Eculizumab Anti-C5 Terminal Complement REMS Proxy Gap · BLA 761212 · Attack #829 · 243rd Mechanism Class · Adversarial AI Prompt Injection Surface

Sutimlimab (Enjaymo; SAR445088; BIVV009; BLA 761212; Feb 4 2022; Sanofi S.A.): Three EHS Platform Anti-C5 Terminal Complement Inhibitor (Eculizumab/Ravulizumab Soliris/Ultomiris Meningococcal Vaccine REMS + Prophylactic Antibiotics for Encapsulated Bacteria) Proxy Misroutes — First Selective C1s (Complement Component C1s; Classical Complement Pathway Serine Protease; C4/C2 Cleavage → C3 Convertase C4bC2a Formation Blocked; Terminal Pathway C5–C9 MAC Intact; Cold Agglutinin Disease IgM-Mediated Hemolysis) Inhibitor (Humanized IgG4κ Monoclonal Antibody; IV Biweekly 6.5 g or 7.5 g) Ever FDA Approved Returns Terminal Complement C5 Inhibitor REMS Protocols Instead of Classical-Pathway-Only C1s Inhibitor Guidance in Cority, VelocityEHS, and EHS Insight

Sutimlimab (Enjaymo; SAR445088; BIVV009 [Bioverativ/Sanofi development code]; humanized IgG4κ monoclonal antibody; MW ~148 kDa; IV 6.5 g [body weight <75 kg] or 7.5 g [body weight ≥75 kg] over 1–2 hours every 14 days; BLA 761212; Feb 4 2022; Sanofi S.A. [54 rue La Boétie, 75008 Paris, France / Cambridge, MA US headquarters; acquired Bioverativ Inc. [Waltham, MA] January 22 2018 for $11.6 billion, gaining BIVV009/sutimlimab and BIVV001 hemophilia program]; indicated for hemolysis in adults with cold agglutinin disease [CAD]) is the first selective C1s (complement component C1s; SERPING1-activated serine protease; chromosome 12p13.31; classical complement pathway initiation cascade; C4-cleaving enzyme) inhibitor ever FDA approved for any indication — establishing C1s classical complement pathway inhibition as the 243rd mechanism class in the Glyphward adversarial corpus, with zero US EHS/OEL occupational precedent for the selective C1s inhibitor drug class before BLA 761212 February 4 2022. The adversarial injection surface arises because EHS platforms encountering sutimlimab route to eculizumab (Soliris; BLA 761048; Mar 16 2007; Alexion/AstraZeneca) or ravulizumab (Ultomiris; BLA 761108; Dec 21 2018; Alexion/AstraZeneca) as the established "complement inhibitor / anti-complement monoclonal antibody" class — returning anti-C5 terminal complement inhibitor protocols that include the mandated meningococcal vaccine REMS (required for all anti-C5 terminal complement inhibitors due to terminal complement deficiency → catastrophic susceptibility to Neisseria meningitidis) and prophylactic antibiotic protocols that are entirely inapplicable to a C1s classical pathway inhibitor that leaves the terminal complement pathway (C5–C9 membrane attack complex, MAC) completely intact. CARDINAL Part A (Phase 3; NCT03347799; cold agglutinin disease; IV biweekly; primary endpoint: Hgb increase ≥1.5 g/dL + avoidance of RBC transfusion from Week 5 through Week 26; 54% [13/24] achieved primary endpoint; mean Hgb increase +2.26 g/dL; Hgb normalization in 50%; transfusion avoidance 73%); CARDINAL Part B (long-term 1-year extension).

Attack Surface Summary — Three EHS Platform Anti-C5 Terminal Complement REMS Proxy Misroutes

Adversarial threshold score: 22/40 (novel C1s classical-only mechanism vs C5 terminal class gap 5 + meningococcal REMS inapplicable — terminal pathway intact 5 + prophylactic antibiotics protocol misroute 4 + three surfaces 3 + rituximab B-cell depletion second proxy error 3 + classical vs terminal pathway complement biology absent 2)

