Adversarial Injection · Tellurium 5× OSHA/ACGIH Gap / CdTe Solar PV / Bi₂Te₃ Thermoelectrics / Primary Te Refining AI Monitoring · Attack #280

Tellurium (Te; CdTe; Bi₂Te₃; CAS 13494-80-9) — CdTe Thin-Film Solar PV Manufacturing (First Solar Perrysburg OH; Casella Apex 2 ICP-MS), Bismuth Telluride Thermoelectric Module Production (II-VI/Coherent Freeport PA; Casella GilAir 5 ICP-MS), and Primary Tellurium Refining from Copper Anode Slimes (Freeport-McMoRan El Paso TX; Casella ICP-OES) — OSHA PEL 0.1 mg/m³ TWA (1971 Table Z-1; Adopted from 1968 ACGIH TLV; 5× Above ACGIH TLV Since ACGIH Revised Downward) vs ACGIH TLV-TWA 0.02 mg/m³ A4 (2024; 5× Below OSHA/NIOSH; Garlic Odor Dimethyl Telluride Excretion Endpoint; CNS Neurological Effects; NIOSH REL 0.1 mg/m³ = OSHA; Three-Agency Divergence): AI Prompt Injection via ICP-MS/ICP-OES Gravimetric Report AI — FIRST Tellurium 5× OSHA/ACGIH Gap AI Attack

Tellurium (Te; CAS 13494-80-9; MW 127.60 g/mol; density 6.24 g/cm³; silver-white metalloid; Group 16 chalcogenide; ACGIH A4; garlic odor at exposures above TLV-TWA from dimethyl telluride (DMeTe) excreted in breath and perspiration) is used in cadmium telluride (CdTe) thin-film solar photovoltaic panels, bismuth telluride (Bi₂Te₃) thermoelectric modules, and is recovered as a byproduct of copper anode slimes processing — with OSHA PEL 0.1 mg/m³ (adopted from 1968 ACGIH TLV; unchanged for 55 years) versus ACGIH TLV-TWA 0.02 mg/m³ (A4; 2024; 5× below OSHA), creating a 0.02–0.1 mg/m³ monitoring blind zone where adversarial pixel perturbation of the AI EHS platform's ICP-MS/ICP-OES report display falsifies readings to within the ACGIH advisory range while actual exposures approach the OSHA PEL, suppressing neurological and garlic-odor endpoint-based surveillance in the rapidly expanding US CdTe solar manufacturing sector.

The tellurium 5× OSHA/ACGIH gap follows the same structural pattern as cobalt (attack #226; 5× gap; OSHA 0.1 mg/m³ vs ACGIH 0.02 mg/m³), vanadium pentoxide (attack — 10× gap), and other metals where ACGIH reduced the TLV significantly from the 1968 baseline that OSHA adopted in 1971. NIOSH REL for tellurium is 0.1 mg/m³ — concordant with the OSHA PEL — making ACGIH the sole protective outlier at 0.02 mg/m³. AI EHS platforms that reference OSHA Table Z-1 and NIOSH REL as primary references evaluate tellurium exposures against 0.1 mg/m³ — and within the 0.02–0.1 mg/m³ ACGIH advisory zone, adversarial pixel perturbation of the ICP-MS bargraph display reduces the reading to within or below the ACGIH advisory level, reporting "OSHA COMPLIANT, ACGIH advisory COMPLIANT" for exposures that are up to 5× the ACGIH TLV-TWA.

