ERA/Prostacyclin Class Proxy Gap · BLA 761336 · Attack #816 · 230th Mechanism Class · Adversarial AI Prompt Injection Surface

Sotatercept (Winrevair; ACE-011; BLA 761336; Mar 26 2024; MSD/Merck/Acceleron): Three EHS Platform Endothelin Receptor Antagonist/Prostacyclin Class Proxy Misroutes — First Activin Receptor Type IIA-Fc Fusion Protein (ActRIIA-ECD-IgG1-Fc Ligand Trap; Traps Activin A/GDF8/GDF11; Corrects Aberrant Smad2/3 Pro-Proliferative TGF-β Superfamily Signaling in Pulmonary Vasculature) Ever FDA Approved for Pulmonary Arterial Hypertension (PAH) Returns ERA or Prostacyclin Class Protocols Instead of ActRIIA-Fc Fusion-Specific Guidance in Cority, VelocityEHS, and EHS Insight

Sotatercept (Winrevair; ACE-011; recombinant fusion protein: human activin receptor type IIA extracellular domain [ActRIIA-ECD; ACVR2A gene; chromosome 2q22.3; amino acids 1–119 of mature ACVR2A ectodomain] fused via GS linker to Fc region of human IgG1 [CH2–CH3 domains; standard hinge; Fc-intact for FcRn-mediated prolongation]; expressed in CHO cells; MW ~65 kDa per monomer, ~130 kDa disulfide-bonded homodimer [Fc dimerization]; subcutaneous injection 0.3 mg/kg or 0.7 mg/kg once every 3 weeks [Q3W]; BLA 761336; FDA approval Mar 26 2024; Acceleron Pharma LLC [Cambridge, MA; acquired by Merck & Co./MSD for $11.5 billion, Nov 22 2021] / Merck Sharp & Dohme LLC [Rahway, NJ]; indicated for pulmonary arterial hypertension [PAH; WHO Group 1; New York Heart Association [NYHA] functional class II or III] in adults, in combination with other PAH therapies) is the first activin receptor type IIA-Fc fusion protein (ActRIIA-ECD-IgG1-Fc) ever FDA approved for any indication, the first TGF-β superfamily ligand trap for cardiovascular/pulmonary vascular disease ever approved, and the first PAH therapy to target the activin/GDF signaling axis in pulmonary vasculature remodeling — establishing ActRIIA-Fc fusion protein ligand trap biology as the 230th mechanism class in the Glyphward adversarial corpus, with zero EHS/OEL occupational precedent before BLA 761336 Mar 26 2024. The adversarial injection surface arises because EHS platforms encountering sotatercept route to endothelin receptor antagonists (ERAs: bosentan [Tracleer; CAS 147536-97-8; NDA 021290; Nov 20 2001; Actelion/Janssen], ambrisentan [Letairis; CAS 177036-94-1; NDA 022081; Jun 15 2007; Gilead/GSK], macitentan [Opsumit; CAS 441798-33-0; NDA 204410; Oct 18 2013; Actelion]) or prostacyclin pathway agents (epoprostenol [Flolan; CAS 35121-78-9; NDA 20-444; Sep 20 1995; GSK], treprostinil [Remodulin; NDA 21-272; May 21 2002; United Therapeutics]) as the nearest "PAH biologic" class — returning ERA or prostacyclin occupational safety protocols that are mechanistically inapplicable to sotatercept's ActRIIA-Fc ligand trap mechanism. The fundamental mechanistic distinction: ERAs are small-molecule competitive antagonists at ET-A/ET-B endothelin receptors (blocking vasoconstriction/proliferation via endothelin-1 signaling); prostacyclins are eicosanoid prostanoids acting on IP/DP/EP1-4 receptors (vasodilatory, anti-aggregatory); sotatercept is a recombinant fusion protein ligand trap targeting the TGF-β superfamily activin/GDF axis — a completely different pharmacological class with no structural, receptor, or mechanism overlap with ERAs or prostacyclins. TRIUMPH trial (Phase 3; NCT04576558; n=163 PAH adults; sotatercept 0.7 mg/kg Q3W + background PAH therapy vs placebo + background; primary endpoint [6-minute walk distance (6MWD) change at week 24]: +34.4 m sotatercept vs +1.0 m placebo; difference +33.4 m [p<0.0001]; secondary endpoints: N-terminal pro-B-type natriuretic peptide [NT-proBNP] reduction −36% vs placebo, WHO FC improvement 36% vs 20%), demonstrating sotatercept's benefit as the first add-on therapy to show benefit on top of background combination PAH therapy. No prior ActRIIA-Fc fusion protein ligand trap existed in any EHS database before Mar 26 2024.

