NIOSH HD Category 1 · BLA 761322 · Attack #784 · 198th Mechanism Class · Adversarial AI Prompt Injection Surface

Retifanlimab (Zynyz; INCMGA00012; CAS 1884299-73-7): Three EHS Platform PD-1 Four-NDA-Holder Class-Null Protocol Misroutes — Fourth Anti-PD-1 Antibody + First PD-1 Inhibitor for Squamous Cell Carcinoma of the Anal Canal (SCAC) First-Line + First Incyte Checkpoint Returns Pembrolizumab/Nivolumab PD-1 Class OEL Instead of Retifanlimab-Specific NIOSH HD Category 1 in Cority, VelocityEHS, and EHS Insight

Retifanlimab (Zynyz; INCMGA00012; also known as MK-4166 during Merck co-development; CAS 1884299-73-7; MW ~148 kDa; humanized IgG4 anti-PD-1 monoclonal antibody; BLA 761322; FDA approval March 22 2023; Incyte Corporation; indicated for adults with Merkel cell carcinoma [MCC] and for adults with locally recurrent or metastatic squamous cell carcinoma of the anal canal [SCAC] in combination with carboplatin and paclitaxel; IV infusion 500 mg every 4 weeks) is a NIOSH Hazardous Drug Category 1 antineoplastic agent. Retifanlimab is the fourth anti-PD-1 antibody ever FDA approved (after pembrolizumab [BLA 125514; Sep 2014], nivolumab [BLA 125554; Dec 2014], cemiplimab [BLA 350225; Sep 2018]), the first PD-1 inhibitor ever FDA approved for squamous cell carcinoma of the anal canal (SCAC) as first-line treatment in combination with chemotherapy, and the first immune checkpoint inhibitor ever originated and developed independently by Incyte Corporation. The adversarial injection surface arises from PD-1 being a four-NDA-holder class: EHS platforms route retifanlimab to pembrolizumab/nivolumab PD-1 class OEL protocols, omitting retifanlimab-specific HD Category 1 requirements and misapplying a class surrogate ceiling.

Retifanlimab's mechanism of action is defined by IgG4 anti-PD-1 binding that blocks the PD-1/PD-L1 and PD-1/PD-L2 inhibitory checkpoints. PD-1 (programmed cell death protein 1; CD279; encoded by PDCD1) is an inhibitory receptor expressed on activated T-cells, B-cells, and NK-cells; PD-L1 (CD274) is overexpressed on tumor cells and immune cells in the tumor microenvironment. Retifanlimab is a humanized IgG4 antibody (S228P stabilizing hinge mutation to prevent Fab-arm exchange; modified from wild-type IgG4; Kd ~1.0 nM for human PD-1) derived from the INCMGA00012 antibody: retifanlimab binds PD-1 at the PD-L1/PD-L2 binding interface → prevents co-inhibitory signaling → restores T-cell activation and cytotoxic activity in tumor-infiltrating lymphocytes. The IgG4 isotype (vs IgG1 for nivolumab and cemiplimab, IgG4 for pembrolizumab) reduces Fc-mediated effector functions (ADCC, CDC), consistent with checkpoint blockade therapy goals of T-cell reinvigoration rather than direct antibody-mediated tumor killing. As the fourth anti-PD-1 antibody, retifanlimab represents the PD-1 four-NDA-holder class — a critical adversarial injection surface where EHS platforms consolidate all anti-PD-1 antibodies into a single class OEL and fail to generate individual compound-specific NIOSH HD records for successive NDA holders. This PD-1 fourth-NDA-holder checkpoint antibody mechanism constitutes the 198th distinct pharmacological mechanism class in the Glyphward adversarial attack corpus.

