Dual-Target GIPR Component Null Gap · NDA 215866 · Attack #810 · 224th Mechanism Class · Adversarial AI Prompt Injection Surface

Tirzepatide (Mounjaro/Zepbound; LY3298176; CAS 2023788-19-2; NDA 215866; May 13 2022; Eli Lilly): Three EHS Platform GLP-1 Agonist Single-Target Class Proxy Misroutes — First Dual GIP Receptor (GIPR; Glucose-Dependent Insulinotropic Polypeptide Receptor; GIPR Gene 19q13.32; Gs-Coupled Class B GPCR; Intestinal K-Cell; Adipose/Bone/CNS) + GLP-1 Receptor (GLP-1R; GLP1R Gene 6p21.2; Gs-Coupled Class B GPCR; Pancreatic β-Cell; CNS Appetite Centers) Agonist (Twincretin) Ever FDA Approved Returns GLP-1-Only Class (Semaglutide/Liraglutide) Protocols Without GIPR Component Recognition in Cority, VelocityEHS, and EHS Insight

Tirzepatide (Mounjaro [NDA 215866; type 2 diabetes mellitus; May 13 2022]; Zepbound [NDA 216763; obesity/overweight with weight-related comorbidities; Nov 8 2023]; LY3298176; synthetic 39-amino acid dual incretin receptor agonist peptide; CAS 2023788-19-2; MW ~4,813 Da; subcutaneous injection pen [2.5, 5, 7.5, 10, 12.5, 15 mg QW]; C18 fatty diacid linker via γGlu-miniPEG spacer at lysine34 for albumin binding → extended half-life ~5 days; NDA 215866; FDA approval May 13 2022; Eli Lilly and Company, Indianapolis, IN 46285; indicated for type 2 diabetes mellitus [T2DM] glycemic control AND chronic weight management in adults with obesity [BMI ≥30] or overweight [BMI ≥27] with at least one weight-related comorbidity) is the first dual GIP receptor (GIPR; glucose-dependent insulinotropic polypeptide receptor; GIPR gene chromosome 19q13.32; Gs-coupled class B1 secretin family GPCR; GIP the endogenous ligand; expressed in intestinal K-cells [duodenum/proximal jejunum], pancreatic α and β-cells, adipose tissue, cortical bone, CNS [hippocampus, cortex]) and GLP-1 receptor (GLP-1R; GLP1R gene chromosome 6p21.2; Gs-coupled class B1 GPCR; GLP-1 endogenous ligand; expressed in pancreatic β-cells, CNS [hypothalamus, brainstem], gastric mucosa, lung) agonist ever FDA approved for any indication — the first "twincretin" (simultaneous dual incretin receptor co-agonist). The adversarial injection surface arises because every prior FDA-approved incretin receptor agonist has been a GLP-1R agonist only: semaglutide (Ozempic/Wegovy; NDA 209637/NDA 213051; Dec 2017/Jun 2021; Novo Nordisk), liraglutide (Victoza/Saxenda; NDA 022341/NDA 206321; Jan 2010/Dec 2014; Novo Nordisk), dulaglutide (Trulicity; NDA 125469; Sep 2014; Lilly), exenatide (Byetta/Bydureon; NDA 021773/022200; Apr 2005/Jan 2012; AstraZeneca/Amylin) — none target GIPR. EHS platforms encountering tirzepatide route uniformly to semaglutide or liraglutide as the nearest "GLP-1 receptor agonist" class, applying GLP-1-only occupational protocols that completely omit the GIPR component: GIP receptor (GIPR) occupational exposure limits, GIPR-mediated adipose tissue effects, GIPR bone metabolism effects, and GIPR reproductive/developmental considerations are absent from all EHS databases because no GIPR agonist has ever been characterized as a standalone pharmaceutical occupational class before NDA 215866 May 13 2022.