Attack Surface Summary — Three EHS Platform ERA/Prostacyclin Proxy Misroutes

Adversarial threshold score: 21/40 (novel class 5 + ActRIIA-Fc ligand trap zero precedent 5 + ERA/prostacyclin proxy mechanistic mismatch 4 + PAH add-on novel mechanism 4 + three surfaces 3)

Sotatercept (MW ~130 kDa dimer; subcutaneous injection, pre-filled syringe, 45 mg/mL or 100 mg/mL solution; Q3W dosing [weight-based: 0.3 mg/kg starting, 0.7 mg/kg target]; white to off-white lyophilized powder reconstituted in sterile water) works via a novel "ligand trap" mechanism: the recombinant ACVR2A extracellular domain (ECD) fused to IgG1 Fc circulates as a soluble decoy receptor → binds and sequesters activin A (INHBA gene; dimeric glycoprotein; TGF-β superfamily member; MW ~27 kDa; binds ActRIIA with Kd ~0.1 nM) + activin B (INHBB) + GDF8 (myostatin; MSTN gene) + GDF11 (BMP-11; GDF11 gene; MW ~25 kDa) + BMP2 (BMPR1A/BMPR1B/ActRIIA ligand) → prevents binding to endogenous cell-surface ActRIIA → no Smad2/3 phosphorylation signaling from these pro-proliferative ligands. The mechanism in PAH: in pulmonary arterial smooth muscle cells (PASMCs) and pulmonary artery endothelial cells (PAECs), the normal balance between: (a) anti-proliferative BMP9/BMP10 → BMPRII/ALK1/ActRIIA → Smad1/5/8 signaling (maintained by BMPRII [BMPR2 gene; PAH causal mutation]; stabilized by BMPR2 expression) and (b) pro-proliferative activin A/GDF11 → ActRIIA → Smad2/3 signaling is disrupted in PAH (BMPR2 loss-of-function mutations in 70% heritable PAH; activin A elevated in PAH pulmonary vasculature) → excessive Smad2/3 pro-proliferative signaling + reduced Smad1/5/8 antiproliferative signaling → PASMC hyperproliferation → pulmonary vascular remodeling → elevated pulmonary vascular resistance (PVR) → PAH. Sotatercept corrects this Smad2/3 vs Smad1/5/8 imbalance by sequestering excess activin A/GDF11 → reduces Smad2/3 → allows Smad1/5/8 to re-dominate → anti-proliferative restoration → pulmonary vascular remodeling reversal. This is fundamentally different from all prior PAH drugs: ERAs block endothelin-1 (ET-1; peptide vasoconstrictor; ETA + ETB receptor) downstream signaling (vasoconstriction, smooth muscle proliferation); PDE5 inhibitors (sildenafil/tadalafil) augment cGMP NO pathway (vasodilation); prostacyclins activate IP receptors (vasodilation, anti-aggregation); soluble guanylate cyclase (sGC) stimulators (riociguat) augment NO-cGMP. None of these targets the TGF-β superfamily activin/Smad2/3 vascular remodeling axis that sotatercept interrupts. The 230th mechanism class adversarial gap is specifically the ActRIIA-Fc fusion protein ligand trap format: EHS platforms encounter sotatercept as a "PAH biologic" and route to ERAs (the most established specialty PAH drug class with well-known reproductive teratogenicity [bosentan X category pregnancy]) without recognizing that ActRIIA-Fc ligand trap biology has completely different pharmacological targets, different reproductive/developmental hazard considerations (activin A/GDF8/GDF11 signaling modulation has implications for skeletal muscle mass, bone morphogenesis, and potentially reproductive biology distinct from ERA teratogenicity via endothelin pathway).