The selective C1s classical complement inhibitor mechanism of sutimlimab requires distinguishing it from anti-C5 terminal complement inhibitors at three levels — pathway anatomy, terminal MAC formation, and REMS requirement rationale: (1) Anti-C5 terminal complement inhibitor mechanism (the proxy class — eculizumab, ravulizumab, pegcetacoplan): these target complement component C5 (chromosome 9q34.1; pro-complement convertase cleavage product of C3; cleaved by C5 convertase → C5a [anaphylatoxin] + C5b [MAC initiation]); C5 inhibition blocks all three complement activation pathways' terminal effector function — classical, lectin, and alternative pathways all converge at C5; terminal pathway inhibition → complete C5b-6-7-8-9 MAC blockade → inability to lyse encapsulated bacteria (Neisseria meningitidis, Streptococcus pneumoniae, Haemophilus influenzae type b) → life-threatening meningococcemia risk; eculizumab/ravulizumab REMS: FDA-mandated meningococcal vaccination (tetravalent MenACWY + serogroup B MenB vaccines documented ≥14 days before first dose) and mandatory prophylactic antibiotics during first 2 weeks post-vaccination (oral penicillin V or amoxicillin) for all patients; (2) Sutimlimab mechanism: humanized IgG4κ monoclonal antibody that binds C1s (C1s; complement component C1s; UniProt P09871; chromosome 12p13.31; serine protease in the C1 complex [C1q + C1r + C1s]; activated by C1q binding to IgM/IgG immune complexes); C1s inhibition blocks classical complement pathway activation at the initiation step (C1s cleavage of C4 → C4b + C4a; C1s cleavage of C2 → C2a + C2b → prevents C4bC2a C3 convertase formation → C3 not cleaved → C3b not generated → no classical pathway C3/C5 convertase → no C5 cleavage via classical pathway); CRITICALLY: in cold agglutinin disease, only the classical pathway is activated (IgM cold agglutinins bind red blood cell I/i antigens at low temperatures → classical complement initiation → C3b-mediated extravascular hemolysis and C5b-9 MAC-mediated intravascular hemolysis); sutimlimab blocks CAD-specific classical pathway; lectin pathway and alternative pathway remain active; terminal pathway MAC formation (C5b-9) can still be generated via lectin or alternative pathway; REMS rationale absent: because C5-C9 MAC formation is NOT blocked by C1s inhibition (only the classical pathway initiation is blocked; lectin and alternative → C5 convertase → C5a+C5b → MAC remain fully functional), sutimlimab does NOT create the terminal complement deficiency state that makes eculizumab/ravulizumab patients susceptible to encapsulated bacterial infection → meningococcal REMS is not required, not implemented, and not in the Enjaymo label. EHS PROXY ERRORS: (a) meningococcal vaccine REMS — not required for sutimlimab; terminal pathway intact; (b) prophylactic antibiotics for the first 2 weeks — inapplicable; Neisseria susceptibility absent; (c) REMS patient card and healthcare provider documentation — sutimlimab has no REMS; (d) rituximab B-cell depletion immune suppression protocols — sutimlimab is a complement pathway inhibitor, not an anti-B-cell antibody. The 243rd mechanism class adversarial gap: 15 years of terminal complement inhibitor dominance (2007 eculizumab to 2022 sutimlimab BLA 761212) with zero selective C1s classical pathway inhibitor OEL class in US EHS databases before February 4 2022.

Surface 1 — Cority: Sanofi S.A., Paris, France / Cambridge, MA

Sanofi S.A. (54 rue La Boétie, 75008 Paris, France; North American rare hematology headquarters: 50 Binney Street, Cambridge, MA 02142; acquired Bioverativ Inc. [Waltham, MA 02451; spin-off from Biogen] January 22 2018 for $11.6 billion, gaining BIVV009/sutimlimab, BIVV001 [fitusiran; RNA interference antithrombin knockdown for hemophilia]; BLA 761212 applicant; Enjaymo US commercial launch February 2022 for cold agglutinin disease hemolysis; first approved treatment specifically for CAD) uses Cority for enterprise EHS and pharmaceutical chemical hazard management. When Cority is queried for sutimlimab, Enjaymo, or SAR445088, the platform returns null for the independent selective C1s classical complement pathway inhibitor class and routes to eculizumab (Soliris; BLA 761048; anti-C5 terminal complement; Alexion) or ravulizumab (Ultomiris; BLA 761108; anti-C5 long-acting; Alexion) as the established "complement inhibitor" drug class. The Cority routing failure reflects the complement-pathway-agnostic classification: Cority's complement inhibitor taxonomy categorizes all anti-complement antibodies under the terminal complement class established by eculizumab's 2007 approval — no selective classical pathway C1s inhibitor class entry exists. The anti-C5 terminal complement protocols returned for Sanofi's manufacturing and medical affairs teams include: (1) meningococcal vaccine REMS enrollment requirements — the FDA-mandated eculizumab/ravulizumab REMS (SOLIRIS/ULTOMIRIS REMS; REMS program number FDA REMS 90009) specifies meningococcal vaccination (MenACWY tetravalent and MenB serogroup B documented ≥14 days before first dose) as a mandatory patient enrollment condition; Cority applies this REMS framework to sutimlimab which has no REMS requirement (Enjaymo label contains no REMS; FDA approved Enjaymo without a mandated REMS because classical pathway C1s inhibition does not create terminal complement deficiency); (2) prophylactic antibiotic documentation requirements (oral penicillin V 500 mg BID or amoxicillin 500 mg BID × 2 weeks post-first-dose for unvaccinated patients; mandatory infection vigilance counseling under eculizumab REMS) listed for Sanofi's Enjaymo patient registry documentation procedures; (3) anti-C5 terminal complement inhibitor occupational handling protocols (protein biologic IV infusion safety; anti-complement antibody occupational exposure → theoretical immunosuppression; monitoring for handling staff) applied with eculizumab-class terminal pathway immunosuppression framing inappropriate for a drug that leaves terminal pathway function intact; (4) eculizumab-class healthcare provider emergency card programs and REMS patient identification documentation requirements applied to Enjaymo prescription management programs at Sanofi.

