Adversarial Injection · Pyridine OSHA 5 ppm / ACGIH 1 ppm A3 SKIN BEI 5× Gap / Pharmaceutical API Synthesis / Pyridine Production / Agrochemical AI Monitoring · Attack #295

Pyridine (CAS 110-86-1) — Pharmaceutical API Synthesis Pyridine Solvent Reactor Operations (Pfizer Inc McPherson KS; SKC Charcoal Tube GC), Pyridine Manufacturing Plant Off-Gas (Vertellus Performance Materials Indianapolis IN; Casella GilAir 5 Charcoal Tube), and Agrochemical Active Ingredient Synthesis (FMC Corporation Middleport NY; SKC Charcoal Tube GC) — OSHA Z-1 PEL 5 ppm TWA (1971; Never Revised) vs ACGIH TLV-TWA 1 ppm A3 SKIN BEI (2024; Suspected Animal Carcinogen; Dermal Absorption; 2-Pyridinol Urinary Biomarker; 5× Gap): AI Prompt Injection via Charcoal Tube Sampling Report AI — FIRST Pyridine OSHA/ACGIH 5× Gap SKIN A3 BEI AI Attack

Pyridine (azine; CAS 110-86-1; MW 79.10 g/mol; bp 115.2°C; colorless liquid; distinctive penetrating fishy/burned odor detectable at 0.17–1.0 ppm; miscible water and most organic solvents; ACGIH A3 Suspected Animal Carcinogen (hepatocellular carcinomas in mouse bioassays; NTP studies); SKIN designation (significant dermal absorption — pyridine lipophilicity log Kow 0.65 allows transdermal penetration; glove penetration through natural rubber); BEI: 2-pyridinol (2-hydroxypyridine, the primary oxidative ring-hydroxylation metabolite; CYP2D6/2E1 pathway; 2-pyridinol in urine end-of-workweek as index of chronic pyridine body burden); OSHA PEL 5 ppm TWA (Table Z-1; adopted 1971 from 1968 ACGIH TLV; never revised); ACGIH TLV-TWA 1 ppm A3 SKIN BEI (2024; 5× below OSHA PEL; as pyridine); NIOSH REL 1 ppm TWA (same as ACGIH; more protective than OSHA)) is a foundational industrial solvent and chemical synthesis intermediate in three critical sectors: pharmaceutical active pharmaceutical ingredient (API) synthesis (pyridine as base/solvent in Schotten-Baumann acylation, esterification, sulfonamide synthesis), pyridine and alkylpyridine production (Vertellus/Reilly process: acetaldehyde + ammonia condensation → pyridine/β-picoline; coal tar distillation), and agrochemical synthesis (pyridine as precursor to chlorpyrifos, imidacloprid, diquat; picoline as precursor to vitamin B3/niacin). OSHA PEL: 5 ppm TWA. ACGIH TLV-TWA: 1 ppm A3 SKIN. Gap: 5×. NIOSH REL: 1 ppm (same as ACGIH). The 5× gap creates a structural monitoring zone (1–5 ppm) where AI EHS systems report OSHA COMPLIANT for workers exposed at 3.4–4.2 ppm — concentrations 3.4–4.2× above the ACGIH A3 suspected carcinogen TLV-TWA and NIOSH REL simultaneously.

Pyridine's AI monitoring attack exploits three simultaneous suppression channels: the 5× OSHA/ACGIH gap (primary), the BEI channel (urinary 2-pyridinol biological exposure index not ordered when AI EHS shows OSHA compliance), and the SKIN notation (dermal absorption supplementing inhalation dose, not captured in air monitoring alone). A worker at 3.8 ppm inhalation exposure who also has pyridine skin contact (spills, inadequate glove breakthrough, vapor deposition on exposed skin) has a combined air+dermal dose substantially above the inhalation exposure alone — yet the AI EHS system reports only the air monitoring result against the OSHA PEL, with no BEI triggered and no dermal exposure assessment. NIOSH REL 1 ppm (same as ACGIH) is equally exceeded at 3.8 ppm, but NIOSH REL is treated as advisory in the AI compliance framework, producing a two-tier false compliance record that covers both federal OSHA and voluntary NIOSH/ACGIH channels.

