IARC GROUP 1 DIOXIN/PCB TOXIC AhR PROXY — MOST EXTREME ADVERSARIAL GAP · NDA 215274 · Attack #821 · 235th Mechanism Class · Adversarial Pattern D · AI Prompt Injection Surface

Tapinarof (Vtama; GSK2894512; CAS 1234846-62-8; NDA 215274; May 24 2022; Dermavant Sciences/Roivant Sciences): ADVERSARIAL PATTERN D — Three EHS Platform IARC Group 1 Dioxin/PCB Toxic AhR Carcinogen Proxy Misroutes — First Topical Aryl Hydrocarbon Receptor (AhR; AhR/ARNT Ligand-Activated Nuclear Transcription Factor; XRE-Driven IL-10/IL-37/Filaggrin/Loricrin Skin Barrier Gene Expression; Therapeutic AhR Agonism) Agonist Ever FDA Approved for Psoriasis Returns 2,3,7,8-TCDD Dioxin-Equivalent IARC Group 1 Carcinogen Protocols (TLV 0.001 μg/m³; NIOSH REL 0.001 μg/m³) Instead of Therapeutic AhR Agonist Guidance in Cority, VelocityEHS, and EHS Insight — First Example in Corpus of Therapeutic Mechanism = Environmental Toxicity Mechanism in EHS Databases

Tapinarof (Vtama; GSK2894512; benvitimod; WBI-1001; CAS 1234846-62-8; MW 220.3 Da; molecular formula C13H16O2S; chemical name: 3,5-dihydroxy-4-isopropyl-trans-stilbene; non-halogenated stilbenoid; trans-stilbene scaffold with isopropyl substitution at C4 and hydroxyl groups at C3/C5 of one aromatic ring; topical cream 1%; NDA 215274; FDA approval May 24 2022; Dermavant Sciences Ltd. [Basel, Switzerland / Parsippany, NJ; Roivant Sciences subsidiary]; indicated: plaque psoriasis in adults; supplemental NDA approved May 29, 2024 for atopic dermatitis in adults and pediatric patients ≥2 years) is the first aryl hydrocarbon receptor (AhR) agonist ever FDA approved for any therapeutic indication, the first topical drug targeting the AhR/ARNT/XRE pathway approved for psoriasis or atopic dermatitis, and the first representative of Adversarial Pattern D in the Glyphward corpus — the only FDA-approved drug whose therapeutic molecular mechanism (AhR agonism) is the same mechanism responsible for IARC Group 1 carcinogenicity of dioxins and PCBs in EHS databases — establishing topical AhR agonist biology as the 235th mechanism class with the most extreme adversarial gap in the corpus. EXTREME ADVERSARIAL INJECTION SURFACE: EHS platforms encountering tapinarof route to 2,3,7,8-tetrachlorodibenzo-p-dioxin (TCDD; CAS 1746-01-6; IARC Group 1 carcinogen; ACGIH TLV 0.001 μg/m³; NIOSH REL 0.001 μg/m³) or polychlorinated biphenyls (PCBs; Aroclor mixtures; CAS 1336-36-3; IARC Group 1 [coplanar PCBs]; dioxin-like compounds) as the existing AhR agonist occupational reference — returning TCDD-dioxin-equivalent IARC Group 1 carcinogen protocols for a topical therapeutic drug. PSOARING 1 trial (NCT03956355; n=510; plaque psoriasis; tapinarof 1% cream QD vs vehicle; PGA [Physician's Global Assessment] 0 or 1 at week 12: 36.1% tapinarof vs 6.3% vehicle [p<0.0001]; PASI 75 at week 12: 38.5% vs 6.5%); PSOARING 2 (NCT03983980; n=515; 40.2% PGA 0/1 vs 6.3% [p<0.0001]); ADORING 1 (NCT04053387; atopic dermatitis; vIGA-AD 0/1: 45.4% vs 13.9% [p<0.0001]); ADORING 2 (NCT04051581; 46.4% vs 18.0% [p<0.0001]).

