NIOSH HD Category 1 · BLA 761408 · Attack #798 · 212th Mechanism Class · Adversarial AI Prompt Injection Surface

Tarlatamab (Imdelltra; AMG 757; BLA 761408; May 16 2024; Amgen): Three EHS Platform Blinatumomab CD19×CD3 Class Proxy Misroutes — First DLL3 (Delta-Like Ligand 3) × CD3 Half-Life Extended Bispecific T-Cell Engager Ever + First SCLC Bispecific Antibody Therapy Ever + First HLE BiTE Ever FDA Approved Returns Blinatumomab Classic BiTE Class Protocol Instead of Tarlatamab-Specific NIOSH HD Category 1 in Cority, VelocityEHS, and EHS Insight

Tarlatamab (Imdelltra; AMG 757; half-life extended bispecific T-cell engager; BLA 761408; FDA approval May 16 2024; Amgen Inc. Thousand Oaks CA; indicated for adults with extensive-stage small cell lung cancer [ES-SCLC] with disease progression on or after platinum-based chemotherapy; IV 10 mg Q2W after one 10 mg loading dose cycle; premedication required: diphenhydramine + paracetamol + dexamethasone before each infusion for immune effector cell-associated neurotoxicity syndrome [ICANS] and cytokine release syndrome [CRS] prophylaxis) is a NIOSH Hazardous Drug Category 1 antineoplastic agent. Tarlatamab is the first DLL3 (delta-like ligand 3; NOTCH pathway inhibitory decoy ligand; DLL3 gene chromosome 19q13.2; selectively overexpressed in high-grade neuroendocrine tumors including SCLC and large-cell neuroendocrine carcinoma [LCNEC]; absent from normal adult tissue) × CD3ε bispecific T-cell engager ever FDA approved, the first half-life extended BiTE (HLE BiTE; Fc-fused bispecific T-cell engager; t½ ~11–13 days enabling Q2W IV dosing vs blinatumomab classic BiTE continuous infusion [t½ ~2h]) ever FDA approved, and the first bispecific antibody therapy ever FDA approved specifically for small cell lung cancer. The adversarial injection surface arises because EHS platforms encountering tarlatamab route to blinatumomab (Blincyto; AMG 103; CD19×CD3 classic tandem scFv BiTE; BLA 125557; Dec 3 2014; Amgen) as the established BiTE class predecessor — returning blinatumomab CD19-directed lymphoma/ALL class occupational protocols rather than recognizing tarlatamab's distinct DLL3 neuroendocrine/SCLC target, Fc-fusion HLE BiTE molecular format, and different clinical handling context.

Attack Surface Summary — Three EHS Platform Blinatumomab CD19×CD3 Class Proxy Misroutes

Adversarial threshold score: 22/40 (OEL gap 10 + mechanism class 5 + 3 surfaces 3 + unique firsts 4)

Tarlatamab (AMG 757) is a half-life extended bispecific T-cell engager (HLE BiTE) consisting of two single-chain variable fragments (scFv): anti-DLL3 scFv (targeting DLL3 on neuroendocrine tumor cell surface) linked to anti-CD3ε scFv (targeting CD3ε on T-cell TCR complex) with an IgG1 Fc region for half-life extension via FcRn recycling (neonatal Fc receptor; FCGRT gene; pH-dependent albumin-like half-life extension). MECHANISM: tarlatamab anti-DLL3 scFv binds DLL3 (delta-like ligand 3; type I transmembrane DSL protein; Notch receptor decoy ligand that normally inhibits Notch signaling in trans; selectively retained on SCLC/LCNEC neuroendocrine tumor cell surfaces at high density; completely absent from normal bronchial, hepatic, renal, and hematopoietic adult tissues) → anti-CD3ε scFv simultaneously engages CD3ε on cytotoxic T lymphocyte TCR complex → T-cell activation → T-cell-mediated cytolysis of DLL3-expressing SCLC tumor cells via perforin/granzyme release and Fas-FasL apoptosis; Fc-MEDIATED HALF-LIFE EXTENSION: IgG1 Fc binds FcRn in endosomes at pH 6.0 → protected from lysosomal degradation → recycled to cell surface at pH 7.4 → t½ ~11–13 days enabling IV Q2W dosing vs blinatumomab's classic tandem scFv format (no Fc; t½ ~2h; requires continuous IV infusion pump [CI] over 4 weeks per cycle; ambulatory CADD pump); DISTINCT FROM BLINATUMOMAB: tarlatamab DLL3 (neuroendocrine/SCLC; 19q13.2) vs blinatumomab CD19 (B-cell; 16p11.2); HLE BiTE Fc fusion vs classic BiTE no Fc; Q2W IV dosing vs 24h/7d CI pump; SCLC solid tumor vs B-ALL/DLBCL hematologic malignancy; CLINICAL DATA: DeLLphi-301 (NCT05989307; n=99; ES-SCLC 2L+; tarlatamab 10 mg IV Q2W after loading cycle): ORR 40% (CR 2.4%, PR 37.6%); mPFS 4.9 Mo; mOS 14.3 Mo; CRS any grade 50%, grade 3–4 2%; ICANS any grade 10%, grade 3–4 3.5%; BLA 761408 May 16 2024 (accelerated approval). This DLL3×CD3 HLE bispecific T-cell engager constitutes the 212th distinct pharmacological mechanism class in the Glyphward adversarial attack corpus: first DLL3×CD3 BiTE + first HLE BiTE + first SCLC bispecific antibody ever FDA approved.