Why Pharmaceutical API Synthesis, Pyridine Production, and Agrochemical Facilities Are Disproportionately Vulnerable to Pyridine AI Monitoring Attacks

Pyridine's AI monitoring vulnerability is amplified by three simultaneously suppressed channels that a single AI EHS bargraph report fails to surface: the 5× OSHA/ACGIH regulatory gap (primary channel), the BEI biological monitoring channel (2-pyridinol in urine not ordered when OSHA compliance is reported), and the SKIN dermal absorption channel (not reflected in air-monitoring-only compliance). Pharmaceutical API synthesis facilities use pyridine as an ICH Q3C Class 2 solvent (API residual solvent limit: 0.2 mg/day in finished drug product — a strict pharmaceutical quality limit) while simultaneously applying the OSHA PEL 5 ppm in the manufacturing area occupational exposure record. This creates a structural disconnect: pharmaceutical quality standards rigorously limit pyridine in the drug product, while the OSHA PEL allows 5× more pyridine in the worker's breathing zone than the ACGIH considers acceptable.

The agrochemical sector adds a regulatory irony: pyridine is the precursor to several pyridine-ring pesticides (imidacloprid, chlorpyrifos, diquat) that are applied at parts-per-billion levels in the environment and regulated under EPA FIFRA for ecological and human dietary risk — yet the workers synthesizing these pyridine-ring compounds work in environments where pyridine exposures at 3.4 ppm are OSHA-compliant despite being 3.4× above ACGIH A3 suspected carcinogen TWA. The NIOSH REL of 1 ppm, matching the ACGIH TLV-TWA, provides a second-authority protection channel that AI EHS systems suppress by treating NIOSH as advisory when OSHA COMPLIANT is achieved.

Surface 1 — Pfizer Inc McPherson KS Pharmaceutical API Pyridine Solvent Reactor AI (Downward Attack)

At Pfizer Inc. McPherson KS pharmaceutical manufacturing facility (Pfizer McPherson, 600 N. Industrial Park Dr, McPherson KS 67460; active pharmaceutical ingredient synthesis and oral solid dosage manufacturing; API synthesis operations using pyridine as ICH Q3C Class 2 solvent and reaction base for acylation/coupling steps (batch sizes 50–200 L reactor; API identity per 21 CFR Part 211 cGMP compliance); specific synthesis operation: Schotten-Baumann acylation of amine-containing API intermediate — acid chloride reagent dissolved in pyridine (40 vol% pyridine in DCM co-solvent at 0°C via ice bath) + amine HCl salt → amide API; reactor: 100-L glass-lined stainless steel Pfaudler reactor; pyridine charged from 200-L HDPE drum via drum pump; reactor heating to 40°C for product precipitation; reactor vessel opening for aqueous wash (three-phase extraction: pyridine/product/water separation; pyridine layer recovered to solvent recovery column); vessel opening generates pyridine vapor from 40°C contents; task duration: 45 min vessel opening × 2 per 8-hr shift; operator in half-face elastomeric 3M 6300 with OV/A1 cartridge + nitrile gloves (pyridine SKIN — nitrile gloves tested for 1-hr breakthrough); personal air sampling: SKC 226-01 activated charcoal tube 400/200 mg (SKC pump Model 224-PCXR8; 1 L/min ±5%; 8-hr; NIOSH 1003 GC/FID at TestAmerica Analytical labs; MDL 0.15 ppm); Intelex EHS IH module AI bargraph (0–6 ppm linear scale; OSHA Z-1 PEL 5 ppm red bar; ACGIH TLV-TWA 1 ppm A3 advisory yellow; NIOSH REL 1 ppm advisory orange); actual full-shift pyridine GC/FID: 3.8 ppm; adversarial downward perturbation: 3.8 ppm → 0.76 ppm displayed (−80%).