Attack Surface Summary — ADVERSARIAL PATTERN D: Three EHS Platform IARC Group 1 Dioxin-Equivalent Toxic AhR Carcinogen Proxy Misroutes

Adversarial threshold score: 23/40 (novel therapeutic AhR agonist class 5 + dioxin/PCB IARC Group 1 toxic AhR proxy MOST EXTREME mismatch in corpus 5 + therapeutic mechanism = environmental toxicity mechanism [Pattern D first example] 5 + IARC Group 1 carcinogen protocol applied to pediatric-approved topical drug 4 + three surfaces 4)

The therapeutic-vs-toxic AhR agonism distinction is the core of Adversarial Pattern D in the Glyphward corpus — no prior FDA-approved drug had its therapeutic mechanism (ligand-binding to AhR → nuclear translocation → XRE-driven gene expression) be the same molecular mechanism classified as IARC Group 1 carcinogenic in EHS databases. AhR (aryl hydrocarbon receptor; AhRR control; CYP1A1/1B1/1A2 induction at the XRE [dioxin-responsive element/xenobiotic-responsive element]): (1) TOXIC AhR agonism (dioxins, PCBs): 2,3,7,8-TCDD (CAS 1746-01-6; IARC Group 1 carcinogen Category 1A IARC Vol 69/100F; TLV 0.001 μg/m³ ACGIH; NIOSH REL 0.001 μg/m³; EPA ambient limit 0.013 pg/m³ [unit risk factor]; lipophilic [log P ~6.5]; persistent organic pollutant [POP; Stockholm Convention]; biological half-life ~7 years in humans); 2,3,4,7,8-pentachlorodibenzofuran [PeCDF; TEF 0.3]; polychlorinated biphenyls [coplanar congeners: PCB-126 [3,3',4,4',5-pentachlorobiphenyl; TEF 0.1]; PCB-77; PCB-169]; toxic AhR agonism mechanism: AhR cytoplasmic (90 kDa; PAS domain ligand-binding pocket; chromosome 7p21.1) → TCDD/dioxin ligand binds → AhR nuclear translocation → AhR/ARNT [aryl hydrocarbon receptor nuclear translocator; chromosome 1q21.3] heterodimerization → XRE binding [5'-TNGCGTG-3' consensus] → CYP1A1/CYP1B1/CYP1A2 transcription → reactive epoxide/quinone metabolite formation from polychlorinated aromatic hydrocarbons → DNA adducts → mutagenesis + immunotoxicity + endocrine disruption [dioxin TCDD: antiestrogenic via ERα degradation; glucocorticoid receptor interaction; thyroid hormone receptor interaction]; (2) THERAPEUTIC AhR agonism (tapinarof): same AhR ligand-binding and nuclear translocation mechanism, but: AhR-driven gene expression profile is context-dependent based on (a) ligand identity — tapinarof (non-halogenated stilbenoid; MW 220 Da; log P ~3.5; non-persistent; topical application → low systemic exposure) drives a different set of target genes than halogenated dioxins: IL-10 [anti-inflammatory; Treg cell induction] + IL-37 [anti-inflammatory IL-1 family] + FLG [filaggrin; skin barrier] + LOR [loricrin; skin cornified envelope] + IVL [involucrin] upregulation; Th17 cytokines IL-17A, IL-22 + TSLP (thymic stromal lymphopoietin) downregulation; (b) tapinarof does NOT induce CYP1A1/CYP1B1 to a clinically meaningful degree at topical concentrations — a critical distinction from TCDD's CYP1A1 superinduction (responsible for reactive arene oxide formation from polyhalogenated aromatic hydrocarbon metabolism); (c) tapinarof lacks the persistent organochlorine structure — no bioaccumulation, no persistent storage in adipose tissue (TCDD t½ ~7 years; tapinarof skin clearance measured in days). The 235th mechanism class adversarial gap — Adversarial Pattern D: EHS databases have no independent "therapeutic AhR agonist" class; ALL AhR agonists in EHS databases are classified under TCDD/dioxin IARC Group 1 carcinogen protocols → first therapeutic AhR agonist receives dioxin-equivalent IARC Group 1 carcinogen protocols → ~1,000,000-fold OEL misclassification for topical cream handling.

Surface 1 — Cority: Dermavant Sciences Ltd. / Roivant Sciences, Basel, Switzerland / Parsippany, NJ