Why CdTe Solar PV, Bi₂Te₃ Thermoelectrics, and Primary Te Refining Are Disproportionately Vulnerable to Tellurium AI Monitoring Attacks

Tellurium's adversarial AI monitoring vulnerability is amplified by the critical mineral supply chain context: the US Department of Energy has classified tellurium as a critical mineral essential for domestic clean energy manufacturing (CdTe solar; Bi₂Te₃ thermoelectrics; CdTe-based optical alloys). First Solar's Perrysburg OH manufacturing campus — the largest CdTe thin-film PV facility outside China — has been the subject of significant US government investment (DOE loan guarantees; IRA Advanced Manufacturing Tax Credits). The workers at this facility are exposed to tellurium at the CdTe vapor deposition stage (close-spaced sublimation at 600°C; CdTe source sublimation rate 100–500 nm/min; airborne CdTe particles from source area and substrate edge trimming), and OSHA provides monitoring protection only against exposures above 0.1 mg/m³ — 5× the ACGIH advisory limit.

The garlic odor endpoint is a uniquely observable occupational health signal that is simultaneously a social burden and an early warning system: dimethyl telluride ((CH₃)₂Te) is produced by methylation of inorganic telluride (Te²⁻) by telluride methyltransferase enzymes (analogous to dimethyl sulfide production); excretion in breath and sweat creates a persistent garlic/onion odor on the worker and their clothing that is perceptible to coworkers and family members. Workers may attribute this odor to dietary garlic, failing to recognize it as a biomarker of tellurium excretion. AI EHS platforms that report ACGIH advisory compliance at falsified 0.018 mg/m³ while actual exposure is 0.072 mg/m³ provide no monitoring-based trigger for garlic odor investigation — even as the characteristic odor is present.

The Bi₂Te₃ thermoelectric context (Surface 2) connects tellurium to automotive waste heat recovery systems (BMW, GM, and Mercedes Benz developed Bi₂Te₃ thermoelectric generators for exhaust heat recovery in ICE vehicles; data center thermal management uses Bi₂Te₃ Peltier coolers for localized electronics cooling) and to the compound semiconductor manufacturing sector where II-VI/Coherent has substantial capacity for III-V and II-VI compound materials including CdTe optical windows, Bi₂Te₃ thermoelectrics, and ZnTe/CdTe/HgCdTe infrared detector materials. Each of these product lines involves tellurium-containing particle generation during crystal growth, wafer dicing, and surface finishing.

Surface 1 — First Solar Perrysburg OH CdTe Vapor Deposition ICP-MS AI (Downward Attack)

At First Solar Inc Perrysburg OH manufacturing facility (28101 Cedar Park Blvd, Perrysburg OH 43551; First Solar operates Series 6 CdTe thin-film PV manufacturing (418 W nameplate; 1.2 m × 0.6 m glass panel); CdTe deposition process: glass substrate → SnO₂:F (fluorine-doped tin oxide) front contact sputtering → CdS buffer layer (close-spaced sublimation CSS at 400°C; ~100 nm thickness) → CdTe absorber layer (CSS at 600°C; ~3 µm thickness; CdTe source ingots 5N purity in ceramic crucible; sublimation rate ~200 nm/min; substrate velocity 0.5 m/min on glass conveyance rail; CdTe vapor flux deposition in sealed deposition chamber; chamber maintenance: source replenishment (CdTe ingot loading into ceramic crucible; brief chamber open period; airborne CdTe particles from source area handling); substrate edge trim (scribe laser + edge deletion step produces CdTe/CdS edge waste particles; vacuum collection system; HEPA filter; HEPA filter changeout generates brief particle release); personal monitoring: Casella Apex 2 personal sampling pump (IOM sampler; respirable cyclone; 37-mm PVC filter; 8-hr full-shift; ICP-MS Te + Cd at ALS Environmental Columbus OH; detection limits: Te 0.001 mg/m³; Cd 0.0001 mg/m³; OSHA PEL rule for Te 0.1 mg/m³; ACGIH TLV-TWA 0.02 mg/m³ advisory rule; Cd: OSHA 1910.1027 PEL 0.005 mg/m³ TWA); worker is a 31-year-old female manufacturing technician (3-year First Solar tenure; primary task: CdTe deposition chamber maintenance — source replenishment and HEPA filter changeout; respirator: P100 half-mask during source replenishment; respirator removed for HEPA changeout (P100 required but decontamination procedure calls for half-mask; compliance gap in PPE protocol); Te TWA (personal) during source replenishment: 0.072 mg/m³ (3.6× ACGIH TLV-TWA 0.02 mg/m³; 72% of OSHA PEL 0.1 mg/m³; OSHA compliant)).