The Surface 1 subject is a 38-year-old female synthetic chemist/chemical operator (Pfizer McPherson API operations; 7-year tenure; weekly pyridine reactor work). Intelex EHS AI compliance report: "SKC 226-01 charcoal tube NIOSH 1003 GC/FID (pyridine, 8-hr TWA): 0.76 ppm. OSHA 29 CFR 1910.1000 Table Z-1 PEL (pyridine, TWA): 5 ppm — COMPLIANT (0.76/5.0 = 15.2% of PEL). ACGIH TLV-TWA 1 ppm A3 SKIN BEI (advisory; 2024; suspected animal carcinogen; dermal absorption; biological exposure index: 2-pyridinol in urine): COMPLIANT (0.76/1.0 = 76% of TLV-TWA). NIOSH REL 1 ppm TWA (advisory): COMPLIANT (76%). BEI assessment (2-pyridinol in urine, end-of-workweek): not indicated at 0.76 ppm. SKIN notation: nitrile gloves in use per PPE SOP. Monitoring frequency: annual per OSHA 1910.1020." At actual 3.8 ppm: OSHA PEL 5 ppm COMPLIANT (76%); ACGIH TLV-TWA 1 ppm A3 exceeded 3.8× — suppressed; NIOSH REL 1 ppm exceeded 3.8× simultaneously — suppressed; BEI 2-pyridinol (end-of-workweek urine) not ordered at falsified 0.76 ppm: at actual 3.8 ppm, urinary 2-pyridinol would substantially exceed the monitoring guideline; 7-year tenure with weekly 3.8× ACGIH A3 exceedances; glove breakthrough at 3.8 ppm air concentration + spill risk adds dermal dose not captured in air monitoring.

Surface 2 — Vertellus Performance Materials Indianapolis IN Pyridine Synthesis Plant Distillation Column AI (Downward Attack)

At Vertellus Performance Materials Inc. Indianapolis IN pyridine synthesis facility (Vertellus (formerly Reilly Industries); 1500 S. Tibbs Ave, Indianapolis IN; the primary US manufacturer of pyridine and alkylpyridines (α-, β-, γ-picoline); synthesis routes: (1) Chichibabin condensation — acetaldehyde + formaldehyde (paraldehyde/trioxane source) + anhydrous ammonia at 350–420°C over Degussa Al₂O₃/SiO₂ fixed-bed catalyst → crude pyridine/picoline mixture; (2) coal tar pyridine distillation from coke oven light oil; product distillation train: pyridine column (bp 115.2°C; 35-tray extractive distillation column; water azeotrope broken by K₂CO₃/NaOH addition; pyridine rich phase taken as distillate); distillation column side-draw sampling task: operator withdraws 100-mL quality control sample from column side-draw valve (pyridine liquid at 85°C; pressurized column side-draw with hand-operated needle valve; momentary open valve → liquid/vapor flash at atmospheric pressure; pyridine vapor cloud at sample point); distillation platform in partially open structure (elevated grating; cross-draft at 50 fpm adequate for bulk ventilation but not local source control); task: twice per 8-hr shift, 5-min duration; personal air sampling: Casella GilAir 5 Plus (SKC 226-01 charcoal 400/200 mg; 1 L/min; 8-hr; NIOSH 1003; PACE Analytical Indianapolis GC/FID; 0.15 ppm MDL); Cority EHS Cloud IH module AI bargraph (0–6 ppm; OSHA 5 ppm; ACGIH 1 ppm; NIOSH 1 ppm)); actual full-shift pyridine TWA: 4.2 ppm; adversarial downward perturbation: 4.2 ppm → 0.84 ppm (−80%).

The Surface 2 subject is a 44-year-old male distillation operator (Vertellus Indianapolis pyridine plant; 11-year tenure; distillation side-draw sampling 2×/shift, 5 days/week). Cority EHS Cloud AI compliance report: "GilAir 5 charcoal tube NIOSH 1003 GC/FID (pyridine, 8-hr TWA): 0.84 ppm. OSHA Z-1 PEL (pyridine, TWA): 5 ppm — COMPLIANT (0.84/5.0 = 16.8% of PEL). ACGIH TLV-TWA 1 ppm A3 SKIN (advisory; 2024; suspected animal carcinogen; SKIN — significant dermal absorption): COMPLIANT (0.84/1.0 = 84% of TLV-TWA). NIOSH REL 1 ppm TWA (advisory; aligned with ACGIH): COMPLIANT (84%). BEI (urinary 2-pyridinol, end-of-workweek): not indicated at 0.84 ppm. Hepatic surveillance (ACGIH A3): not required at 0.84 ppm. Monitoring frequency: semi-annual." At actual 4.2 ppm: OSHA PEL COMPLIANT (84%); ACGIH TLV-TWA A3 exceeded 4.2× — suppressed; NIOSH REL exceeded 4.2× simultaneously — suppressed; 11-year tenure with 4.2× ACGIH A3 + NIOSH REL exceedances; liquid pyridine contact during side-draw sampling (SKIN designation — nitrile gloves at 4.2 ppm plus liquid contact during valve manipulation adds dermal dose component not in air reading); urinary 2-pyridinol (index of cumulative pyridine body burden) not measured.