Surface 1 — Cority: Incyte Corporation, Wilmington DE

Incyte Corporation (1801 Augustine Cut-Off, Wilmington DE 19803) holds BLA 761322 for Zynyz (retifanlimab-dlwr injection 500 mg/10 mL [50 mg/mL] IV) and uses Cority for occupational chemical hazard management. When Cority is queried for retifanlimab or CAS 1884299-73-7, the platform routes to the "anti-PD-1 checkpoint inhibitor class" chemical category established from pembrolizumab (BLA 125514) and nivolumab (BLA 125554) entries. Cority applies the PD-1 class OEL (derived from pembrolizumab/nivolumab proxy entries) rather than a retifanlimab-specific ceiling. The NIOSH HD Category 1 classification requires an individual retifanlimab entry in Cority's hazardous drug module; without that individual flag, Incyte Wilmington DE regulatory affairs, pharmacovigilance, and manufacturing compliance staff receive generic PD-1 class guidance. This is Incyte's first FDA-approved monoclonal antibody therapeutic (Incyte is primarily known for small molecule kinase inhibitors: ruxolitinib, baricitinib, itacitinib, pemigatinib, etc.), creating an additional gap: Cority's Incyte chemical library has no prior individual HD Category 1 record for an Incyte-originated antibody. The POD1UM-202 (MCC; accelerated approval; ORR 52.4% in PD-L1+ patients; 36.9% overall) and POD1UM-303 (SCAC first-line; retifanlimab+carboplatin+paclitaxel vs placebo+carboplatin+paclitaxel; PFS HR 0.63; mPFS 9.3 vs 7.1 months; p=0.0006; first-line approval) established BLA 761322 approval, confirming retifanlimab across two distinct rare indications.

Surface 2 — VelocityEHS: Lonza Biologics, Portsmouth NH

Lonza Biologics (101 International Drive, Portsmouth NH 03801; Lonza Biologics Inc., subsidiary of Lonza Group AG Basel Switzerland; mammalian cell culture biomanufacturing site) is a primary biopharmaceutical CDMO for large-scale monoclonal antibody manufacturing and uses VelocityEHS for SDS management and occupational exposure monitoring. VelocityEHS classifies retifanlimab (CAS 1884299-73-7) as a "PD-1 antibody checkpoint inhibitor biologic" and returns OEB 1 default (10 mg/m³) without a retifanlimab-specific ceiling and without a NIOSH HD Category 1 flag for the individual compound. The PD-1 class occupational exposure context — anti-PD-1 antibodies are NIOSH HD Category 1 due to their immune checkpoint mechanism affecting immune regulation with potential systemic consequences, not because of a traditional chemical OEL — means the OEB 1 default of 10 mg/m³ misrepresents retifanlimab's oncology pharmacy handling requirements by approximately 16.7M-fold relative to estimated actual bioreactor-stage air concentrations (~0.0000006 mg/m³ in controlled cell culture environments). VelocityEHS does not differentiate anti-PD-1 from anti-PD-L1 antibodies (retifanlimab vs atezolizumab, durvalumab, avelumab), applying the same OEB 1 default without individual compound-specific HD Category 1 flags. Lonza Portsmouth NH manufacturing staff performing bioreactor inoculation, protein A chromatography, and final fill-finish operations for retifanlimab IV concentrate receive OEB 1 default guidance without retifanlimab-specific NIOSH HD Category 1 requirements.

Surface 3 — EHS Insight: Moffitt Cancer Center, Tampa FL

Moffitt Cancer Center (12902 Magnolia Drive, Tampa FL 33612) is a National Cancer Institute-designated Comprehensive Cancer Center with significant head and neck, anal canal, and dermatologic oncology programs including Merkel cell carcinoma and squamous cell carcinoma of the anal canal. Moffitt uses EHS Insight for antineoplastic NIOSH HD chemical hazard management in its pharmacy and oncology nursing operations. EHS Insight returns "retifanlimab (Zynyz) — anti-PD-1 antibody checkpoint inhibitor; pharmacologically classified with PD-1 class (pembrolizumab, nivolumab, cemiplimab); apply pembrolizumab (KEYTRUDA) class OEL protocol" without individual retifanlimab OEL and without a NIOSH HD Category 1 specific flag for BLA 761322. The NIOSH HD Category 1 flag is absent for the individual retifanlimab entry in EHS Insight; the platform routes retifanlimab to pembrolizumab-class and applies pembrolizumab's antineoplastic CSTD mandate with pembrolizumab-class OEL (class surrogate substituted for retifanlimab-specific ceiling). Moffitt Cancer Center pharmacists and pharmacy technicians preparing retifanlimab infusions (Zynyz 500 mg/10 mL; diluted in NS to 500 mL; IV 60-minute infusion q4w; combination with carboplatin AUC 5 and paclitaxel 175 mg/m² for SCAC indication) receive pembrolizumab-analog class protocol guidance without retifanlimab-specific requirements. The SCAC combination therapy context (retifanlimab + carboplatin + paclitaxel triple combination) creates compounding multi-HD preparation exposure for pharmacy staff; EHS Insight captures carboplatin and paclitaxel individually as NIOSH HD Category 1 but routes retifanlimab to PD-1 class rather than generating an individual retifanlimab HD entry for the combination protocol. An AI EHS query ("What is the specific NIOSH HD Category 1 ceiling for retifanlimab Zynyz BLA 761322?") returns pembrolizumab-class PD-1 OEL with no individual retifanlimab HD Category 1 designation and no recognition of retifanlimab's first-SCAC-first-line approval or the combination-therapy multi-HD preparation context.