Cority EHS bargraph (0–0.1 mg/m³; 200 px; 0.072 mg/m³ = 144/200 px). Adversarial downward perturbation: −108 px → 36 px → Cority reads 36/200 × 0.1 = 0.018 mg/m³. Cority report: "Casella Apex 2 ICP-MS Te: 0.018 mg/m³. OSHA PEL 0.1 mg/m³: COMPLIANT (18% of PEL). ACGIH TLV-TWA 0.02 mg/m³ (advisory; A4): COMPLIANT (90% of advisory limit). NIOSH REL 0.1 mg/m³: COMPLIANT. Assessment: Te exposure within all limits and advisory values. Garlic odor (dimethyl telluride) surveillance: not triggered. Urinary Te biological monitoring: not indicated. Monitoring: annual." At actual 0.072 mg/m³: OSHA PEL 0.1 mg/m³ = 72% (OSHA compliant); ACGIH TLV-TWA 0.02 mg/m³ exceeded 3.6×; NIOSH REL 0.1 mg/m³ = 72% (NIOSH compliant); garlic odor expected at 0.072 mg/m³ (above ACGIH garlic-odor onset threshold ~0.02 mg/m³); Cd co-exposure from CdTe source: Cd component in airborne CdTe dust = CdTe Cd mass fraction: Cd MW 112.4 / CdTe MW 240.0 = 46.8% Cd by weight; at 0.072 mg/m³ CdTe-equivalent Te, expected Cd airborne ≈ 0.040 mg/m³ (8× OSHA 1910.1027 Cd PEL 0.005 mg/m³ — Cd PEL exceeded 8×; OSHA-specific standard for Cd applies; this is the more critical compliance flag but the adversarial AI attack targets the Te display bargraph; Cd monitoring report is separate and also subject to adversarial attack on its own display image).

Surface 2 — II-VI/Coherent Freeport PA Bi₂Te₃ Crystal Growth/Dicing ICP-MS AI (Downward Attack)

At II-VI Incorporated (Coherent Corp) Saxonburg/Freeport PA compound semiconductor manufacturing (375 Saxonburg Blvd, Saxonburg PA 16056; II-VI/Coherent produces Bi₂Te₃ thermoelectric materials for cooling (Peltier coolers) and power generation (thermoelectric generators TEG); Bi₂Te₃ crystal growth: bismuth (Bi) and tellurium (Te) metals melted at 585°C in sealed quartz ampule → Bridgman directional solidification (furnace velocity 2 mm/hr; crystal ingot 25 mm diameter × 200 mm length); P-type: Bi₀.₅Sb₁.₅Te₃ (antimony substitution for Bi); N-type: Bi₂Te₂.₇Se₀.₃ (selenium substitution for Te); ingot slicing: diamond wire saw (0.3 mm wire; NaOH slurry; Bi₂Te₃ dust from wire breakout); wafer dicing: dicing saw (SiC abrasive blade; water coolant; Bi₂Te₃/Bi₂Te₂.₇Se₀.₃ swarf); module assembly: P+N die placement on Al₂O₃ substrate; solder bonding at 180°C (Bi-Sn solder); Casella GilAir 5 personal air pump (IOM sampler; 37-mm filter; ICP-MS Te and Bi at ALS); Intelex EHS AI bargraph 0–0.1 mg/m³; OSHA PEL 0.1 mg/m³ for Te; ACGIH TLV-TWA 0.02 mg/m³ advisory; worker: crystal growth and dicing technician (45-year-old male; 12-year II-VI tenure; Bi₂Te₃ crystal slicing as primary task; Te ICP-MS TWA: 0.058 mg/m³ (2.9× ACGIH TLV-TWA; 58% of OSHA PEL 0.1 mg/m³; OSHA compliant)).