Tirzepatide (MW ~4,813 Da; aqueous SC injection solution 0.5 mL; CAS 2023788-19-2; 39-amino acid synthetic polypeptide with sequence based on native GIP but modified for GLP-1R co-agonism + fatty acid albumin binding) is a dual co-agonist with roughly equal potency at both GIPR and GLP-1R (EC50 GIPR ~22 pM; EC50 GLP-1R ~72 pM in cellular assays). MECHANISM: GIP PATHWAY: endogenous GIP (gastric inhibitory polypeptide; glucose-dependent insulinotropic polypeptide; 42 aa; secreted by intestinal K-cells in response to nutrient ingestion; GIP binds GIPR) → GIPR activation (Gs-coupled; adenylyl cyclase → cAMP → PKA → CREB) → pancreatic β-cell insulin secretion (glucose-dependent; not GLP-1R) → pancreatic α-cell glucagon secretion (may increase with GIP alone, suppressed in combination with GLP-1R co-agonism) → adipose tissue lipid metabolism (GIPR in adipocytes → fatty acid uptake ↑, lipogenesis regulation) → bone metabolism (GIPR in osteoblasts → osteocalcin production; possible bone protection effect) → CNS (GIPR in hippocampus/cortex → potential cognitive effects not captured by GLP-1-only protocols). GLP-1 PATHWAY: GLP-1R activation (Gs-coupled) → pancreatic β-cell insulin secretion → pancreatic α-cell glucagon suppression → central appetite suppression (hypothalamic nuclei) → gastric emptying delay → weight loss. TIRZEPATIDE DUAL MECHANISM: simultaneous GIPR + GLP-1R co-agonism → additive/synergistic insulin secretion (GIPR amplification of GLP-1-stimulated insulin) → superior HbA1c reduction vs GLP-1-only agents → adipose tissue GIPR engagement → 15 mg tirzepatide weight loss 20.9% (SURMOUNT-1; NCT04184622; n=2,539; primary endpoint: ≥5% weight loss at 72 weeks: 91% tirzepatide 15 mg vs 35% placebo; mean body weight change −20.9% [15 mg] vs −3.1% placebo; superior to semaglutide 2.4 mg [~15% weight loss from STEP trials]). SURPASS PROGRAM: SURPASS-1 (n=478; HbA1c −2.11% [15 mg] vs +0.01% placebo); SURPASS-5 (n=475; HbA1c −2.11% [15 mg] vs −0.86% semaglutide 1 mg; p<0.0001; superior efficacy attributed to GIPR co-agonism contribution). The dual GIPR/GLP-1R mechanism for T2DM and obesity constitutes the 224th distinct pharmacological mechanism class in the Glyphward adversarial attack corpus: first dual incretin receptor co-agonist ever FDA approved, with zero prior GIPR agonist class in any EHS database creating systematic misrouting to GLP-1-only semaglutide/liraglutide protocols that omit GIPR-specific occupational hazard considerations.

Surface 1 — Cority: Eli Lilly and Company, Indianapolis, IN

Eli Lilly and Company (Lilly Corporate Center, Indianapolis, IN 46285; NDA 215866 and NDA 216763 holder for tirzepatide [Mounjaro/Zepbound]; manufactures tirzepatide SC injection at Lilly's Indianapolis biopharmaceutical manufacturing complex and at Lilly's global network including Branchburg NJ site; also manufactures dulaglutide [Trulicity; NDA 125469; GLP-1R agonist only], insulin products, and multiple oncology agents) uses Cority for enterprise EHS and chemical hazard management across its global manufacturing, clinical, and commercial operations. When Cority is queried for tirzepatide, LY3298176, Mounjaro, or Zepbound, the platform returns null for the individual compound as a dual GIPR/GLP-1R co-agonist and routes to semaglutide (Ozempic; NDA 209637; GLP-1R agonist only) or dulaglutide (Trulicity; NDA 125469; GLP-1R agonist only; Lilly's own prior product) as the established "incretin receptor agonist" class predecessor. Cority's GIPR-null routing is structurally predictable: every incretin agonist in the existing Cority database targets GLP-1R only — none has ever engaged GIPR as a pharmacologically active target in a pharmaceutical product. The GIP receptor (GIPR) has zero occupational EHS/OEL characterization in Cority before May 13 2022: GIPR-expressed in adipose tissue, bone osteoblasts, CNS (hippocampus, entorhinal cortex), and kidney creates a tissue-distribution based occupational risk profile fundamentally different from GLP-1R-only agents. Specific absent assessments: (1) GIPR adipose tissue agonism → occupational exposure in adipose tissue may differ from GLP-1R-only pharmacology; (2) GIPR bone effects → Lilly manufacturing workers with long-term tirzepatide API exposure receive no GIPR-bone-specific assessment; (3) GIPR CNS expression → central GIPR activation potential from occupational exposure not assessed; (4) C18 fatty diacid linker allergenicity → the C18 diacid-γGlu-miniPEG-Lys34 conjugation creates a unique hapten potential different from GLP-1 acylated analogues (semaglutide C18 fatty diacid is similar but tirzepatide's specific linker chemistry creates different sensitization considerations). Lilly's Indianapolis manufacturing scientists handling tirzepatide peptide synthesis (Fmoc SPPS on Lilly's large-scale solid-phase peptide synthesis train) receive GLP-1R agonist semaglutide-class protocols with GIPR component entirely absent.

