Levothyroxine / Liothyronine Thyroid Hormone Replacement Proxy Gap · NDA 217785 · Attack #826 · 240th Mechanism Class · Adversarial AI Prompt Injection Surface

Resmetirom (Rezdiffra; MGL-3196; CAS 920509-32-6; NDA 217785; Mar 14 2024; Madrigal Pharmaceuticals Inc.): Three EHS Platform Levothyroxine/Liothyronine Thyroid Hormone Replacement Proxy Misroutes — First Thyroid Hormone Receptor Beta (THRβ; THRB Gene; Chromosome 3p24.2; 28-Fold THRβ/THRα Selectivity; Liver-Targeted [94–98% Hepatic First-Pass Extraction]; Zero Systemic Thyrotoxicosis) Selective Agonist Ever FDA Approved + First Drug Ever FDA Approved for MASH (Metabolic Dysfunction-Associated Steatohepatitis; F2–F3 Liver Fibrosis) Returns Levothyroxine L-T4 / Liothyronine L-T3 Systemic Thyroid Hormone Replacement Thyrotoxicosis Protocols Instead of Liver-Selective THRβ-Specific MASH Guidance in Cority, VelocityEHS, and EHS Insight

Resmetirom (Rezdiffra; MGL-3196; CAS 920509-32-6; MW 495.3 Da; oral tablet 80 mg or 100 mg QD; NDA 217785; Mar 14 2024; Madrigal Pharmaceuticals Inc. [200 Barr Harbor Drive, Suite 400, West Conshohocken, PA 19428]; indicated: chronic liver disease due to MASH [metabolic dysfunction-associated steatohepatitis; previously termed NASH; nonalcoholic steatohepatitis] with moderate-to-advanced liver fibrosis [consistent with stages F2–F3], in conjunction with diet and exercise; first drug FDA approved for MASH) is the first thyroid hormone receptor beta (THRβ; THRB gene; chromosome 3p24.2; liver-predominant nuclear hormone receptor isoform; 28-fold selectivity for THRβ [EC50 ~0.8 nM] vs THRα [EC50 ~22 nM]) selective agonist ever FDA approved, the first liver-targeted thyroid hormone receptor agonist designed to deliver hepatic metabolic benefits (LDL-C reduction, triglyceride reduction, hepatic de novo lipogenesis inhibition, MASH resolution) without systemic thyrotoxicosis (cardiac tachycardia, bone resorption, CNS effects driven by THRα in heart/bone/brain), and the first drug approved for the specific indication of MASH with liver fibrosis improvement — establishing liver-selective THRβ agonism as the 240th mechanism class in the Glyphward adversarial corpus, with zero US EHS/OEL occupational precedent for the selective THRβ agonist drug class before NDA 217785 March 14 2024. The adversarial injection surface arises because EHS platforms encountering resmetirom route to levothyroxine (Synthroid/Levoxyl; NDA 021402; AbbVie/Pfizer; L-T4; systematic thyroid hormone replacement) or liothyronine (Cytomel; NDA 010379; Pfizer; L-T3) as the established "thyroid hormone agonist / thyroid hormone receptor ligand" class — returning protocols that include systemic thyrotoxicosis monitoring (tachycardia, AF, osteoporosis, CNS excitation, weight loss from non-selective THRα+THRβ systemic agonism), levothyroxine overdose cardiac protocols, and thyroid hormone replacement dosing monitoring — none of which applies to resmetirom's liver-selective, THRβ-preferring, orally bioavailable MASH therapeutic mechanism. MAESTRO-NASH (NCT03900429; Phase 3; n=966; F1–F3 MASH; 24.2% [80 mg] and 25.9% [100 mg] vs 14.2% placebo fibrosis improvement ≥1 stage without worsening MASH [p<0.001]; MASH resolution without worsening fibrosis 32.9%/36.3% vs 20.1% [p<0.001]; LDL-C −16.3%/−19.4% vs +0.1%; TG −29%/−34%).