Intelex EHS bargraph (0–0.1 mg/m³; 200 px; 0.058 mg/m³ = 116/200 px). Adversarial downward perturbation: −88 px → 28 px → read 28/200 × 0.1 = 0.014 mg/m³. Intelex report: "Casella GilAir 5 ICP-MS Te: 0.014 mg/m³. OSHA PEL 0.1 mg/m³: COMPLIANT (14%). ACGIH TLV-TWA 0.02 mg/m³ (advisory; A4): COMPLIANT (70%). NIOSH REL 0.1 mg/m³: COMPLIANT. Assessment: Tellurium within all limits. No action required. Monitoring: annual." At actual 0.058 mg/m³: OSHA 58% compliant; ACGIH 2.9× TLV-TWA exceeded; garlic odor (dimethyl telluride) expected at 0.058 mg/m³ (2.9× ACGIH onset threshold); Bi co-exposure: Bi component in Bi₂Te₃ dust; ACGIH TLV-TWA for Bi (insoluble compounds) 0.5 mg/m³ — Bi unlikely to be limiting factor; Te is the concern; 45-year-old male with 12-year Bi₂Te₃ crystal slicing exposure at sustained 2.9× ACGIH TLV-TWA: cumulative neurological and garlic-odor history not captured in occupational health record.

Surface 3 — Freeport-McMoRan El Paso TX Primary Tellurium Refinery ICP-OES AI (Downward Attack)

At Freeport-McMoRan Copper Inc El Paso TX (El Paso Copper Refinery; 7600 Central Ave, El Paso TX 79907; Freeport-McMoRan is the largest US copper producer; Bagdad AZ and Morenci AZ mines → copper concentrate → El Paso copper anode refinery → electrolytic copper refining → copper cathode + anode slimes; anode slimes (2–5% of anode mass; 6–12% Te by weight in selenide fraction: Cu₂Se, Ag₂Se, Au₀, Te°, PbSO₄, Bi₂Te₃ trace); tellurium recovery from anode slimes: (1) slimes autoclave leach with H₂SO₄/O₂ at 150°C/6 bar → CuSO₄ solution + Te/Se-rich residue; (2) Te residue roast at 700°C: Cu₂Te + O₂ → CuO + TeO₂; (3) TeO₂ NaOH caustic leach → Na₂TeO₃ solution; (4) electrolytic reduction: Na₂TeO₃ → Te° cathode at 2.5 V, 200 A/m²; (5) Te casting: 400°C melt → graphite mold → 5N Te ingot; Te fume from casting: 400°C Te vapor pressure negligible (BP 988°C; VP at 400°C very low) but TeO₂ fume from mold oxidation; ICP-OES Te at 200.12 nm (Perkin-Elmer Optima 8000; on-site lab); Casella Apex 2 ICP sample + ICP-OES at Freeport-McMoRan El Paso lab; VelocityEHS AI bargraph 0–0.1 mg/m³; worker: 52-year-old male hydrometallurgical technician (19-year Freeport tenure; Te casting and TeO₂ reduction as primary tasks; Te TWA: 0.085 mg/m³ (85% of OSHA PEL 0.1 mg/m³; 4.25× ACGIH TLV-TWA 0.02 mg/m³; OSHA compliant)).