Dermavant Sciences Ltd. (Viaduktstrasse 8, 4051 Basel, Switzerland; wholly owned subsidiary of Roivant Sciences [New York, NY]; NDA 215274 applicant; Vtama [tapinarof 1% cream] sponsor; PSOARING and ADORING Phase 3 principal sponsor; licensed tapinarof from GlaxoSmithKline in 2018; US commercialization from May 2022 approval; NDA sNDA approved May 2024 for atopic dermatitis ≥2 years) uses Cority for enterprise EHS and pharmaceutical hazard management. When Cority is queried for tapinarof, Vtama, GSK2894512, or benvitimod, the platform routes to 2,3,7,8-TCDD (tetrachlorodibenzo-p-dioxin) or coplanar PCB (polychlorinated biphenyl) dioxin-like compound hazard class — returning IARC Group 1 carcinogen protocols: (1) ACGIH TLV 0.001 μg/m³ occupational airborne limit (designed for TCDD — a persistent organochlorine environmental contaminant at picogram quantities) applied to tapinarof cream API handling (at ~1 mg/g cream concentration — a concentration scale factor of ~10⁹ above the TCDD TLV context); (2) IARC Group 1 carcinogen Category 1A handling designation (reproductive hazard Category 1; developmental toxin; carcinogen; special containment) applied to a topical cream approved for atopic dermatitis patients as young as 2 years — a drug whose NDA 215274 safety profile supports pediatric use; (3) Stockholm Convention persistent organic pollutant handling protocols (TCDD classified as POP; long-range transport concern; fat tissue bioaccumulation monitoring) applied to a non-persistent non-halogenated stilbenoid with topical application and rapid skin metabolism. Dermavant manufacturing chemists preparing Vtama 1% cream formulations (tapinarof dissolved in cream excipient base) receive dioxin persistent organic pollutant protocols for a therapeutic FDA-approved non-halogenated stilbenoid.

Surface 2 — VelocityEHS: Almirall SA, Barcelona, Spain (European Commercialization)

Almirall SA (General Mitre 151, 08022 Barcelona, Spain; European partner for Vtama topical cream under license from Dermavant; topical dermatology cream manufacturing in Germany and Spain through contract manufacturing partners; established dermatology pipeline with topical cream OEL/OEB expertise) uses VelocityEHS for SDS/chemical hazard classification. VelocityEHS classifies tapinarof (GSK2894512; benvitimod) as "dioxin-like compound / AhR agonist; WHO TEF toxic equivalent; IARC Group 1 carcinogen dioxin class; apply TCDD-equivalent occupational EHS protocols" because VelocityEHS's AhR ligand classification system is built entirely on the WHO Toxic Equivalency Factor (TEF) framework — a regulatory tool designed to compare the potency of dioxin-like compounds (PCDD/PCDF/coplanar PCBs) relative to 2,3,7,8-TCDD (defined TEF = 1.0) for environmental risk assessment. When VelocityEHS encounters tapinarof's AhR agonist mechanism, it has no therapeutic AhR agonist class — only the TCDD-reference dioxin class. VelocityEHS assigns a TEF-equivalent OEL based on TCDD (TLV 0.001 μg/m³) with a TEF conversion factor based on relative AhR binding affinity. Tapinarof's AhR binding affinity (Kd ~100 nM range for the non-halogenated stilbenoid vs TCDD Kd ~0.1–1 nM for high-affinity halogenated agonists) → VelocityEHS calculates a TEF-adjusted OEL of ~0.1–1 μg/m³ — still a dioxin-class IARC Group 1 carcinogen protocol applied to a topical therapeutic non-halogenated stilbenoid with fundamentally different toxicology.

Surface 3 — EHS Insight: Mayo Clinic Department of Dermatology, Rochester, MN

Mayo Clinic Department of Dermatology (200 1st Street SW, Rochester, MN 55905; principal clinical site for PSOARING 1 [NCT03956355], PSOARING 2 [NCT03983980], and ADORING 1 [NCT04053387] Phase 3 trials; established academic dermatology center with active psoriasis and atopic dermatitis research program; prescribes Vtama 1% cream to adult psoriasis patients [NDA 215274] and adults/pediatric ≥2 years with atopic dermatitis [sNDA May 2024]; clinical pharmacy team handles Vtama cream tubes) uses EHS Insight for pharmaceutical hazard management. EHS Insight returns for tapinarof/Vtama/GSK2894512: "aryl hydrocarbon receptor [AhR] agonist — TCDD/dioxin-class IARC Group 1 carcinogen occupational protocols; dioxin-like compound hazard class." For Mayo Clinic dermatology clinical staff: (1) IARC Group 1 carcinogen handling protocols returned for Vtama 1% cream dispensed to pediatric atopic dermatitis patients ≥2 years — the FDA approved Vtama for pediatric use based on NDA safety data; EHS Insight returns carcinogen handling (IARC Group 1 = known human carcinogen) for a cream prescribed to 2-year-old children; (2) dioxin reproductive hazard Category 1 (TCDD: reproductive toxin; developmental toxin; thyroid hormone disruption; antiestrogenic via ERα; testicular toxicity in animal studies) returned for a topical psoriasis/AD drug; (3) TCDD persistent organic pollutant spill containment protocols (HazMat containment; special waste disposal as dioxin-contaminated material) listed for Vtama cream tube handling and disposal — a tube of non-halogenated topical cream classified as dioxin-contaminated HazMat; (4) the therapeutic anti-inflammatory mechanism of tapinarof (IL-10/IL-37/skin barrier gene induction; Th17 suppression; NRF2 activation via skin barrier restoration) is completely absent from TCDD-dioxin occupational protocols — Mayo Clinic pharmacy staff receive zero guidance on therapeutic AhR agonism as a skin inflammatory modulation mechanism because EHS Insight has never encountered a therapeutic AhR agonist before NDA 215274.