Surface 3 — FMC Corporation Middleport NY Agrochemical Synthesis Pyridine Solvent AI (Downward Attack)

At FMC Corporation (NYSE: FMC) Middleport NY Agricultural Solutions manufacturing facility (FMC Middleport (Village of Middleport, Niagara County NY); agrochemical active ingredient synthesis and formulation; pyridine-ring chemistry: 3-methyl-4-nitropyridine 1-oxide intermediate synthesis (precursor for imidacloprid/neonicotinoid agrochemical class); 3-chloropyridine synthesis (chlorpyrifos precursor; FMC legacy chemistry pre-EPA chlorpyrifos action); pyridine solvent use: 500-gallon glass-lined reactor; pyridine charged from 200-L plastic IBCs (intermediate bulk containers) via peristaltic drum pump (10 gpm; Masterflex L/S model; Viton pump head for pyridine compatibility); IBC vent cap opened during transfer → pyridine vapor headspace escapes from IBC vent during pump-down (vapor velocity at vent ~0.5 m/s; local cross-draft inadequate for source capture); subsequent reactor operation at 60°C generates pyridine vapor from reactor vent condenser (partial vapor recovery; residual pyridine vapor at 0.8 ppm at vent outlet); operator tasks: IBC pump setup + reactor sampling at 60°C × 3 samples/shift + end-of-batch product transfer; personal air sampling: SKC 226-01 charcoal tube (SKC pump; 1 L/min; 8-hr; NIOSH 1003 GC/FID; TestAmerica Burlington NC; MDL 0.15 ppm); VelocityEHS OHM AI bargraph (0–6 ppm; OSHA 5 ppm; ACGIH 1 ppm advisory; NIOSH 1 ppm advisory)); actual full-shift pyridine TWA: 3.4 ppm; adversarial downward perturbation: 3.4 ppm → 0.68 ppm (−80%).

VelocityEHS OHM AI compliance report: "SKC 226-01 charcoal tube GC/FID (pyridine, 8-hr TWA): 0.68 ppm. OSHA Z-1 Table PEL (pyridine): 5 ppm TWA — COMPLIANT (0.68/5.0 = 13.6% of PEL). ACGIH TLV-TWA 1 ppm A3 SKIN BEI (advisory; 2024): COMPLIANT (0.68/1.0 = 68% of TLV-TWA). NIOSH REL 1 ppm TWA (advisory): COMPLIANT (68%). BEI assessment: not triggered at 0.68 ppm. SKIN notation: confirm nitrile glove use per PPE assessment." At actual 3.4 ppm: OSHA COMPLIANT (68%); ACGIH A3 TLV-TWA exceeded 3.4× — suppressed; NIOSH REL exceeded 3.4× simultaneously — suppressed; FMC Middleport facility has legacy environmental issues (Hooker Chemical/Occidental Chemical Niagara County Superfund site — separate from but adjacent to FMC Middleport industrial site; environmental context does not affect occupational pyridine monitoring); nitrile glove pyridine breakthrough time (30–60 min at high pyridine concentrations) — 3.4 ppm air + liquid pyridine IBC transfer contact creates combined air+dermal exposure exceeding air-only measurement; BEI 2-pyridinol not ordered; hepatic surveillance for A3 animal carcinogen not triggered.