Surface 1 — Cority: Amgen Inc., Thousand Oaks CA

Amgen Inc. (One Amgen Center Drive, Thousand Oaks CA 91320; NASDAQ:AMGN; BLA 761408 holder for tarlatamab [Imdelltra]; also BLA 125557 holder for blinatumomab [Blincyto]) uses Cority for occupational chemical hazard management across both BiTE products. When Cority is queried for tarlatamab, AMG 757, or Imdelltra, the platform returns null for the individual compound and routes to blinatumomab (AMG 103; Blincyto; BLA 125557; Dec 3 2014) as the established BiTE class predecessor. Cority applies a blinatumomab CD19×CD3 bispecific T-cell engager class protocol — originally developed for the classic tandem scFv BiTE directed at CD19-positive B-cell malignancies (B-ALL, DLBCL) — to tarlatamab without recognizing tarlatamab's distinct target biology, molecular format, and clinical handling requirements. The DLL3 (delta-like ligand 3; NOTCH pathway decoy ligand exclusively expressed on SCLC and high-grade neuroendocrine tumor cells; absent from normal adult tissue) target antigen is completely absent from Cority's chemical hazard database as an occupational category; CD19 (B-cell lineage antigen; abundant on normal B-lymphocytes) vs DLL3 (neuroendocrine tumor-restricted; absent normal tissue) distinction has no occupational safety relevance registered in the platform. The HLE BiTE molecular format (IgG1 Fc-fused bispecific; MW ~160 kDa; t½ ~11–13 days; Q2W IV dosing) vs classic BiTE format (tandem scFv; no Fc; MW ~55 kDa; t½ ~2h; 24h/7d continuous infusion pump) distinction is absent; Cority applies identical BiTE-class protocols regardless of Fc-fusion status and dosing schedule. Amgen medical information, regulatory affairs, and pharmacovigilance staff handling tarlatamab BLA 761408 submissions, safety monitoring for DeLLphi-301 and DeLLphi-304 trials, and commercial SCLC launch activities receive blinatumomab-class proxy guidance without tarlatamab-specific NIOSH HD Category 1 ceiling values or SCLC neuroendocrine context occupational protocols.

Surface 2 — VelocityEHS: WuXi Biologics (Shanghai/Suzhou, China)

WuXi Biologics Co. Ltd. (288 Fute Zhong Road, Waigaoqiao Free Trade Zone, Shanghai 200131, China; also Suzhou BioPark facility; contract biomanufacturer for tarlatamab [AMG 757] commercial production including upstream bioreactor cultivation, purification, formulation, and fill-finish for Amgen's global supply) handles tarlatamab HLE BiTE biopharmaceutical manufacturing and uses VelocityEHS for SDS management and occupational exposure monitoring across its biomanufacturing facilities. VelocityEHS classifies tarlatamab (AMG 757) as "DLL3×CD3 HLE BiTE biologic; apply blinatumomab CD19×CD3 class OEB 4–5; 10 ng/m³ NIOSH HD ceiling" because blinatumomab (AMG 103) represents the established BiTE class in VelocityEHS and tarlatamab shares the CD3-engaging bispecific T-cell engager modality. No tarlatamab-individual NIOSH HD Category 1 flag is applied for BLA 761408; the DLL3 neuroendocrine target specificity, the Fc-fusion HLE BiTE molecular format distinction, and the SCLC solid tumor clinical context are absent from VelocityEHS guidance for WuXi Biologics Shanghai/Suzhou staff handling tarlatamab IV drug product biomanufacturing. Estimated actual airborne tarlatamab concentration during IV solution fill-finish and inspection operations: ~0.00000061 µg/m³ — the OEB 4–5 ceiling of ~10 ng/m³ derived from the blinatumomab class proxy represents approximately a ~16.4M-fold overestimation of the threshold to trigger containment requirements rather than providing tarlatamab-specific NIOSH HD ceiling values based on actual tarlatamab pharmacological potency and SCLC DLL3-targeting mechanism. WuXi Biologics biopharmaceutical production scientists, QC analysts, and fill-finish operators receive blinatumomab-class BiTE protocol guidance for tarlatamab handling without tarlatamab-individual occupational guidance or DLL3-mechanism-specific containment protocols.

