Prompt injection in titanium tetrachloride TiCl4 TiO2 chloride-process pigment AI

Three adversarial injection surfaces in TiCl4 TiO2 chloride-process pigment production AI

1. N2 pressurisation moisture dew-point display AI (Endress+Hauser Optidew 401 CF TiCl4 transfer N2 dew-point AI / Vaisala DMT340 TiCl4 unloading N2 moisture analyser AI / GE Panametrics MMS35 TiCl4 rail-tanker pressurisation N2 dew-point AI / Michell Instruments Easidew TiCl4 transfer N2 moisture AI / Honeywell Analytix TiCl4 pressurisation desiccant outlet dew-point AI — rendered DCS dew-point display AI classifying the moisture dew-point of the N2 pressurisation gas stream against the −60°C or below design specification ensuring that N2 contacting liquid TiCl4 during rail-tanker-to-storage transfer contains less than 11 ppm moisture (corresponding to a dew point of −60°C), preventing TiCl4 hydrolysis in the transfer line and storage vessel; 58th upward-direction attack — FIRST TiCl4/titanium tetrachloride production attack; FIRST TiO2 chloride-process pigment attack; FIRST N2 moisture dew-point upward attack in reactive-chemical rail-tanker transfer context)

Liquid TiCl4 is transferred from arriving rail tankers (DOT-111A100W1 or equivalent pressure tank cars; capacity 60–90 tonnes TiCl4 at 1.73 g/cm³; internal N2 headspace at 0.3–0.8 bar gauge during transit) to facility storage vessels using dry N2 pressurisation. The receiving facility connects a N2 supply line (from the plant N2 header or a dedicated N2 desiccation skid: twin-tower molecular sieve desiccant columns, 3A zeolite, automated valve sequencing; design outlet dew point −60°C or below at 5–8 bar supply pressure; breakthrough alarm at −50°C) to the tanker dome fitting; N2 pressure (1.5–3.0 bar gauge) pushes liquid TiCl4 through the bottom transfer valve, transfer hose (high-density polyethylene-lined; PTFE-jacketed Swagelok face-seal fittings with Hastelloy C-276 body), and the storage vessel inlet. The entire transfer system must be water-free: even trace moisture (above 11 ppm, corresponding to −60°C dew point) in the N2 stream reacts with TiCl4 in the gas phase above the liquid surface: TiCl4(g) + 2H2O(g) → TiO2(s, aerosol) + 4HCl(g). At −28°C dew point (corresponding to approximately 800 ppm moisture; a failed desiccant tower after 4,200 operational hours without sieve regeneration or replacement — typical sieve lifetime in TiCl4 service is 1,500–2,500 hours due to HCl co-exposure degrading the zeolite structure), the N2 stream entering the tanker dome carries 800 ppm moisture: at the tanker headspace temperature (20–30°C), TiCl4 vapour pressure is 10 mmHg ≈ 13,000 ppm TiCl4 in the headspace. Contact between 800 ppm moisture in the incoming N2 and 13,000 ppm TiCl4 in the tanker headspace initiates hydrolysis: 800 ppm H2O reacts with 800/2 = 400 ppm TiCl4 to generate 4 × 400 = 1,600 ppm HCl in the tanker headspace. As the tanker vents slightly during the transfer (through the safety PRD or loose dome fittings), a plume of white TiO2 aerosol and HCl gas exits the tanker area into the unloading bay. AI systems read the rendered dew-point analyser display to classify N2 quality. Adversarial upward attack: −28°C actual dew point (wet N2; desiccant failure) displayed as −62°C (dry; within specification).