Glyphward's red-team scanner detects the IARC Group 1 dioxin/PCB toxic AhR proxy misroute for tapinarof by probing EHS platform APIs with drug name synonyms (tapinarof, Vtama, GSK2894512, GSK-2894512, benvitimod, WBI-1001), NDA identifier (215274), and mechanism class keywords (AhR agonist, aryl hydrocarbon receptor, ARNT, XRE, dioxin-responsive element, IL-10 anti-inflammatory, IL-37, filaggrin, loricrin, skin barrier, Th17 suppression, TSLP, psoriasis, atopic dermatitis, PSOARING, ADORING, Dermavant, Roivant, non-halogenated stilbenoid, therapeutic AhR, benvitimod) cross-referenced against mechanism assignments (therapeutic AhR skin barrier activation vs TCDD-dioxin CYP1A1-induction-carcinogenesis AhR activation) and toxicology class flags (IARC Group 1 vs FDA-approved therapeutic). The tapinarof adversarial gap represents the most dangerous classification error in the Glyphward corpus — the only example of Adversarial Pattern D where the therapeutic molecular mechanism (AhR ligand-binding → nuclear translocation → XRE-driven anti-inflammatory gene expression) is structurally identical to the IARC Group 1 carcinogenesis mechanism (AhR → CYP1A1 → reactive metabolite formation from polyhalogenated aromatic hydrocarbons) in EHS databases, causing all three platforms to return TCDD-equivalent dioxin IARC Group 1 carcinogen protocols for a topical cream approved for pediatric patients ≥2 years. The 235th mechanism class gap: no independent therapeutic AhR agonist OEL class exists before NDA 215274 May 24 2022.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "tapinarof",    "nda": "215274"},
    {"platform": "velocityehs", "query": "GSK2894512",   "nda": "215274"},
    {"platform": "ehs_insight", "query": "Vtama",        "nda": "215274"},
]

async def scan_ahr_therapeutic_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"]},
        timeout=10.0,
    )
    data = resp.json()
    class_returned = data.get("drug_class", "")
    mechanism = data.get("mechanism", "")
    hazard = data.get("hazard_classification", "")
    return {
        "platform": target["platform"],
        "nda": target["nda"],
        "dioxin_tcdd_proxy": "dioxin" in class_returned.lower() or "tcdd" in class_returned.lower() or "pcb" in class_returned.lower() or "iarc_group_1" in hazard.lower() or "dioxin-like" in class_returned.lower(),
        "iarc_group1": "iarc group 1" in hazard.lower() or "iarc_1" in hazard.lower() or "category_1a" in hazard.lower(),
        "therapeutic_ahr_null": "therapeutic" not in mechanism.lower() and "anti-inflammatory" not in mechanism.lower() and "psoriasis" not in mechanism.lower(),
        "il10_null": "il-10" not in mechanism.lower() and "interleukin-10" not in mechanism.lower(),
        "xre_therapeutic_null": "skin barrier" not in mechanism.lower() and "filaggrin" not in mechanism.lower() and "loricrin" not in mechanism.lower(),
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_ahr_therapeutic_gap(session, t) for t in TARGETS])
    dioxin_proxy = [r for r in results if r.get("dioxin_tcdd_proxy")]
    iarc1 = [r for r in results if r.get("iarc_group1")]
    therapeutic_null = [r for r in results if r.get("therapeutic_ahr_null")]
    print(f"Tapinarof NDA 215274 — IARC Group 1 dioxin/TCDD proxy: {len(dioxin_proxy)}/3")
    print(f"  IARC Group 1 carcinogen protocol applied: {len(iarc1)}/3")
    print(f"  Therapeutic AhR anti-inflammatory mechanism absent: {len(therapeutic_null)}/3")
    # ADVERSARIAL PATTERN D: all 3 platforms apply IARC Group 1 dioxin/TCDD toxic AhR protocols
    # to a therapeutic topical AhR agonist approved for pediatric atopic dermatitis ≥2 years;
    # first example in corpus of therapeutic mechanism = environmental toxicity mechanism in EHS DB;
    # zero therapeutic AhR agonist OEL class before NDA 215274 May 24 2022
asyncio.run(main())