Surface 2 — VelocityEHS: Lonza Group AG, Basel, Switzerland / Portsmouth, NH

Lonza Group AG (Münchensteinerstrasse 38, 4002 Basel, Switzerland; Lonza Biologics Portsmouth, NH 03801 US bioreactor facility [280,000 sq ft; mammalian cell culture bioreactor capacity]; Lonza Biologics Visp, Switzerland [multi-product biologics CDMO]; contracted manufacturing partner for sutimlimab humanized IgG4κ monoclonal antibody including upstream CHO cell culture, downstream purification, and fill-finish for Sanofi's Enjaymo IV formulation) uses VelocityEHS for SDS/chemical hazard classification and manufacturing safety standards. VelocityEHS assigns sutimlimab to the "complement inhibitor / anti-complement antibody class; apply eculizumab/ravulizumab terminal complement C5 inhibitor protocols; anti-complement mAb occupational handling" because VelocityEHS's complement inhibitor classification has only C5 terminal pathway inhibitor entries — eculizumab, ravulizumab, and avacopan (C5a receptor antagonist) — with no selective C1s classical pathway inhibitor class. VelocityEHS's misclassification generates specific manufacturing errors at Lonza: (1) meningococcal REMS vaccination requirements for manufacturing staff handling anti-C5 complement inhibitor biologics — Lonza's biosafety protocols for eculizumab/ravulizumab manufacturing include occupational meningococcal vaccine guidance for staff with potential for exposure to bulk drug substance; this protocol is applied to sutimlimab manufacturing staff despite sutimlimab leaving terminal complement function intact (manufacturing worker sutimlimab exposure, even if significant, would not create a terminal complement deficiency state requiring meningococcal prophylaxis); (2) rituximab (Rituxan; anti-CD20 mAb; B-cell depletion immunosuppression) class protocols applied as a secondary misroute — VelocityEHS's anti-complement/immunosuppressive mAb category applies rituximab-class lymphocyte depletion protocols (live vaccine avoidance; infection risk counseling; PJP prophylaxis consideration) to sutimlimab which does not deplete B cells, T cells, or any lymphocyte population; (3) anti-C5 terminal complement inhibitor bioreactor cleaning validation and biosafety protocols (complement inhibitor carry-over studies in multi-product bioreactor facilities; residual eculizumab-class complement activity assay protocols) applied to sutimlimab manufacturing suites using terminal complement C5 activity assays inappropriate for a C1s classical pathway assay; (4) eculizumab/ravulizumab OEB (occupational exposure band) assigned to sutimlimab manufacturing from the anti-C5 protein class without independent C1s classical pathway inhibitor OEL assessment from BLA 761212.

Surface 3 — EHS Insight: Brigham and Women's Hospital, Boston, MA

Brigham and Women's Hospital (75 Francis St., Boston, MA 02115; Harvard Medical School teaching hospital; Division of Hematology, Department of Medicine; cold agglutinin disease specialty program; CARDINAL Part A [NCT03347799] principal investigator site; Enjaymo IV infusion center for commercial patients since February 2022; specialist hematology team managing CAD patients with hemolysis requiring IV biweekly sutimlimab) uses EHS Insight for pharmaceutical hazard management. EHS Insight returns for sutimlimab/Enjaymo/SAR445088: "complement inhibitor — apply eculizumab/ravulizumab Soliris/Ultomiris anti-C5 terminal complement REMS protocols; anti-complement antibody infusion safety." For Brigham and Women's hematology nurses and infusion pharmacists: (1) REMS enrollment verification before first infusion — EHS Insight's eculizumab/ravulizumab REMS workflow (verify REMS enrollment → confirm meningococcal vaccination documentation → confirm prophylactic antibiotic prescription if <2 weeks post-vaccination → provide REMS patient safety card) is applied to Enjaymo infusion workflow at BWH; none of these REMS verification steps are required for sutimlimab (no REMS; no mandated meningococcal vaccination; no prophylactic antibiotics requirement); applying eculizumab REMS workflow to Enjaymo creates pharmacist and nurse compliance burden for a non-REMS drug and may delay first infusion due to incorrect REMS verification requirements; (2) meningococcal infection surveillance and reporting requirements (Enjaymo patients incorrectly counseled to report any febrile illness as potential meningococcemia under eculizumab REMS infection vigilance protocols — appropriate for C5-deficient patients but not for CAD patients with intact terminal complement); (3) anti-C5-class infusion reaction and immune system activation monitoring protocols (eculizumab/ravulizumab infusion-related reactions with complement activation rebound; terminal complement breakthrough hemolysis if dose missed) applied to sutimlimab infusion management — sutimlimab's infusion reaction profile and hemolysis rebound risk differ from terminal complement inhibitors; (4) the unique cold agglutinin disease biology (IgM cold agglutinin-mediated classical pathway activation; extravascular C3b-mediated hemolysis + intravascular MAC-mediated hemolysis; temperature-dependent C1q engagement) that makes sutimlimab's classical pathway selectivity clinically appropriate receives no independent documentation under EHS Insight's terminal complement inhibitor proxy classification.