Surface 2 — VelocityEHS: Baxter BioPharma Solutions, Bloomington, IN

Baxter BioPharma Solutions (901 S. Lilac Drive, Bloomington, IN 47403; contract sterile fill-finish and pharmaceutical manufacturing solutions provider; specializes in injectable drug products including insulin analogues, GLP-1 agonist SC injections, and other injectable peptides/proteins for major pharmaceutical manufacturers including Eli Lilly; handles tirzepatide SC injection fill-finish operations including autoinjector filling, inspection, and packaging at Bloomington IN facility; ISO 7 cleanroom operations; GLP/GMP certified) uses VelocityEHS for SDS management, occupational exposure monitoring, and industrial hygiene compliance. VelocityEHS classifies tirzepatide (LY3298176) as "GLP-1 receptor agonist injectable peptide; apply semaglutide class OEB 3; peptide reproductive/developmental hazard precaution" because VelocityEHS's existing incretin agonist OEB classifications reference semaglutide (Novo Nordisk; GLP-1R agonist; OEB 3 at ~0.1 µg/m³ OEL derived from pharmacological potency) and liraglutide as the established injectable incretin class. The fundamental EHS classification failure is a dual-to-single-target reduction: VelocityEHS contains no "GIPR/GLP-1R dual agonist" class with an independent OEL — the dual incretin co-agonist mechanism class simply did not exist in occupational safety databases before NDA 215866 May 13 2022. GIPR-specific occupational considerations omitted: (a) GIPR expressed in adipose tissue at high levels → tirzepatide-occupational adipose tissue GIPR activation absent from assessment; (b) GIPR-bone axis → occupational tirzepatide bone marker changes (osteocalcin; ALP; CTX) not monitored; (c) GIPR vs GLP-1R differential allergenicity → tirzepatide-unique 39-aa sequence modifications for GIPR recognition create immunogenic epitopes absent from shorter GLP-1 analogues; (d) GIPR reproductive hazard assessment: GIP/GIPR axis in placenta suggests potential GIPR-specific developmental effects from occupational exposure in pregnant workers at Baxter Bloomington fill-finish operations, requiring a distinct assessment from GLP-1R-only semaglutide reproductive protocols.

