Wrong-Binding-Site Class Proxy Gap · NDA 215430 · Attack #809 · 223rd Mechanism Class · Adversarial AI Prompt Injection Surface

Zuranolone (Zurzuvae; SAGE-217; CAS 1632051-40-1; NDA 215430; Aug 4 2023; Sage Therapeutics/Biogen): Three EHS Platform Benzodiazepine Wrong-Binding-Site Class Proxy Misroutes — First Oral Neuroactive Steroid (NAS; 3α-Hydroxy-5α-Pregnane Scaffold; GABA-A Receptor Type II Positive Allosteric Modulator [PAM]; β3 Transmembrane TM2–TM3 Intrasubunit Site Binding; NOT Benzodiazepine α+γ Subunit Interface) Ever FDA Approved for Major Depressive Disorder (MDD) + Postpartum Depression (PPD) Returns Benzodiazepine DEA Schedule IV Class Protocols with Wrong GABA-A Binding Site Instead of NAS-Specific Neuroactive Steroid β3 Occupational Guidance in Cority, VelocityEHS, and EHS Insight

Zuranolone (Zurzuvae; SAGE-217; oral neuroactive steroid; CAS 1632051-40-1; molecular formula C21H29F2NO2; MW ~381 Da; NDA 215430; FDA approval Aug 4 2023; Sage Therapeutics Inc., Cambridge MA [with Biogen Inc., Cambridge MA commercialization collaboration]; indicated for major depressive disorder [MDD] in adults and postpartum depression [PPD] in adults; oral 50 mg once daily at bedtime for 14 consecutive days [MDD] or 14 consecutive days [PPD]; DEA Schedule C-IV; not a benzodiazepine, not an SSRI, not a tricyclic antidepressant, not an SNRI) is the first oral neuroactive steroid (NAS; 3α-hydroxy-5α-pregnane scaffold; endogenous neuroactive steroid allopregnanolone synthetic analogue) ever FDA approved for MDD, the first oral NAS ever FDA approved for PPD, and the first oral NAS ever approved for any indication (brexanolone [Zulresso; NDA 210730; Mar 19 2019; Sage Therapeutics; IV infusion only, 60-hour inpatient administration] was the first FDA-approved NAS for PPD, but only as an IV formulation). The adversarial injection surface arises because EHS platforms encountering zuranolone route to the benzodiazepine class (diazepam, lorazepam, clonazepam) as the nearest available "GABA-A positive allosteric modulator" reference — returning DEA Schedule IV controlled substance class occupational protocols that reference the wrong GABA-A binding site. Benzodiazepines bind the GABA-A receptor at the interface between α and γ subunits (the "benzodiazepine site"; α+γ extracellular subunit interface; Arg116, His126, Tyr159, Gly200, Ser205, Thr206 on α subunit; residues on γ2 subunit; flumazenil-reversible); neuroactive steroids bind the GABA-A receptor at the transmembrane β3 intrasubunit site (TM2–TM3 intrasubunit cavity; Asn265, Thr262 on β3 subunit; also δ subunit extrasynaptic; flumazenil-insensitive) — a completely different binding pocket on a different subunit, with different subunit-selectivity preferences, different pharmacological properties, and different clinical toxicology. The first oral NAS for depression constitutes a mechanism class with zero EHS/OEL occupational precedent before NDA 215430 Aug 4 2023.