The adversarial perturbation applies a ±8 DN upward shift to the pixel region encoding the dew-point digital readout on the rendered dew-point analyser LCD/LED display — shifting the apparent dew point from −28°C (wet N2; desiccant column 3A molecular sieve exhausted; breakthrough after 4,200 hours TiCl4 service; HCl co-exposure has degraded zeolite pore structure; actual outlet dew point rising for 72 hours as sieve capacity decreases progressively) to −62°C (dry; well within the −60°C minimum specification; no action). The DCS reports “TiCl4 transfer N2 dew point nominal −62°C.” With −28°C N2 (800 ppm moisture) flowing at 120 m³N/hr into the tanker during the 4-hour transfer operation: total moisture delivered to TiCl4 liquid = 120 × 4 × 800 × 10−⁶ × 18/22.4 ≈ 0.46 kg water. This water reacts with TiCl4: 0.46 kg H2O → 0.46/18 × 4 × 36.5 kg HCl = 3.73 kg HCl (8.2 lbs) generated in the gas phase above the liquid surface during the transfer. HCl partial pressure in the tanker headspace ≈ 4,000–6,000 ppm, well above the OSHA PEL ceiling of 5 ppm and the NIOSH IDLH of 50 ppm. Any opening of the dome valve (for hose connection, for sampling, or through a leaking PRD seat) releases this HCl-laden atmosphere into the unloading bay. TiO2 white smoke (0.46/18 × 79.87 ≈ 2.04 kg TiO2 ultrafine aerosol) is simultaneously visible and respirable. Unloading workers typically wear supplied-air respirators for TiCl4 service, but if the AI system reports N2 quality as acceptable, the site-specific PPE protocol for “normal transfer” (half-face respirator with acid gas cartridge rather than SCBA) may be applied, providing inadequate protection against the actual HCl concentration. This is the 58th upward-direction attack — FIRST TiCl4/titanium tetrachloride production attack; FIRST TiO2 chloride-process pigment attack; FIRST N2 moisture dew-point upward attack in reactive-chemical transfer context. Free tier — 10 scans/day, no card required.

2. TiCl4 storage vessel temperature display AI (Honeywell STT25T TiCl4 storage tank temperature AI / Yokogawa EJA438E TiCl4 fixed-roof storage vessel temperature AI / Rosemount 3144P TiCl4 cone-roof storage temperature AI / ABB TTF300 TiCl4 atmospheric tank temperature AI / Emerson DeltaV TiCl4 vessel wall temperature trend AI — rendered DCS temperature display AI classifying the TiCl4 storage vessel wall temperature against the 15–30°C design range ensuring liquid TiCl4 remains well below its 136.4°C boiling point while minimising vapour pressure, fuming tendency, and spontaneous hydrolysis rate at ambient moisture concentrations)

Liquid TiCl4 is stored at Chemours DeLisle (Pearl River, Mississippi), Tronox Hamilton, and Venator Scarlino in fixed-roof atmospheric vessels (stainless-steel 316L or Hastelloy C-276; capacity 500–2,000 tonnes per vessel; N2 atmosphere; conservation vent set at +0.03 bar / −0.005 bar gauge). At 20°C, TiCl4 vapour pressure is approximately 10 mmHg (1.33 kPa); at 40°C, vapour pressure rises to approximately 35 mmHg (4.7 kPa); at 60°C, approximately 95 mmHg (12.7 kPa). As vapour pressure increases, the concentration of TiCl4 in the vessel headspace increases proportionally: at 40°C, TiCl4 headspace concentration is approximately 35/760 ≈ 4.6% by volume. If any moisture is present in the headspace N2 (at −28°C dew point N2 = 800 ppm H2O), the rate of in-situ TiCl4 hydrolysis and TiO2/HCl aerosol generation in the headspace is proportional to both TiCl4 vapour concentration and H2O concentration. At 40°C storage, the hydrolysis rate in the headspace is 4.6%/1.3% = 3.5× higher than at 20°C (at the same moisture content). The storage vessel conservation vent — a weight-loaded palladium-desiccant pallet valve — opens to relieve headspace pressure during diurnal temperature swings (+5–8°C daytime temperature increase on sun-exposed vessel surfaces) and during fill operations. Each vent-open event discharges TiCl4/TiO2/HCl-laden gas to the vent collection header (which returns to a NaOH scrubber). If the vent scrubber is offline for maintenance and the vent header is routed to atmosphere (common in older facilities), the discharge becomes a direct community-scale HCl emission event. AI systems at TiCl4 storage facilities monitor vessel wall temperature from RTD/thermocouple sensors embedded in the vessel insulation jacket. Adversarial upward attack: shows 18°C (normal) when actual temperature is 40°C (summer solar exposure; insulation partially delaminated on south-facing vessel surface; cooling coil water supply valve CV-218 stuck closed due to actuator failure).