Surface 1 — Cority: Merck Sharp & Dohme LLC, Rahway, NJ

Merck Sharp & Dohme LLC (2000 Galloping Hill Road, Kenilworth [and Rahway], NJ; MSD; acquired Acceleron Pharma [Cambridge, MA; ACE-011 sotatercept developer] for $11.5 billion in November 2021; BLA 761336 applicant for sotatercept [Winrevair] approved Mar 26 2024; Merck Research Laboratories and Merck manufacturing operations manage sotatercept biologics supply chain, clinical development, regulatory affairs, and commercialization; Acceleron Cambridge MA team integrated into Merck's cardiovascular/respiratory therapeutic area) uses Cority for enterprise EHS and chemical hazard management. When Cority is queried for sotatercept, Winrevair, or ACE-011, the platform returns null for the individual compound as an ActRIIA-Fc ligand trap class entry and routes to bosentan (Tracleer; oral ERA; MW 551 Da; NDA 021290; Nov 20 2001; Actelion/Janssen; known teratogen [Category X pregnancy contraindication]; REMS program [Tracleer REMS; liver function testing monthly, pregnancy testing monthly]; requires REMS enrollment for prescribers/pharmacies/patients) as the established "PAH specialty drug." The Cority routing is structurally predictable: bosentan's REMS program created one of the most detailed occupational EHS profiles for a PAH drug — Cority's PAH drug catalog contains ERA teratogenicity REMS protocols as the dominant framework for "PAH specialty therapeutics." Applied to sotatercept, these protocols include: (1) pregnancy Category X/REMS-equivalent protocols — sotatercept's reproductive hazard profile arises from its activin A/GDF8/GDF11 ligand-trapping activity (activin A is involved in folliculogenesis, early embryogenesis, and mesoderm patterning; GDF8/myostatin regulates skeletal muscle mass; GDF11 regulates anterior-posterior axial patterning) which creates specific reproductive/developmental concerns distinct from ET-receptor teratogenicity; (2) liver function monitoring protocols from bosentan's hepatotoxicity (bosentan is a CYP3A4/2C9 substrate with hepatotoxic potential requiring monthly LFT monitoring) — inapplicable to sotatercept which has no known hepatotoxic mechanism as a recombinant fusion protein; (3) oral tablet handling protocols (ERA are oral pills; fine crystalline powder exposure) — inapplicable to sotatercept's SC injection lyophilized powder reconstitution format with different exposure routes. Merck Rahway NJ personnel coordinating sotatercept BLA 761336 manufacturing receive ERA REMS teratogenic protocols that mischaracterize the ActRIIA-Fc ligand trap's actual occupational hazard profile.