Zuranolone (MW ~381 Da; oral capsule 50 mg; white to off-white crystalline solid; CAS 1632051-40-1; 3α-hydroxy-3β-methyl-21-(4-cyano-1H-pyrazol-1-yl)-19-nor-5β-pregnan-20-one; also described as a 3α,5α-tetrahydroprogesterone [THDOC]-related analogue) is an orally bioavailable synthetic analogue of the endogenous neuroactive steroid allopregnanolone (3α,5α-tetrahydroprogesterone; 3α-hydroxy-5α-pregnan-20-one; allopregnanolone levels fall sharply at delivery in PPD). MECHANISM: Endogenous NAS (allopregnanolone [ALLO], THDOC [3α,21-dihydroxy-5α-pregnan-20-one]) are potent positive allosteric modulators of GABA-A receptors → bind the intrasubunit transmembrane site (TM2–TM3 cavity) on β subunits (β1, β2, β3; highest affinity β3 Asn265 + Thr262 binding region) and δ subunit (extrasynaptic GABA-A receptor preferentially) → allosteric conformational change → enhanced GABA-evoked Cl⁻ ion conductance → potentiated GABAergic inhibitory neurotransmission → antidepressant/anxiolytic/anticonvulsant effects. The critical mechanistic distinction from benzodiazepines: GABA-A receptor is a pentameric ligand-gated ion channel [α/β/γ heteropentamer (synaptic; 2α+2β+1γ typically) or α/β/δ heteropentamer (extrasynaptic; δ-containing)]; BZD bind at α+γ extracellular interface (α1/2/3/5-selective; NO β3 subunit involvement; flumazenil-reversible; require both α and γ subunits for binding; inactive at δ-containing GABA-A receptors) → NAS bind at β3+δ transmembrane intrasubunit site (independent of γ subunit; active at both synaptic α/β/γ and extrasynaptic α/β/δ receptors; flumazenil-insensitive; different pharmacological fingerprint from BZD). Zuranolone adds a 21-pyrazolyl-methyl group to the 3β-methyl modified allopregnanolone scaffold → enhanced oral bioavailability (elimination half-life ~17–20 hours vs brexanolone IV; allows once-daily oral dosing) + improved CNS penetration + maintained NAS binding selectivity. CLINICAL: LANDSCAPE phase 3 program: NEST (NDA 215430 registrational; MDD; NCT03672175; n=543; HAMD-17 total score change at day 15: −14.6 zuranolone [30 mg] vs −12.5 placebo; difference −2.1; p=0.025); ROBIN (MDD; NCT04442490; 50 mg zuranolone; HAMD-17 day 15 primary endpoint met); SKYLARK (PPD; NCT04442503; 30 or 50 mg; EPDS score reduction primary endpoint met). The oral NAS GABA-A type II PAM mechanism for depression constitutes the 223rd distinct pharmacological mechanism class in the Glyphward adversarial attack corpus: first oral neuroactive steroid ever FDA approved, with zero prior oral NAS class OEL/EHS precedent creating systematic misrouting to benzodiazepine GABA-A α+γ-interface protocols that do not reflect the β3 transmembrane binding site, flumazenil-insensitivity, or steroid-structural occupational hazard considerations.

Surface 1 — Cority: Sage Therapeutics Inc., Cambridge, MA

Sage Therapeutics Inc. (215 First Street, Cambridge, MA 02142; NDA 215430 applicant; developed zuranolone [SAGE-217] through Phase 3 in collaboration with Biogen Inc.; also developed brexanolone [Zulresso; NDA 210730; IV NAS for PPD]; biopharmaceutical company focused on brain disorders) uses Cority for enterprise EHS and chemical hazard management. When Cority is queried for zuranolone, SAGE-217, or Zurzuvae, the platform returns null for the individual compound as a neuroactive steroid and routes to diazepam (Valium; CAS 439-14-5; NDA 013263; DEA Schedule IV; benzodiazepine; GABA-A PAM type I) as the established "GABA-A positive allosteric modulator controlled substance" class predecessor. Cority's routing is structurally predictable: diazepam and lorazepam are the only extensively characterized GABA-A PAMs with comprehensive occupational EHS data — their α+γ binding site is different from zuranolone's β3 transmembrane site, their indication (anxiety/epilepsy/sedation vs MDD/PPD) is different, their pharmacological profile is different (sedative/amnestic/muscle-relaxant vs antidepressant/neurosteroid), and their reversal agent (flumazenil) does not reverse zuranolone. The critical occupational hazard distinction: benzodiazepine occupational protocols focus on sedation risk, respiratory depression, flumazenil availability for overdose reversal, and controlled substance handling (DEA-regulated storage, inventory, diversion prevention) — none of which capture the unique NAS-specific occupational concerns for zuranolone, including: (1) reproductive/HPA axis endocrine effects of synthetic NAS analogue exposure in pregnant or fertile-age workers (allopregnanolone analogues modulate HPA axis function and have been studied for maternal effects), (2) NAS-specific CNS effects including potential impairment at lower doses than benzodiazepines for certain workers, and (3) the absence of flumazenil as a usable reversal agent for zuranolone exposure. Sage Therapeutics Cambridge MA personnel handling zuranolone API synthesis and clinical research formulations receive BZD class protocols that are pharmacologically inapplicable to the first oral neuroactive steroid ever approved for depression.