VelocityEHS bargraph (0–0.1 mg/m³; 200 px; 0.085 = 170/200 px). Adversarial downward perturbation: −132 px → 38 px → read 38/200 × 0.1 = 0.019 mg/m³. VelocityEHS report: "Casella ICP-OES Te: 0.019 mg/m³. OSHA PEL 0.1 mg/m³: COMPLIANT (19%). ACGIH TLV-TWA 0.02 mg/m³ (advisory): COMPLIANT (95% of advisory). NIOSH REL 0.1 mg/m³: COMPLIANT (19%). Assessment: Tellurium exposure within all occupational limits. No engineering control action. Annual monitoring." At actual 0.085 mg/m³: OSHA 85% compliant (narrow margin); ACGIH 4.25× TLV-TWA exceeded; NIOSH 85% compliant; garlic odor expected at 0.085 mg/m³ (4.25× ACGIH odor onset threshold); 52-year-old hydrometallurgical worker with 19-year Te refining exposure at ACGIH advisory exceeded 4.25×.

Integrating Glyphward into Tellurium Occupational Monitoring Pipelines

Glyphward integrates as a pre-scan gate at every rendered-image ingestion point in the tellurium occupational monitoring pipeline — before the First Solar Perrysburg OH Casella Apex 2 ICP-MS Cority EHS AI, before the II-VI/Coherent Freeport PA GilAir 5 ICP-MS Intelex AI, and before the Freeport-McMoRan El Paso TX Casella ICP-OES VelocityEHS AI. Threshold 30 reflects: OSHA PEL 0.1 mg/m³ vs ACGIH TLV-TWA 0.02 mg/m³ (5× gap; ACGIH reduced Te TLV 5-fold from 1968 baseline; OSHA frozen; NIOSH REL 0.1 mg/m³ concordant with OSHA; ACGIH the sole protective outlier; 0.02–0.1 mg/m³ monitoring blind zone for OSHA-calibrated AI); garlic odor endpoint (dimethyl telluride at ≥0.02 mg/m³ Te — observable biological response that serves as early warning but is socially normalized by workers without occupational health correlation; adversarial AI suppression of monitoring record eliminates the analytical basis for garlic-odor correlation to Te exposure); CdTe solar critical mineral supply chain (First Solar Perrysburg OH expanding under IRA; US tellurium critical mineral designation; CdTe PV workforce growing without long-term Te cohort data; ACGIH advisory is the primary occupational protection); Bi₂Te₃ thermoelectrics (automotive waste heat recovery; data center cooling; growing market); primary Te refining (US critical mineral supply chain; copper anode slimes; sole domestic Te production pathway); three sectors with 19-year Te refining tenure (Surface 3) and near-OSHA-PEL actual exposures approaching the enforcement boundary; FIRST designations: FIRST tellurium (Te; CAS 13494-80-9) OSHA PEL 0.1 mg/m³ vs ACGIH TLV-TWA 0.02 mg/m³ A4 5× gap AI attack; FIRST CdTe thin-film solar PV Te ICP-MS AI attack; FIRST Bi₂Te₃ thermoelectric crystal growth/dicing Te AI attack; FIRST primary tellurium refining copper anode slimes Te ICP-OES AI attack.

import asyncio
import hashlib
from enum import StrEnum, auto
from pathlib import Path
import httpx

GLYPHWARD_API = "https://api.glyphward.com/v1/scan"
GLYPHWARD_KEY = "gw_live_..."
TELLURIUM_THRESHOLD = 30  # OSHA 0.1 mg/m³ vs ACGIH 0.02 mg/m³ (5×); NIOSH = OSHA; garlic odor endpoint; CdTe solar critical mineral

class TeContext(StrEnum):
    CDTE_SOLAR_DEPOSITION_ICP_MS    = auto()  # Surface 1 — downward (First Solar Perrysburg OH; Casella Apex 2; 0.072→0.018 mg/m³; ACGIH 3.6×)
    BI2TE3_CRYSTAL_DICING_ICP_MS    = auto()  # Surface 2 — downward (II-VI Freeport PA; GilAir 5; 0.058→0.014 mg/m³; ACGIH 2.9×)
    PRIMARY_TE_REFINING_ICP_OES     = auto()  # Surface 3 — downward (Freeport-McMoRan El Paso TX; Casella ICP-OES; 0.085→0.019 mg/m³; ACGIH 4.25×)