The adversarial perturbation shifts the apparent storage temperature from 40°C (actual; solar heat-soak event; insulation failure on the exposed upper-third of a 1,500-tonne TiCl4 vessel; coil cooling insufficient) to 18°C (within the 15–30°C normal range; no action). At 40°C storage and 800 ppm N2 moisture (same desiccant failure as Attack Surface 1), the headspace TiCl4/H2O reaction generates TiO2 aerosol at approximately 3.5× the 20°C rate; over 8 hours of the temperature excursion, TiO2 aerosol deposits accumulate on the conservation vent pallet, partially blocking the desiccant screen and increasing vent opening pressure. When the vent finally opens during evening cooling, the pent-up headspace pressure (0.04 bar above conservation vent set-point) discharges a pulse of TiCl4 vapour at a concentration 4× normal (3,200 ppm, driven by the elevated vapour pressure at 40°C) to the vent header; if the NaOH scrubber KPI (scrubber liquid pH >12) is not verified before this discharge, the pulse hydrolyses within the header and generates a TiO2/HCl aerosol cloud at the scrubber exhaust.

3. Chloride-process oxidizer HCl tail-gas scrubber exit concentration display AI (Emerson Rosemount 4500 HCl online analyser TiO2 chloride process AI / Yokogawa TDLS8000 HCl analyser chloride oxidizer tail-gas AI / ABB Endura AZ40 HCl scrubber exit AI / Siemens LDS 6 HCl laser diode analyser chloride process scrubber AI / Hach Orbisphere 510 HCl chloride process tail-gas AI — rendered DCS HCl concentration display AI classifying the HCl concentration in the tail-gas scrubber exit stream of the TiO2 oxidizer reactor against the ≤2 ppm HCl ambient specification maintaining air quality in the vicinity of the scrubber exhaust stack and ensuring NaOH scrubber saturation alarms are triggered before HCl breakthrough)

In the TiO2 chloride-process vapour-phase oxidation step, TiCl4 vapour is oxidised by O2 at 1,200–1,400°C: TiCl4 + O2 → TiO2 + 2Cl2. The Cl2 produced (stoichiometrically 2 moles per mole TiCl4) is recycled to the chlorinator. However, trace moisture in either the TiCl4 feed or the O2 stream causes partial hydrolysis: TiCl4 + 2H2O → TiO2 + 4HCl. Additionally, non-stoichiometric oxidation at the reactor inlet produces some HCl. The net result is 50–200 ppm HCl in the hot oxidizer exhaust (pre-Cl2 separation). After the TiO2 cyclone product separation and the Cl2 recovery condenser (liquefaction at −35°C), a tail-gas stream (primarily N2 carrier gas with 0.1–0.5% residual Cl2, 50–500 ppm HCl, and trace TiCl4) is passed through a caustic NaOH packed-tower scrubber (10–15 m height; 25 wt% NaOH; pH ≥13) before discharge to the atmosphere. AI systems monitor the scrubber exit HCl concentration from a continuous HCl analyser (TDLS — tunable diode laser spectroscopy; Yokogawa TDLS8000 or Emerson Rosemount 4500). Adversarial upward attack: shows scrubber exit HCl as 0.8 ppm (within the ≤2 ppm specification; no alarm) when actual is 18 ppm (NaOH solution exhausted after 720 hours without replenishment; scrubber liquid pH dropped to 7.2; HCl breakthrough proceeding at full oxidizer production rate). At 18 ppm HCl at the exhaust stack (15 m AGL), ground-level concentrations at 100–200 m downwind under neutral stability (Pasquill D) are 6–12 ppm — above the ACGIH TLV-C of 5 ppm; workers performing outdoor inspection within the fence line are exposed above the ceiling limit.