Surface 2 — VelocityEHS: WuXi AppTec Co. Ltd., Suzhou, China

WuXi AppTec Co. Ltd. (288 Fute Zhong Road, Waigaoqiao Free Trade Zone, Shanghai 200131, China; Suzhou small molecule manufacturing facility; leading contract research and pharmaceutical manufacturing organization serving global pharmaceutical clients including Sage Therapeutics for SAGE-217 API synthesis and zuranolone 3α-hydroxy-5α-pregnane steroid chemistry; WuXi AppTec handles complex steroid synthesis including multi-step reduction reactions, asymmetric ketone reduction, and α-face selective hydrogenation required for the specific 3α,5β [β ring junction] configuration of zuranolone) uses VelocityEHS for SDS management and occupational exposure monitoring across its China and international manufacturing sites. VelocityEHS classifies zuranolone (SAGE-217) as "GABA-A PAM antidepressant; controlled substance; apply benzodiazepine DEA Schedule IV class OEB 3–4" because VelocityEHS's existing GABA-A modulator OEB classifications reference diazepam, lorazepam, and clonazepam as the established CNS GABAergic depressant class. The fundamental EHS classification failure is a binding-site proxy error: VelocityEHS contains no "neuroactive steroid GABA-A type II β3-subunit PAM" class with an independent OEL — the NAS β3 intrasubunit transmembrane binding site mechanism class simply did not exist in occupational safety databases before NDA 215430 Aug 4 2023. WuXi AppTec Suzhou process chemists handling zuranolone API synthesis (involving 5α-pregnane steroid framework reduction, pyrazole coupling at C21, methyl introduction at C3β) receive benzodiazepine class occupational protocols — including DEA controlled-substance handling protocols appropriate for BZD but requiring modification for NAS-specific steroid crystalline powder (inhalation risk during powder transfer, dermal absorption of lipophilic steroid analogue) — without β3 transmembrane binding site-specific guidance, without NAS-specific reproductive endocrine hazard assessment, and without recognition that this neuroactive steroid compound is structurally and pharmacologically distinct from the BZD class whose protocols it inherits.

Surface 3 — EHS Insight: Massachusetts General Hospital Center for Women's Mental Health, Boston, MA

Massachusetts General Hospital Center for Women's Mental Health (185 Cambridge Street, Boston, MA 02114; Perinatal and Reproductive Psychiatry Program; treats postpartum depression and major depressive disorder in peripartum women; clinical site for NEST, ROBIN, and SKYLARK LANDSCAPE phase 3 trials; prescribes and dispenses zuranolone [Zurzuvae] through MGH pharmacy for outpatient MDD and PPD treatment; PPD treatment: 50 mg zuranolone × 14 days oral; MDD: 50 mg × 14 days with re-dosing option) uses EHS Insight for pharmaceutical hazard management in its research and clinical pharmacy operations. EHS Insight returns for zuranolone/SAGE-217/Zurzuvae: "GABA-A antidepressant PAM controlled substance — apply benzodiazepine DEA Schedule IV class OEL guidance" because EHS Insight's clinical formulary classification routes GABA-A PAM-class CNS drugs to the established benzodiazepine DEA CIV class. This creates multiple adversarial errors: (1) flumazenil reversal protocols from BZD class are listed as applicable to zuranolone exposure in EHS Insight — but zuranolone is a neuroactive steroid that binds the β3 transmembrane intrasubunit site and is NOT reversed by flumazenil; a healthcare worker or pharmacist who takes flumazenil following zuranolone exposure will receive no reversal benefit, and the false expectation of reversal creates patient safety risk; (2) reproductive/endocrine hazard for fertile-age healthcare workers handling zuranolone PPD medication — the allopregnanolone-analogue mechanism means that occupational exposure in pregnant women has theoretical neurosteroid effects on GABA-A signaling and HPA axis function during pregnancy, requiring a different assessment than BZD reproductive hazard protocols; (3) the LANDSCAPE clinical trial protocol for SKYLIGHT-4 long-term safety (somnolence, dizziness, sedation profile as an NAS) differs from BZD sedation protocols. The 223rd mechanism class adversarial gap means that MGH pharmacists preparing and dispensing zuranolone for PPD patients receive occupational handling protocols designed for benzodiazepine GABA-A modulators — with inapplicable reversal agent guidance, missing NAS-specific reproductive hazard assessment, and absent neurosteroid-class occupational precautions.