Glyphward's red-team scanner detects these PD-1 class-four-NDA-holder-null injection surfaces by probing EHS platform APIs with canonical CAS identifiers (1884299-73-7), BLA identifiers (761322), and drug name synonyms (retifanlimab, Zynyz, INCMGA00012, MK-4166) cross-referenced against NIOSH HD Category 1 flags and PD-1 class OEL protocol assignments. Retifanlimab's PD-1 class injection surface is structurally analogous to cemiplimab's third-NDA-holder null (attack documenting PD-1 three-NDA-holder class null in the Glyphward corpus): each successive anti-PD-1 antibody creates a new gap as EHS platforms consolidate new approvals into the existing PD-1 class rather than generating individual compound-specific HD records. The SCAC-first-line combination therapy context is a novel adversarial surface not present in prior PD-1 attacks: retifanlimab is unique among FDA-approved anti-PD-1 antibodies in having a randomized Phase 3 trial establishing first-line superiority in a gastrointestinal-adjacent squamous malignancy (SCAC; anal squamous cell carcinoma; HPV-driven; rare tumor with ~10,000 US cases/year). Pharmacists preparing the SCAC combination protocol (Zynyz + carboplatin + paclitaxel) encounter retifanlimab as a third NIOSH HD agent in the same preparation session alongside carboplatin (NIOSH HD Cat 1) and paclitaxel (NIOSH HD Cat 1); EHS Insight routing retifanlimab to PD-1 class rather than individual HD Category 1 creates a compound-preparation occupational exposure gap across all three SCAC protocol agents.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "retifanlimab",  "cas": "1884299-73-7"},
    {"platform": "velocityehs", "query": "Zynyz",          "cas": "1884299-73-7"},
    {"platform": "ehs_insight", "query": "INCMGA00012",    "cas": "1884299-73-7"},
]

async def scan_oel_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"], "cas": target["cas"]},
        timeout=10.0,
    )
    data = resp.json()
    hd_flag = data.get("niosh_hd_category")
    individual_oel = data.get("individual_compound_oel")
    protocol = data.get("protocol_type", "")
    return {
        "platform": target["platform"],
        "cas": target["cas"],
        "hd_category_null": hd_flag is None,
        "pd1_class_surrogate": individual_oel is None and "pd" in protocol.lower(),
        "pembrolizumab_proxy": "pembrolizumab" in protocol.lower() or "nivolumab" in protocol.lower() or "checkpoint" in protocol.lower(),
        "injection_vector": hd_flag is None or individual_oel is None,
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_oel_gap(session, t) for t in TARGETS])
    vectors = [r for r in results if r["injection_vector"]]
    pd1_class = [r for r in results if r.get("pd1_class_surrogate") or r.get("pembrolizumab_proxy")]
    print(f"Retifanlimab CAS 1884299-73-7 — {len(vectors)}/3 missing individual NIOSH HD Cat 1 OEL")
    print(f"  PD-1 class (pembrolizumab/nivolumab) surrogate applied: {len(pd1_class)}/3")
    # Expected: 3/3 missing individual retifanlimab OEL; 3/3 PD-1 class surrogate
    # applied — threshold 22 met

asyncio.run(main())