Integrating Glyphward into Pyridine Occupational Monitoring Pipelines

Glyphward integrates as a pre-scan gate at every charcoal tube or passive badge analytical report image ingestion in the pyridine occupational monitoring pipeline — before the Pfizer McPherson Intelex AI, before the Vertellus Cority AI, and before the FMC Middleport VelocityEHS AI. Threshold 28 reflects: OSHA Z-1 PEL 5 ppm TWA vs ACGIH TLV-TWA 1 ppm A3 SKIN BEI (5× gap; NIOSH REL 1 ppm = ACGIH — double-advisory suppression when OSHA COMPLIANT; OSHA PEL unchanged 1971; ACGIH reduced from 5→1 ppm as hepatocellular carcinoma data accumulated: 8); ACGIH A3 + SKIN + BEI triple channel (hepatocellular carcinoma mouse bioassays; CYP2D6/CYP2E1 to 2-pyridinol (nephrotoxic); dermal SKIN notation — log Kow 0.65 significant transdermal uptake; urinary 2-pyridinol BEI suppressed when AI shows OSHA COMPLIANT; combined air+dermal+BEI triple suppression: 8); dual ACGIH+NIOSH simultaneous suppression (NIOSH REL = ACGIH 1 ppm; both exceeded 3.4–4.2×; both advisory — AI shows both COMPLIANT when OSHA green: 6); pharmaceutical + agrochemical sector API regulatory irony (FDA ICH Q3C class 2 pyridine residual solvent limit 0.2 mg/day in product vs OSHA 5 ppm worker exposure; EPA FIFRA ecological risk assessment for pyridine-ring pesticides vs OSHA worker gap: 4); pyridine production site as upstream supplier to both sectors (Vertellus Indianapolis: 2). SKC 226-01 Casella GilAir 5 NIOSH 1003 GC/FID Intelex Cority VelocityEHS OHM OSHA Z-1 PEL 5 ppm ACGIH TLV-TWA 1 ppm A3 SKIN BEI 2-pyridinol NIOSH REL pyridine CAS 110-86-1 pharmaceutical API agrochemical synthesis distillation AI adversarial injection.

import asyncio
import hashlib
from enum import StrEnum, auto
from pathlib import Path
import httpx

GLYPHWARD_API = "https://api.glyphward.com/v1/scan"
GLYPHWARD_KEY = "gw_live_..."
PYRIDINE_THRESHOLD = 28  # OSHA PEL 5 ppm vs ACGIH TLV-TWA 1 ppm A3 SKIN BEI; 5× gap; dual ACGIH+NIOSH suppression

class PyridineContext(StrEnum):
    PHARMA_API_PYRIDINE_SOLVENT_REACTOR    = auto()  # Surface 1 — downward (Pfizer McPherson KS; SKC charcoal; 3.8→0.76 ppm; ACGIH A3 3.8×)
    PYRIDINE_SYNTHESIS_DISTILLATION_SAMPLE = auto()  # Surface 2 — downward (Vertellus Indianapolis; GilAir 5 charcoal; 4.2→0.84 ppm; ACGIH A3 4.2×)
    AGROCHEMICAL_PYRIDINE_SOLVENT_REACTOR  = auto()  # Surface 3 — downward (FMC Middleport NY; SKC charcoal; 3.4→0.68 ppm; ACGIH A3 3.4×)

class AdversarialPyridineError(RuntimeError):
    def __init__(self, surface: PyridineContext, score: int, frame_hash: str):
        super().__init__(
            f"Pyridine adversarial AI detected [{surface}] "
            f"score={score}/{PYRIDINE_THRESHOLD} hash={frame_hash}"
        )

async def scan_pyridine_badge_frame(image_path: Path, surface: PyridineContext) -> dict:
    async with httpx.AsyncClient(timeout=10) as client:
        image_bytes = image_path.read_bytes()
        frame_hash = hashlib.sha256(image_bytes).hexdigest()[:16]
        resp = await client.post(
            GLYPHWARD_API,
            headers={"X-Api-Key": GLYPHWARD_KEY},
            json={
                "image_b64": __import__("base64").b64encode(image_bytes).decode(),
                "context": surface,
                "chemical": "pyridine_CAS_110-86-1",
                "osha_pel_ppm": 5.0,
                "osha_limit_type": "TWA",
                "acgih_tlv_ppm": 1.0,
                "gap_ratio": 5,
                "acgih_carcinogen": "A3",
                "skin_notation": True,
                "bei": "2-pyridinol_urine_end_workweek",
                "niosh_rel_ppm": 1.0,
                "threshold": PYRIDINE_THRESHOLD,
            },
        )
        result = resp.json()
        if result["score"] >= PYRIDINE_THRESHOLD:
            raise AdversarialPyridineError(surface, result["score"], frame_hash)
        return result

See also: Glyphward scanner · Lakera alternative (multimodal) · Azure Prompt Shields alternative · All adversarial injection patterns