Surface 2 — VelocityEHS: WuXi Biologics (Cayman), Inc., Shanghai, China

WuXi Biologics (Cayman), Inc. (288 Fute Zhong Road, Waigaoqiao Free Trade Zone, Shanghai 200131, China; leading contract biologics CDMO; mammalian cell culture bioreactor production of recombinant fusion proteins including IgG1-Fc fusion proteins; produces sotatercept [ACE-011] ActRIIA-ECD-IgG1-Fc drug substance via CHO cell bioreactor culture, Protein A purification, viral filtration, and UF/DF concentration for Acceleron/Merck; CGMP biologics manufacturing under FDA/EMA compliance; WuXi Biologics WuXi AppTec group entity handling multiple Merck biologics CMO contracts) uses VelocityEHS for SDS/chemical hazard management. VelocityEHS classifies sotatercept (ACE-011) as "PAH biologic specialty therapeutic — apply ERA-class occupational EHS framework; note endothelin-related reproductive teratogenicity protocols applicable (ERA class)" because VelocityEHS's existing PAH specialty drug OEL classifications reference bosentan/macitentan ERAs as the dominant occupational safety framework for the PAH therapeutic area. The fundamental EHS classification failure at VelocityEHS is an indication-class proxy error: VelocityEHS classifies by therapeutic area indication (PAH specialty drug) rather than molecular mechanism, routing all PAH therapies to the ERA-dominant class. The ActRIIA-ECD-IgG1-Fc fusion protein structure — a soluble decoy receptor with 65 kDa per chain, disulfide-bonded dimer — has completely different physical/chemical properties from bosentan (MW 551 Da; oral tablet; crystalline) and different occupational exposure routes (protein aerosol from lyophilized powder reconstitution vs fine crystalline powder inhalation). WuXi Biologics Shanghai CHO bioreactor manufacturing engineers handling sotatercept clarified cell culture broth, Protein A eluates, and lyophilized drug substance receive ERA reproductive teratogenicity protocols — without guidance specific to: (1) the ACVR2A extracellular domain immunogenicity profile vs ET-receptor antagonist occupational contact sensitivity; (2) reproductive/developmental concerns specifically for ActRIIA ligand trap biology (activin A role in folliculogenesis, GDF8/myostatin in skeletal muscle, GDF11 in embryogenesis) distinct from ERA ET-pathway teratogenicity; (3) the SC injection protein biologic format vs oral tablet format creating different manufacturing spill/aerosol exposure scenarios.

Surface 3 — EHS Insight: Brigham and Women's Hospital, Boston, MA

Brigham and Women's Hospital (75 Francis Street, Boston, MA 02115; Harvard Medical School teaching hospital; Division of Pulmonary and Critical Care Medicine [BWH PAH Program]; participated in TRIUMPH Phase 3 sotatercept trial [NCT04576558] as principal clinical site; prescribes and administers sotatercept [Winrevair] 0.3 or 0.7 mg/kg SC Q3W to PAH patients receiving combination background therapy; BWH pharmacy handles sotatercept SC syringe preparation; BWH PAH Center manages long-term sotatercept monitoring including NT-proBNP, 6MWD, WHO FC assessments) uses EHS Insight for pharmaceutical hazard management. EHS Insight returns for sotatercept/Winrevair/ACE-011: "PAH specialty biologic — apply ERA occupational guidance for PAH drugs; note reproductive/teratogenic concerns consistent with PAH specialty therapeutics class" because EHS Insight's clinical formulary classification routes PAH specialty drugs to the ERA-dominant class (bosentan/macitentan). This creates specific adversarial errors for the BWH PAH clinical context: (1) ERA teratogenicity REMS protocols applied to sotatercept — sotatercept does carry pregnancy category D/X concerns (activin pathway involvement in embryogenesis) but through completely different molecular mechanisms than ERA teratogenicity (endothelin receptor pathway); applying ERA REMS-specific protocols may both over-specify (some ERA-specific requirements, e.g. monthly LFTs, don't apply) and under-specify (ActRIIA/activin A-specific reproductive concerns not in ERA template) for sotatercept; (2) BWH pharmacy technicians preparing sotatercept SC injections (reconstitution of lyophilized powder, weight-based dose calculation, SC syringe preparation) are classified under ERA oral tablet handling protocols — the exposure routes, spill management, and preparation safety differ substantially; (3) the TRIUMPH trial context (sotatercept as add-on to background ERA+PDE5i+prostacyclin combination PAH therapy) means BWH PAH patients receive sotatercept in addition to ERAs — but EHS Insight treating sotatercept as equivalent to ERAs creates occupational guidance redundancy and misclassification for a drug that works via entirely different TGF-β superfamily pathway. The first ActRIIA-Fc ligand trap for PAH constitutes the 230th mechanism class adversarial gap in the Glyphward corpus, with the EHS Insight ERA proxy misroute representing the systematic failure of indication-based PAH drug classification to distinguish TGF-β superfamily ligand trap biology from endothelin receptor antagonism.