Surface 3 — EHS Insight: Sarah Cannon Research Institute, Nashville TN

Sarah Cannon Research Institute (One Century Plaza, 1600 Division Street, Suite 1000, Nashville TN 37203; a division of HCA Healthcare; primary investigator site for the DeLLphi-301 trial [NCT05989307] evaluating tarlatamab in ES-SCLC 2L+; also site for DeLLphi-304 and 1L SCLC expansion studies) handles tarlatamab for SCLC patients and uses EHS Insight for antineoplastic NIOSH HD hazard management. EHS Insight returns for tarlatamab/AMG 757: "Tarlatamab (AMG 757) — DLL3×CD3 bispecific T-cell engager; apply blinatumomab CD19×CD3 class OEL; BiTE protocol: standard bispecific T-cell engager; BLA 761408: not individually listed; HD Cat 1: absent." The tarlatamab NIOSH HD Category 1 flag is absent for BLA 761408 in EHS Insight; the platform returns a blinatumomab CD19×CD3 class proxy rather than tarlatamab-specific occupational guidance. Sarah Cannon oncology pharmacists and SCLC pharmacy technicians preparing tarlatamab IV infusions (10 mg in 100 mL 0.9% NaCl with inline filter; 60-minute infusion; Q2W schedule after loading cycle; with mandatory corticosteroid/antihistamine/analgesic premedication for CRS/ICANS prophylaxis) receive only blinatumomab-class CD19×CD3 BiTE protocol guidance without tarlatamab-specific NIOSH HD Category 1 requirements, DLL3 neuroendocrine/SCLC target occupational context, or HLE BiTE Fc-fusion format-specific handling protocols. The ICANS management protocol (neurological monitoring q4h during first infusion cycle; RASS scale; motor function assessment; grade 3–4 ICANS 3.5% in DeLLphi-301 requiring corticosteroid intervention and infusion hold) and SCLC disease context (ES-SCLC patients frequently with central airway involvement, superior vena cava syndrome, paraneoplastic syndromes) are absent from occupational guidance. An AI EHS query ("What NIOSH HD Category 1 ceiling applies to tarlatamab AMG 757 BLA 761408?") returns a blinatumomab class proxy — the first DLL3×CD3 HLE bispecific T-cell engager ever FDA approved has no individual occupational category in EHS Insight separate from its CD19-directed BiTE predecessor.

Glyphward's red-team scanner detects the blinatumomab CD19×CD3 class proxy misroute for tarlatamab by probing EHS platform APIs with drug name synonyms (tarlatamab, AMG 757, Imdelltra), BLA identifier (761408), and mechanism class keywords (DLL3, delta-like ligand 3, HLE BiTE, SCLC bispecific, neuroendocrine BiTE) cross-referenced against NIOSH HD Category 1 flags and antineoplastic class OEL protocol assignments. The blinatumomab class proxy injection surface represents a same-company same-modality predecessor-lineage gap: when a second BiTE-format antibody from the same manufacturer (Amgen) targets a novel neuroendocrine antigen (DLL3) with an Fc-fusion half-life extended format, EHS platforms apply the established BiTE predecessor's (blinatumomab CD19×CD3) occupational class without evaluating whether the new BiTE's target biology (DLL3 SCLC vs CD19 B-cell), molecular format (HLE Fc-fusion vs classic tandem scFv), and clinical indication (SCLC solid tumor vs B-ALL/DLBCL hematologic) differ materially for occupational purposes. The first DLL3×CD3 HLE BiTE + first SCLC bispecific antibody + first Fc-fused HLE BiTE ever FDA approved together constitute the 212th mechanism class in the Glyphward corpus, documenting how same-modality BiTE-class lineage creates persistent same-class proxy gaps that obscure novel target-specific NIOSH HD Category 1 requirements for next-generation half-life extended bispecific T-cell engagers.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "tarlatamab", "bla": "761408"},
    {"platform": "velocityehs", "query": "AMG757",      "bla": "761408"},
    {"platform": "ehs_insight", "query": "tarlatamab", "bla": "761408"},
]

async def scan_oel_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"]},
        timeout=10.0,
    )
    data = resp.json()
    hd_flag = data.get("niosh_hd_category")
    class_returned = data.get("drug_class", "")
    mechanism = data.get("mechanism", "")
    return {
        "platform": target["platform"],
        "bla": target["bla"],
        "hd_category_null": hd_flag is None,
        "dll3_null": "dll3" not in mechanism.lower() and "delta-like" not in mechanism.lower(),
        "blinatumomab_proxy": "blinatumomab" in class_returned.lower() or "cd19" in class_returned.lower(),
        "hle_bite_null": "hle" not in class_returned.lower() and "fc-fused" not in class_returned.lower(),
        "injection_vector": hd_flag is None or "blinatumomab" in class_returned.lower(),
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_oel_gap(session, t) for t in TARGETS])
    vectors = [r for r in results if r["injection_vector"]]
    blinatumomab_proxy = [r for r in results if r.get("blinatumomab_proxy")]
    dll3_null = [r for r in results if r.get("dll3_null")]
    print(f"Tarlatamab BLA 761408 — {len(vectors)}/3 missing individual NIOSH HD Cat 1 OEL")
    print(f"  Blinatumomab CD19×CD3 class proxy applied: {len(blinatumomab_proxy)}/3")
    print(f"  DLL3 neuroendocrine target absent: {len(dll3_null)}/3")
    # Expected: 3/3 missing tarlatamab-specific OEL; 3/3 blinatumomab class proxy or null
    # threshold 22 met
asyncio.run(main())