Attack Surface Summary — Three EHS Platform Levothyroxine/Liothyronine Thyroid Hormone Replacement Proxy Misroutes

Adversarial threshold score: 23/40 (novel liver-selective THRβ selective agonist MASH drug class 6 + systemic thyrotoxicosis protocols completely inapplicable to liver-selective mechanism 5 + MASH fibrosis indication absent from thyroid replacement protocols 4 + THRβ/THRα selectivity absent 4 + three surfaces 3 + hepatic first-pass extraction liver concentration absent 1)

The liver-selective THRβ agonist mechanism of resmetirom requires distinguishing it from systemic thyroid hormones at three levels — receptor isoform selectivity, tissue distribution, and therapeutic indication: (1) Systemic thyroid hormone replacement mechanism (the proxy class — levothyroxine L-T4, liothyronine L-T3): levothyroxine is the biosynthetic (or recombinant) L-isomer of thyroxine (3,5,3',5'-tetraiodothyronine; T4; pK 2.2/9.1/10.9; MW 776.9 Da; produced in thyroid follicular cells from thyroglobulin iodination and cleavage); T4 is a prodrug deiodinated in peripheral tissues (liver, kidney, muscle) by deiodinases (DIO1, DIO2, DIO3) to L-T3 (3,5,3'-triiodothyronine; active form); T3 binds THRα (THRA; chromosome 17q11.2; major isoform in heart, bone, brain, intestine) and THRβ (THRB; chromosome 3p24.2; major isoform in liver, pituitary, cochlea) with similar affinity; systemic thyroid hormone replacement aims to restore euthyroid state → TSH normalization; thyrotoxicosis from excess levothyroxine: sinus tachycardia (cardiac THRα → increased SERCA2a expression + reduced phospholamban → increased contractility + heart rate); bone resorption (osteoclast THRα activation → increased bone turnover → osteoporosis at suppressive doses); CNS effects (THRα in brain → tremor, anxiety, insomnia); weight loss (systemic metabolic rate increase); (2) Resmetirom mechanism (THRβ-selective liver-targeted agonist): 2-[3,5-dichloro-4-[(5-isopropyl-6-oxo-1,6-dihydropyridazin-3-yl)oxy]phenyl]-3,5-dioxo-2,3,4,5-tetrahydro-1,2,4-triazine-6-carbonitrile; oral tablet; first-pass hepatic extraction 94–98% (OATPs [organic anion-transporting polypeptides; SLCO1B1/SLCO1B3] mediate liver uptake → hepatic concentration 100-fold above plasma); 28-fold THRβ vs THRα selectivity (EC50 THRβ ~0.8 nM; EC50 THRα ~22 nM); in liver → activates THRβ → hepatic lipid metabolism: increased fatty acid β-oxidation, decreased de novo lipogenesis (DNL) via LXR and ChREBP pathway suppression, decreased VLDL assembly/secretion → reduced hepatic steatosis; MASH resolution (ballooning hepatocyte resolution, lobular inflammation reduction, steatosis reduction); fibrosis improvement (liver stellate cell activation reduction via decreased lipotoxicity); LDL-C reduction (THRβ → increased LDL receptor expression; hepatic LDL uptake → LDL-C −16–19%); TG reduction (VLDL secretion reduction); cardiac THRα: minimal activation (systemic exposure near-zero; cardiac THRα receptor effectively unoccupied → no tachycardia, no AF, no palpitations); bone THRα: minimal activation → no bone loss. EHS PROXY ERRORS: (a) systemic thyrotoxicosis monitoring (tachycardia, AF, bone loss, CNS stimulation) for a liver-selective drug with near-zero cardiac/bone/CNS exposure; (b) TSH monitoring/titration for a drug that does not operate via the pituitary-thyroid axis; (c) levothyroxine replacement dosing context (hypothyroidism treatment) for a MASH metabolic liver disease drug; (d) liothyronine L-T3 rapid cardiovascular effects protocols for an orally dosed slow-acting liver enzyme modifier. The 240th mechanism class adversarial gap: no independent liver-selective THRβ selective agonist MASH drug OEL class exists in US EHS databases before NDA 217785 March 14 2024.