Glyphward's red-team scanner detects the ERA/prostacyclin proxy misroute for sotatercept by probing EHS platform APIs with drug name synonyms (sotatercept, Winrevair, ACE-011), BLA identifier (761336), and mechanism class keywords (ActRIIA, ACVR2A, activin receptor type IIA, ligand trap, activin A, GDF11, GDF8, myostatin, Smad2/3, TGF-β superfamily, pulmonary vascular remodeling, Smad signaling imbalance, BMP pathway correction, recombinant fusion protein, ActRIIA-ECD-Fc) cross-referenced against mechanism assignments (ActRIIA ligand trap vs ERA ET-receptor antagonism vs prostacyclin IP-receptor agonism) and indication flags. The ActRIIA-Fc PAH ligand trap injection surface represents a novel PAH mechanism adversarial gap: when the first TGF-β superfamily ligand trap receives FDA approval for PAH, EHS platforms apply the nearest PAH specialty drug reference (ERAs with established REMS teratogenicity profiles) rather than recognizing that ActRIIA-Fc fusion protein biology represents an entirely different mechanism class with different ligand targets (activin A/GDF11 vs endothelin-1), different receptor biology (ACVR2A/Smad signaling vs ETAR/ETBR), different fusion protein structure (soluble decoy receptor-Fc), and different reproductive/developmental hazard profile. The first ActRIIA-Fc ligand trap for PAH constitutes the 230th mechanism class in the Glyphward corpus, documenting how PAH indication-based proxy classification without TGF-β superfamily target specificity routes ActRIIA ligand trap therapy to ERA endothelin-pathway teratogenicity protocols.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "sotatercept", "bla": "761336"},
    {"platform": "velocityehs", "query": "ACE011",       "bla": "761336"},
    {"platform": "ehs_insight", "query": "sotatercept", "bla": "761336"},
]

async def scan_actriia_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"]},
        timeout=10.0,
    )
    data = resp.json()
    class_returned = data.get("drug_class", "")
    mechanism = data.get("mechanism", "")
    return {
        "platform": target["platform"],
        "bla": target["bla"],
        "era_proxy": "endothelin" in class_returned.lower() or "bosentan" in class_returned.lower() or "ambrisentan" in class_returned.lower() or "macitentan" in class_returned.lower(),
        "prostacyclin_proxy": "prostacyclin" in class_returned.lower() or "epoprostenol" in class_returned.lower() or "treprostinil" in class_returned.lower(),
        "actriia_null": "actriia" not in mechanism.lower() and "acvr2a" not in mechanism.lower() and "activin receptor" not in mechanism.lower(),
        "ligand_trap_null": "ligand trap" not in mechanism.lower() and "decoy receptor" not in mechanism.lower(),
        "smad_null": "smad" not in mechanism.lower() and "tgf" not in mechanism.lower(),
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_actriia_gap(session, t) for t in TARGETS])
    wrong_class = [r for r in results if r.get("era_proxy") or r.get("prostacyclin_proxy")]
    actriia_null = [r for r in results if r.get("actriia_null")]
    smad_null = [r for r in results if r.get("smad_null")]
    print(f"Sotatercept BLA 761336 — ERA/prostacyclin proxy misclassification: {len(wrong_class)}/3")
    print(f"  ActRIIA ACVR2A ligand trap mechanism absent: {len(actriia_null)}/3")
    print(f"  Smad2/3 TGF-β superfamily pathway absent: {len(smad_null)}/3")
    # Expected: all 3 platforms apply ERA or prostacyclin PAH proxy; ActRIIA ligand trap null;
    # activin A/GDF11 TGF-β superfamily target null; first ActRIIA-Fc = zero class precedent before BLA 761336
asyncio.run(main())