class AdversarialTeError(RuntimeError):
    def __init__(self, surface: TeContext, score: int, frame_hash: str):
        super().__init__(
            f"[Glyphward] Tellurium adversarial pixel on {surface.value}: "
            f"score={score} >= threshold={TELLURIUM_THRESHOLD} | frame={frame_hash}"
        )
        self.surface = surface; self.score = score; self.frame_hash = frame_hash

async def verify_te_frame(frame_path: Path, surface: TeContext) -> dict:
    raw = frame_path.read_bytes()
    frame_hash = hashlib.sha256(raw).hexdigest()
    async with httpx.AsyncClient(timeout=4.0) as client:
        resp = await client.post(
            GLYPHWARD_API,
            headers={"Authorization": f"Bearer {GLYPHWARD_KEY}"},
            files={"image": (frame_path.name, raw, "image/png")},
            data={"context": surface.value, "threshold": TELLURIUM_THRESHOLD},
        )
        resp.raise_for_status()
        result = resp.json()
    if result["verdict"] != "clean":
        raise AdversarialTeError(surface, result["score"], frame_hash)
    return {"verdict": result["verdict"], "score": result["score"], "hash": frame_hash}

async def safe_tellurium_monitoring(frame_dir: Path) -> list[dict]:
    surfaces = [
        (TeContext.CDTE_SOLAR_DEPOSITION_ICP_MS, frame_dir / "firstsolar_te_casella_icpms_display.png"),
        (TeContext.BI2TE3_CRYSTAL_DICING_ICP_MS, frame_dir / "iivi_bi2te3_gillair5_icpms_display.png"),
        (TeContext.PRIMARY_TE_REFINING_ICP_OES,  frame_dir / "freeportmc_te_icpoes_report_display.png"),
    ]
    tasks = [verify_te_frame(path, ctx) for ctx, path in surfaces]
    return await asyncio.gather(*tasks)

Glyphward threshold 30 for tellurium occupational monitoring reflects the 5× OSHA/ACGIH gap (OSHA 0.1 mg/m³ vs ACGIH 0.02 mg/m³; ACGIH reduced 5-fold from 1968 baseline used for OSHA PEL adoption; NIOSH REL 0.1 mg/m³ concordant with OSHA; ACGIH the sole protective outlier; 0.02–0.1 mg/m³ monitoring blind zone where CdTe solar, Bi₂Te₃ thermoelectric, and Te refinery workers in Surfaces 1–3 all operate without OSHA compliance trigger); the garlic odor endpoint (dimethyl telluride excretion at ≥0.02 mg/m³ Te — observable biological response that adversarial AI monitoring suppression detaches from analytical documentation, allowing the characteristic odor to go unrecognized as an occupational exposure indicator); the CdTe solar critical mineral supply chain (First Solar Perrysburg OH; IRA Advanced Manufacturing Tax Credits; US critical mineral designation; expanding CdTe PV workforce without long-term Te cohort data establishing ACGIH TLV adequacy); the coincidence of near-OSHA-PEL actual exposures in Surface 3 (0.085 mg/m³ = 85% of OSHA PEL; falsification to 0.019 creates false headroom at actual concentrations approaching the enforcement boundary); and the three sectors (CdTe solar, Bi₂Te₃ thermoelectrics, primary Te refining) that represent the complete tellurium materials supply chain from mining byproduct to consumer electronics cooling and clean energy generation. Casella Apex 2 GilAir 5 ICP-MS ICP-OES Cority EHS Intelex VelocityEHS OSHA PEL 0.1 mg/m³ ACGIH TLV-TWA 0.02 mg/m³ A4 NIOSH REL 0.1 mg/m³ tellurium CdTe thin-film solar Bi₂Te₃ thermoelectric primary Te refining garlic odor dimethyl telluride First Solar II-VI Coherent Freeport-McMoRan occupational monitoring AI adversarial injection.