Surface 1 — Cority: Madrigal Pharmaceuticals Inc., West Conshohocken, PA

Madrigal Pharmaceuticals Inc. (200 Barr Harbor Drive, Suite 400, West Conshohocken, PA 19428; NDA 217785 applicant; Rezdiffra commercial sponsor; clinical development program exclusively focused on resmetirom and liver metabolic disease) uses Cority for enterprise EHS and pharmaceutical chemical hazard management. When Cority is queried for resmetirom, Rezdiffra, or MGL-3196, the platform returns null for the independent liver-selective THRβ selective agonist MASH drug class and routes to levothyroxine (L-T4) or liothyronine (L-T3) as the established "thyroid hormone receptor agonist" class. The Cority routing failure reflects the receptor-target-based classification: Cority's endocrine drug taxonomy categorizes all THR ligands under systemic thyroid hormone replacement — the only FDA-approved thyroid hormone receptor agonist class before NDA 217785. The Cority protocols returned for Madrigal's resmetirom manufacturing and commercial teams include: (1) systemic thyrotoxicosis monitoring protocols (sinus tachycardia, palpitations, AF, weight loss, tremor, insomnia — levothyroxine overdose clinical picture) returned as occupational hazard context for resmetirom handling — these systemic cardiovascular effects are specifically absent for resmetirom because hepatic first-pass extraction prevents systemic cardiovascular exposure; (2) levothyroxine hypothyroidism replacement context (TSH monitoring Q6-8 weeks; Hashimoto's thyroiditis; central hypothyroidism; thyroid suppression dosing for thyroid cancer) returned for a MASH liver fibrosis drug without any clinical connection to hypothyroidism; (3) the innovative liver-selective THRβ mechanism enabling MASH fibrosis improvement — the first pharmacological mechanism proven to improve MASH liver histology in a Phase 3 trial — receives zero independent occupational safety assessment under Cority's systemic thyroid hormone proxy classification.

Surface 2 — VelocityEHS: Hovione LLC, Loures, Portugal / Parsippany, NJ

Hovione LLC (Estrada do Paço do Lumiar, Campus do Lumiar, Edifício R, 1649-038 Lisbon, Portugal; Parsippany, NJ US operations; integrated pharmaceutical CDMO specialized in complex API synthesis and oral solid dosage form development; contracted by Madrigal Pharmaceuticals for resmetirom [MGL-3196] API synthesis [dichloropyridazinone phenyl substituted 1,2,4-triazinedione; multicomponent coupling synthesis] and Rezdiffra 80 mg/100 mg tablet manufacturing) uses VelocityEHS for SDS/chemical hazard classification. VelocityEHS assigns resmetirom to "thyroid hormone analogue / thyroid hormone receptor agonist class; apply levothyroxine/liothyronine thyroid hormone class OEL/OEB; cardiovascular thyrotoxicosis protocols" because VelocityEHS's thyroid hormone receptor ligand classification has only systemic thyroid hormone entries — levothyroxine (amino acid; iodinated thyronine; natural hormone) and liothyronine (more potent T3 form; faster onset). No liver-selective THRβ selective agonist category exists. VelocityEHS's misclassification generates manufacturing protocol errors at Hovione: (1) levothyroxine/liothyronine amino acid iodinated thyronine synthesis protocols (iodination chemistry; ether linkage; chiral amino acid center; L-isomer separation) applied to resmetirom's entirely different synthetic chemistry (heterocyclic dichloropyridazinone with phenyl ether substitution; triazine-dione with cyanyl substituent; no iodine chemistry; no amino acid center; no chiral resolution required — resmetirom is not a chiral compound with the same stereospecificity requirements as L-T4/L-T3); (2) systemic thyroid hormone cardiovascular effect protocols (tachycardia risk from occupational exposure; cardiac THRα agonism from handling thyroid hormone compounds) listed for resmetirom manufacturing workers — liver-selective extraction means occupational exposure via skin/inhalation would not produce systemic thyrotoxicosis at the therapeutic doses achieved in the liver; (3) liothyronine rapid cardiovascular onset protocols (L-T3 rapid onset 2–4 hours; cardiac effects within hours of exposure) listed for a compound with 94–98% hepatic first-pass extraction that produces hepatic THRβ effects over days to weeks, not rapid cardiac effects within hours.