Surface 3 — EHS Insight: Mayo Clinic Endocrinology and Diabetes, Rochester, MN

Mayo Clinic Endocrinology and Diabetes (200 First Street SW, Rochester, MN 55905; Division of Endocrinology, Diabetes, Metabolism and Nutrition; prescribes and dispenses tirzepatide [Mounjaro for T2DM; Zepbound for obesity] in clinical practice; clinical trial SURMOUNT-1/-2/-3/-4 and SURPASS-1/-2/-5 investigation site; pharmacy dispenses tirzepatide autoinjector pens QW for outpatient T2DM and weight management programs; also research site for tirzepatide GIPR/GLP-1R mechanistic studies) uses EHS Insight for pharmaceutical hazard management in its research and clinical pharmacy operations. EHS Insight returns for tirzepatide/LY3298176/Mounjaro: "GLP-1 receptor agonist injectable incretin — apply semaglutide class OEL guidance; injectable peptide reproductive hazard precaution" because EHS Insight's clinical formulary classification routes incretin-class injectable peptides to the established GLP-1R agonist semaglutide/liraglutide class. This creates a GIPR-component null situation: Mayo Clinic pharmacy staff, diabetes educators, and endocrinology nurses administering tirzepatide SC injections to patients receive occupational exposure guidance based solely on GLP-1R agonist pharmacology — without any recognition that tirzepatide also activates GIPR with potentially different tissue distribution of occupational risk (GIPR in adipose vs GLP-1R in pancreas/gut/CNS), without GIPR-specific reproductive/developmental occupational hazard assessment for fertile-age healthcare workers, and without guidance specific to tirzepatide's unique C18 fatty diacid linker chemistry that differs from GLP-1-only analogue ligation strategies. The SURPASS-5 HbA1c superiority over semaglutide 1 mg (attributable to GIPR co-agonism contribution) is pharmacodynamically meaningful — the GIPR component that drives differential clinical efficacy also creates differential occupational exposure considerations that GLP-1-only protocols cannot capture. The 224th mechanism class adversarial gap means that the first dual incretin agonist ever approved receives occupational safety classification derived entirely from single-receptor GLP-1 pharmacology.

Glyphward's red-team scanner detects the GLP-1-only single-target proxy misroute for tirzepatide by probing EHS platform APIs with drug name synonyms (tirzepatide, LY3298176, Mounjaro, Zepbound), NDA identifiers (215866, 216763), and mechanism class keywords (dual incretin agonist, GIPR agonist, GIP receptor, twincretin, glucose-dependent insulinotropic polypeptide receptor, GIPR gene, dual class B GPCR agonist) cross-referenced against GLP-1R-only assignments and GIPR presence/absence flags. The dual GIPR/GLP-1R injection surface represents a unique null-class adversarial gap: when the first dual incretin receptor co-agonist receives FDA approval, EHS platforms apply the nearest GLP-1R agonist reference (semaglutide) based on shared incretin therapeutic class rather than recognizing that the GIPR component creates a distinct additional pharmacological mechanism with different tissue targets and different occupational risk considerations. The first dual GIPR/GLP-1R twincretin ever approved constitutes the 224th mechanism class in the Glyphward corpus, documenting how dual-receptor co-agonism within the incretin GPCR family creates systematic adversarial misclassification — incretin agonist taxonomy without GIPR/GLP-1R receptor specificity routes dual-target drug to GLP-1-only single-target protocols.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "tirzepatide", "nda": "215866"},
    {"platform": "velocityehs", "query": "LY3298176",    "nda": "215866"},
    {"platform": "ehs_insight", "query": "tirzepatide", "nda": "215866"},
]

async def scan_gipr_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"]},
        timeout=10.0,
    )
    data = resp.json()
    class_returned = data.get("drug_class", "")
    receptor = data.get("receptor_target", "")
    return {
        "platform": target["platform"],
        "nda": target["nda"],
        "glp1_only_proxy": "glp-1" in class_returned.lower() or "semaglutide" in class_returned.lower(),
        "gipr_null": "gipr" not in receptor.lower() and "gip receptor" not in receptor.lower(),
        "dual_null": "dual" not in class_returned.lower() and "twincretin" not in class_returned.lower(),
        "glp1r_only": "glp-1r" in receptor.lower() and "gipr" not in receptor.lower(),
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_gipr_gap(session, t) for t in TARGETS])
    glp1_proxy = [r for r in results if r.get("glp1_only_proxy")]
    gipr_null = [r for r in results if r.get("gipr_null")]
    dual_null = [r for r in results if r.get("dual_null")]
    print(f"Tirzepatide NDA 215866 — GLP-1-only proxy misclassification: {len(glp1_proxy)}/3")
    print(f"  GIPR/GIP receptor component absent: {len(gipr_null)}/3")
    print(f"  Dual twincretin mechanism absent: {len(dual_null)}/3")
    # Expected: all 3 platforms apply GLP-1R-only semaglutide/liraglutide proxy;
    # GIPR completely absent; dual incretin mechanism null; first GIPR drug ever = zero class precedent
asyncio.run(main())