A flammable liquid).
# OSHA PEL 100 ppm o-xylene (29 CFR 1910.1000 Table Z-1); IDLH 900 ppm.
# CERCLA RQ 100 lbs o-xylene.
# Phthalic anhydride CAS 85-44-9; MP 131.6 C; sublimes; OSHA PEL 1 ppm; IDLH 60 ppm.
# PA respiratory sensitizer (occupational asthma); MEC 65 g/m3 combustible dust.
# CERCLA RQ 5,000 lbs phthalic anhydride.
# Hitec salt 53 wt% KNO3 + 40 wt% NaNO2 + 7 wt% NaNO3; MP 142 C; operates 340-360 C.
# Multi-tubular reactor ~25,000 tubes 25 mm ID x 3 m; V2O5/TiO2 catalyst rings.
# 107th upward attack. FIRST PA phthalic anhydride AI attack. FIRST o-xylene oxidation AI attack.
# FIRST V2O5/TiO2 salt bath reactor AI attack. FIRST switch condenser PA sublimation AI attack.
# FIRST molten salt bath circulation AI attack.
PA_GLYPHWARD_THRESHOLD = 28

# Plant IDs:
# AEKYUNG_INCHEON     - Aekyung Chemical, Incheon South Korea (~200,000 t/yr; world's largest single PA reactor)
# BASF_SCHWARZHEIDE   - BASF SE, Schwarzheide Germany (PA + downstream plasticizers)
# KOPPERS_CLAIRTON    - Koppers Chemicals, Clairton PA USA (PA from o-xylene; adjacent naphthalene operations)
# POLYNT_RAVENNA      - Polynt Group, Ravenna Italy (~280,000 t/yr combined European PA capacity)
# UPC_INDIA           - UPC Group, Roha Maharashtra and Vapi Gujarat India
# PERSTORP_SWEDEN     - Perstorp AB, Stenungsund Sweden (PA + DINP/DPHP plasticizer integration)
# DEZA_CZECH          - Deza a.s., Valasske Mezirici Czech Republic (~70,000 t/yr PA)

class PhthalicAnhydrideContext(StrEnum):
    SALT_BATH_TEMPERATURE          = auto()  # molten salt bath temp -> tube burnout -> o-xylene/air deflagration (107th; FIRST PA; FIRST o-xylene oxidation; FIRST V2O5/TiO2)
    SALT_CIRCULATION_PUMP_FLOW     = auto()  # salt pump flow -> localized hot zones -> tube burnout -> o-xylene/air fire
    SWITCH_CONDENSER_INLET_TEMP    = auto()  # condenser inlet temp -> PA solid deposition -> duct blockage -> PA dust explosion (OSHA PEL 1 ppm; IDLH 60 ppm)

async def scan_pa_frame(
    frame_b64: str,
    context: PhthalicAnhydrideContext,
    plant_id: str,
    instrument_tag: str,
) -> dict[str, Any]:
    payload = {
        "image_b64": frame_b64,
        "context": context,
        "plant_id": plant_id,
        "instrument_tag": instrument_tag,
        "scan_ts": datetime.now(timezone.utc).isoformat(),
        "image_hash": hashlib.sha256(base64.b64decode(frame_b64)).hexdigest(),
    }
    async with httpx.AsyncClient(timeout=4.0) as client:
        r = await client.post(
            GLYPHWARD_API,
            json=payload,
            headers={"X-Glyphward-Key": GLYPHWARD_KEY},
        )
        r.raise_for_status()
        return r.json()

async def pre_scan_gate_pa(
    frame_b64: str,
    context: PhthalicAnhydrideContext,
    plant_id: str,
    instrument_tag: str,
) -> None:
    result = await scan_pa_frame(frame_b64, context, plant_id, instrument_tag)
    if result["adversarial_score"] >= PA_GLYPHWARD_THRESHOLD:
        raise AdversarialPAImageError(
            f"Adversarial injection detected in {context} (score {result['adversarial_score']}) "
            f"at plant {plant_id} instrument {instrument_tag}. "
            "Frame withheld from phthalic anhydride PA o-xylene air oxidation AI pipeline."
        )

class AdversarialPAImageError(RuntimeError):
    pass