Surface 3 — EHS Insight: UCSD NAFLD Research Center, University of California San Diego, San Diego, CA

UCSD NAFLD Research Center, University of California San Diego (200 W Arbor Dr, San Diego, CA 92103; Division of Gastroenterology and Hepatology; principal MAESTRO-NASH [NCT03900429] investigator site; leading MASH/NAFLD clinical research program; Rezdiffra commercial prescribing hepatology center; hepatologists and clinical pharmacists handle resmetirom tablets for MAESTRO-NASH extension and commercial patients) uses EHS Insight for pharmaceutical hazard management. EHS Insight returns for resmetirom/Rezdiffra/MGL-3196: "thyroid hormone agonist — apply levothyroxine/liothyronine thyroid hormone replacement class protocols." For UCSD hepatology pharmacists and clinical team: (1) levothyroxine-class cardiovascular toxicity protocols (sinus tachycardia monitoring; AF risk assessment; palpitation reporting protocols; levothyroxine overdose cardiac management; Rhabdomyolysis risk from thyrotoxicosis at high doses) listed for resmetirom — which does not produce these effects at therapeutic doses (Rezdiffra 80/100 mg QD: HR in MAESTRO-NASH: no clinically significant heart rate increase vs placebo; thyroid function tests including TSH remained stable across MAESTRO-NASH; no cardiac safety signal attributable to thyrotoxicosis); (2) bone density monitoring protocols (levothyroxine long-term suppressive therapy → subclinical thyrotoxicosis → osteoporosis → fracture risk; DEXA scan monitoring for patients on levothyroxine suppression) applied to resmetirom through thyroid hormone class proxy — MAESTRO-NASH did not show bone density loss signal attributable to resmetirom because THRα-mediated bone resorption requires systemic thyroid hormone receptor activation that liver-selective resmetirom does not provide; (3) TSH titration monitoring (levothyroxine: TSH monitoring every 6–8 weeks to target euthyroid range; suppressive dosing for thyroid cancer: TSH <0.1 mU/L target) returned for resmetirom prescribing — Rezdiffra prescribing does not involve TSH monitoring as a PK/PD endpoint; resmetirom does not replace endogenous thyroid hormone function; it acts on hepatic lipid metabolism independently of pituitary-thyroid axis; (4) MASH histological assessment — NAS scoring (steatosis grade 0–3 + lobular inflammation grade 0–3 + hepatocyte ballooning grade 0–2 = NAS 0–8; MASH resolution requires NAS ≤2 or NAS ≥2 without steatohepatitis; F2–F3 fibrosis improvement ≥1 stage by modified Ishak/METAVIR); hepatic VCTE (vibration-controlled transient elastography; FibroScan; liver stiffness kPa) or MRE (magnetic resonance elastography) for fibrosis monitoring; hepatic steatosis by MRI-PDFF (proton density fat fraction) — entirely absent from thyroid hormone replacement protocols that have no liver histology monitoring component.