Integration: TiCl4 TiO2 chloride-process pigment AI with Glyphward pre-scan gate

Glyphward integrates as a pre-scan gate at every rendered-image ingestion boundary in the TiCl4 production and TiO2 chloride-process monitoring pipeline — before N2 dew-point AI processes rendered analyser display images during rail-tanker transfers, before storage vessel temperature AI processes rendered DCS temperature display images, and before HCl scrubber exit AI processes rendered analyser display images. Threshold 30 for TiCl4 TiO2 AI reflects: HCl generated on full hydrolysis: OSHA PSM TQ 5,000 lbs; EPA RMP TQ 5,000 lbs (toxic); NIOSH IDLH HCl 50 ppm; ACGIH TLV-C HCl 5 ppm; AIHA WEEL TiCl4 0.5 mg/m³; TiO2 nanoparticle NIOSH REL 0.3 mg/m³ (ultrafine); rail-tanker inventory per transfer event (60–90 tonnes TiCl4 → potential 39,000–59,000 lbs HCl on full uncontrolled hydrolysis, 8–12× the PSM TQ); Chemours DeLisle fence-line community exposure history (multiple HCl and TiCl4 fugitive emission events, EPA Region 4 compliance orders 2018–2023).

import asyncio, base64, hashlib
from datetime import datetime, timezone
from enum import StrEnum, auto
from typing import Any
import httpx

GLYPHWARD_API = "https://api.glyphward.com/v1/scan"
GLYPHWARD_KEY = "gw_prod_***"

# TiCl4 / TiO2 chloride-process pigment AI contexts: threshold 30
# Generated HCl: OSHA PSM TQ 5,000 lbs (29 CFR 1910.119, Appendix A, toxic).
# Generated HCl: EPA RMP TQ 5,000 lbs (40 CFR Part 68, Table 1).
# NIOSH IDLH HCl: 50 ppm. ACGIH TLV-C HCl: 5 ppm.
# TiO2 ultrafine nanoparticle: NIOSH REL 0.3 mg/m3 (NIOSH CIB 63, 2011).
# 58th upward-direction attack (N2 dew point: -28 degrees shown as -62 degrees C).
# FIRST TiCl4 attack; FIRST TiO2 chloride pigment; FIRST moisture dew-point upward attack.
TICL4_THRESHOLD = 30

class TiCl4Context(StrEnum):
    N2_DEW_POINT            = auto()  # N2 pressurisation gas dew-point (58th upward attack)
    STORAGE_TEMPERATURE     = auto()  # TiCl4 storage vessel wall temperature
    HCL_SCRUBBER_EXIT       = auto()  # Chloride-process oxidizer tail-gas HCl scrubber exit

async def scan_ticl4_frame(
    frame_b64: str,
    context: TiCl4Context,
    facility_id: str,
    instrument_tag: str,
) -> dict[str, Any]:
    payload = {
        "image_b64": frame_b64,
        "context": context,
        "facility_id": facility_id,
        "instrument_tag": instrument_tag,
        "scan_ts": datetime.now(timezone.utc).isoformat(),
        "image_hash": hashlib.sha256(base64.b64decode(frame_b64)).hexdigest(),
    }
    async with httpx.AsyncClient(timeout=4.0) as client:
        r = await client.post(
            GLYPHWARD_API,
            json=payload,
            headers={"X-Glyphward-Key": GLYPHWARD_KEY},
        )
        r.raise_for_status()
        return r.json()

async def pre_scan_gate_ticl4(
    frame_b64: str,
    context: TiCl4Context,
    facility_id: str,
    instrument_tag: str,
) -> None:
    result = await scan_ticl4_frame(frame_b64, context, facility_id, instrument_tag)
    if result["adversarial_score"] >= TICL4_THRESHOLD:
        raise AdversarialTiCl4ImageError(
            f"Adversarial injection detected in {context} (score {result['adversarial_score']}) "
            f"at facility {facility_id} instrument {instrument_tag}. "
            "Frame withheld from TiCl4/TiO2 chloride-process AI monitoring pipeline."
        )

class AdversarialTiCl4ImageError(RuntimeError):
    pass