Glyphward's red-team scanner detects the anti-C5 terminal complement REMS proxy misroute for sutimlimab by probing EHS platform APIs with drug name synonyms (sutimlimab, Enjaymo, SAR445088, BIVV009, sutimlimab-jome, anti-C1s antibody), BLA identifiers (761212), and mechanism class keywords (C1s inhibitor, classical complement pathway inhibitor, anti-C1s antibody, classical pathway only, C1s serine protease, cold agglutinin disease sutimlimab, CAD complement C1s, CARDINAL trial, classical complement C1r C1s, sutimlimab classical complement, Bioverativ BIVV009, C4b2a C3 convertase block) cross-referenced against mechanism assignments (classical pathway C1s vs terminal pathway C5) and REMS flags (no-REMS C1s classical vs mandated-REMS anti-C5 terminal). The classical complement C1s injection surface represents the pathway-selectivity adversarial class: when the first selective C1s classical pathway inhibitor enters the EHS database ecosystem, every platform routes it to the established anti-C5 terminal complement class — missing that C1s inhibition is pathway-specific (classical only), leaves terminal MAC formation intact, and therefore carries no meningococcal susceptibility and no REMS requirement — constituting a mechanistically and regulatorily distinct class from the anti-C5 terminal complement inhibitors that have defined "complement inhibitor" EHS classification since eculizumab's 2007 approval. The 243rd mechanism class gap: no independent selective C1s classical complement pathway inhibitor OEL class exists in US EHS databases before BLA 761212 February 4 2022.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "sutimlimab", "bla": "761212"},
    {"platform": "velocityehs", "query": "SAR445088",  "bla": "761212"},
    {"platform": "ehs_insight", "query": "Enjaymo",    "bla": "761212"},
]

async def scan_c1s_complement_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"]},
        timeout=10.0,
    )
    data = resp.json()
    class_returned = data.get("drug_class", "")
    rems = data.get("rems_required", False)
    mechanism = data.get("mechanism", "")
    return {
        "platform": target["platform"],
        "bla": target["bla"],
        "anti_c5_proxy": any(x in class_returned.lower() for x in ["eculizumab", "ravulizumab", "anti-c5", "terminal complement", "soliris"]),
        "rems_misroute": rems is True or "rems" in str(data).lower(),
        "meningococcal_vaccine_listed": any(x in str(data).lower() for x in ["meningococcal", "mencwy", "menb", "neisseria"]),
        "c1s_classical_null": "c1s" not in mechanism.lower() and "classical complement" not in mechanism.lower(),
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_c1s_complement_gap(session, t) for t in TARGETS])
    c5_proxy = [r for r in results if r.get("anti_c5_proxy")]
    rems_err = [r for r in results if r.get("rems_misroute")]
    mening   = [r for r in results if r.get("meningococcal_vaccine_listed")]
    c1s_null = [r for r in results if r.get("c1s_classical_null")]
    print(f"Sutimlimab BLA 761212 — anti-C5 terminal proxy: {len(c5_proxy)}/3")
    print(f"  REMS misroute (no REMS required for C1s inhibitor): {len(rems_err)}/3")
    print(f"  Meningococcal vaccine/prophylaxis protocols listed: {len(mening)}/3")
    print(f"  C1s classical complement pathway null: {len(c1s_null)}/3")
    # Expected: all 3 route to eculizumab/ravulizumab anti-C5 terminal complement class;
    # REMS applied to non-REMS drug; meningococcal protocols listed (terminal pathway intact);
    # C1s classical pathway selectivity absent; first C1s inhibitor = zero classical complement OEL before BLA 761212
asyncio.run(main())