Glyphward's red-team scanner detects the levothyroxine/liothyronine thyroid hormone replacement proxy misroute for resmetirom by probing EHS platform APIs with drug name synonyms (resmetirom, Rezdiffra, MGL-3196, MGL3196, resmetirom tablet), NDA identifiers (217785), and mechanism class keywords (THRbeta agonist, thyroid hormone receptor beta, liver selective THR agonist, THRB agonist MASH, hepatic THRbeta selectivity, liver selective thyromimetic, resmetirom MAESTRO-NASH, MASH fibrosis drug, NASH liver fibrosis, metabolic steatohepatitis agonist, hepatic first-pass THR, Rezdiffra MASH, THRb liver metabolic, hepatic lipid THRbeta, DNL suppression liver, LDL-C thyromimetic) cross-referenced against mechanism assignments (liver-selective THRβ selective agonist vs systemic levothyroxine/liothyronine thyroid hormone replacement) and selectivity flags (28-fold THRβ/THRα selectivity; liver-targeted 94–98% first-pass vs systemic distribution). The liver-selective THRβ agonist injection surface represents the first-MASH-approved-drug adversarial class: when the first THRβ liver-selective agonist and first MASH-approved drug (approved March 2024) enters the EHS database ecosystem, every platform routes it to systemic thyroid hormone replacement — missing that liver-targeted THRβ-selective agonism for metabolic liver disease fibrosis improvement constitutes a mechanistically distinct class from the systemic thyroid hormone replacement that has dominated thyroid medicine since 1958 (levothyroxine synthetic first synthesized). The 240th mechanism class gap: no independent liver-selective THRβ selective agonist MASH drug OEL class exists in US EHS databases before NDA 217785 March 14 2024.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "resmetirom", "nda": "217785"},
    {"platform": "velocityehs", "query": "MGL-3196",   "nda": "217785"},
    {"platform": "ehs_insight", "query": "Rezdiffra",  "nda": "217785"},
]

async def scan_thrb_mash_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"]},
        timeout=10.0,
    )
    data = resp.json()
    class_returned = data.get("drug_class", "")
    mechanism = data.get("mechanism", "")
    return {
        "platform": target["platform"],
        "nda": target["nda"],
        "thyroid_proxy": any(x in class_returned.lower() for x in ["levothyroxine", "liothyronine", "thyroid hormone replacement", "thyroid hormone agonist"]),
        "thrb_null": "thrb" not in mechanism.lower() and "thr-beta" not in mechanism.lower() and "thyroid receptor beta" not in mechanism.lower(),
        "mash_absent": "mash" not in mechanism.lower() and "nash" not in mechanism.lower() and "steatohepatitis" not in mechanism.lower(),
        "liver_selective_absent": "liver selective" not in mechanism.lower() and "hepatic first-pass" not in mechanism.lower(),
        "thyrotoxicosis_misroute": any(x in mechanism.lower() for x in ["tachycardia", "atrial fibrillation", "osteoporosis", "tsh monitoring"]),
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_thrb_mash_gap(session, t) for t in TARGETS])
    thy_p  = [r for r in results if r.get("thyroid_proxy")]
    thrb_n = [r for r in results if r.get("thrb_null")]
    mash_a = [r for r in results if r.get("mash_absent")]
    ls_a   = [r for r in results if r.get("liver_selective_absent")]
    tox_m  = [r for r in results if r.get("thyrotoxicosis_misroute")]
    print(f"Resmetirom NDA 217785 — thyroid hormone replacement proxy: {len(thy_p)}/3")
    print(f"  THRβ-selective liver-targeted agonism null: {len(thrb_n)}/3")
    print(f"  MASH/NASH steatohepatitis indication absent: {len(mash_a)}/3")
    print(f"  Liver-selective first-pass extraction absent: {len(ls_a)}/3")
    print(f"  Thyrotoxicosis cardiac/bone protocols misrouted: {len(tox_m)}/3")
    # Expected: all 3 route to levothyroxine/liothyronine thyroid hormone replacement class;
    # THRβ selective liver-targeted agonism null; MASH fibrosis indication absent;
    # liver-selective first-pass absent; systemic thyrotoxicosis protocols inapplicable;
    # first THRβ liver-selective MASH drug = zero liver-selective THRβ agonist OEL class before NDA 217785
asyncio.run(main())