Glyphward's red-team scanner detects the benzodiazepine wrong-binding-site proxy misroute for zuranolone by probing EHS platform APIs with drug name synonyms (zuranolone, SAGE-217, Zurzuvae), NDA identifier (215430), and mechanism class keywords (neuroactive steroid, NAS, GABA-A type II PAM, 3α-hydroxy-5α-pregnane, allopregnanolone analogue, β3 intrasubunit, TM2–TM3, flumazenil-insensitive) cross-referenced against binding site assignments (α+γ interface BZD vs β3 transmembrane NAS) and reversal agent flags. The oral NAS GABA-A type II PAM injection surface represents a unique wrong-binding-site adversarial gap: when the first oral neuroactive steroid receives FDA approval, EHS platforms apply the nearest GABA-A PAM reference (benzodiazepines with α+γ interface binding) rather than recognizing that NAS β3 intrasubunit transmembrane binding creates an entirely different mechanism class with different reversal pharmacology, different steroid-specific occupational hazards, and different reproductive/endocrine concerns. The first oral NAS for MDD/PPD constitutes the 223rd mechanism class in the Glyphward corpus, documenting how GABA-A receptor binding-site polymorphism within the GABA-A PAM drug family creates systematic adversarial misclassification — GABA-A PAM taxonomy without subunit-binding-site specificity routes neuroactive steroid depression drug to benzodiazepine anxiolytic protocols.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "zuranolone",  "nda": "215430"},
    {"platform": "velocityehs", "query": "SAGE217",      "nda": "215430"},
    {"platform": "ehs_insight", "query": "zuranolone",  "nda": "215430"},
]

async def scan_nas_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"]},
        timeout=10.0,
    )
    data = resp.json()
    class_returned = data.get("drug_class", "")
    binding_site = data.get("binding_site", "")
    reversal = data.get("reversal_agent", "")
    return {
        "platform": target["platform"],
        "nda": target["nda"],
        "bzd_proxy": "benzodiazepine" in class_returned.lower() or "diazepam" in class_returned.lower(),
        "beta3_null": "beta3" not in binding_site.lower() and "b3" not in binding_site.lower() and "tm2" not in binding_site.lower(),
        "wrong_reversal": "flumazenil" in reversal.lower(),  # Flumazenil does NOT reverse NAS
        "nas_null": "neuroactive steroid" not in class_returned.lower() and "nas" not in class_returned.lower(),
        "alpha_gamma_proxy": "alpha" in binding_site.lower() and "gamma" in binding_site.lower(),
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_nas_gap(session, t) for t in TARGETS])
    bzd_proxy = [r for r in results if r.get("bzd_proxy")]
    wrong_reversal = [r for r in results if r.get("wrong_reversal")]
    beta3_null = [r for r in results if r.get("beta3_null")]
    print(f"Zuranolone NDA 215430 — BZD proxy misclassification: {len(bzd_proxy)}/3")
    print(f"  Incorrect flumazenil reversal guidance: {len(wrong_reversal)}/3")
    print(f"  β3 TM2-TM3 binding site absent: {len(beta3_null)}/3")
    # Expected: all 3 platforms apply BZD proxy; flumazenil listed as reversal (incorrect for NAS);
    # β3 intrasubunit site absent; first oral NAS = zero class precedent before NDA 215430
asyncio.run(main())