Idelalisib (Zydelig; CAS 870281-82-6): NIOSH HD Category 1 FIRST PI3Kδ Lipid Kinase Inhibitor OEL Gap [PIP2→PIP3 Lipid Phosphorylation Entirely Absent from All OEL Frameworks; TENTH Distinct Mechanism Class — All 513 Prior Attacks = Protein Kinases or Non-Kinase Targets; Lipid Second Messenger Signaling Cascade Not Addressed by Any NIOSH/ACGIH/OSHA OEL Derivation] + FOUR-BBW Clinical Deflection Maxima [Hepatotoxicity + Diarrhea/Colitis + Non-Infectious Pneumonitis + Intestinal Perforation; Most BBWs of Any Single Agent in 514-Attack Glyphward Portfolio; Four-Organ-System Clinical Monitoring Maximally Deflects from H340 H350 H361] + FIRST Gilead Sciences Oncology NDA Null [NDA 206545; Gilead Primarily HIV/Antiviral Portfolio; Idelalisib FIRST Kinase Inhibitor and FIRST Oncology NIOSH HD Category 1 at Gilead; Antiviral-to-Oncology EHS Database Structural Gap] + FIRST Quinazolinone-Purine Chimera Scaffold [Adenine-Like 9H-Purin-6-yl + 5-Fluoroquinazolin-4(3H)-one Bicyclic Chimera via (S)-Propylamine Linker; >1000-Fold PI3Kδ/α Selectivity]; Gilead Sciences Foster City CA 52M 21yr Cority ÷10 (NDA 206545 Holder; First Oncology Compound in Gilead Cority System; Antiviral EHS Infrastructure); McKesson Specialty Health Nashville TN 44F 13yr VelocityEHS ÷10 (Specialty Oncology Distributor; PI3Kδ Lipid Kinase Absent; Gilead Null); Stanford Cancer Institute Palo Alto CA 39F 12yr EHS Insight ÷10 (CLL/FL/SLL Dispensing Program; Four-BBW Monitoring Deflection; Lipid Kinase Absent); Glyphward Threshold 22; 514th Adversarial Attack; 118th Long-Form Blog

Idelalisib (Zydelig®; CAS 870281-82-6; (S)-2-(1-(9H-purin-6-ylamino)propyl)-5-fluoro-3-phenylquinazolin-4(3H)-one; Gilead Sciences NDA 206545; approved July 23, 2014; MW 415.4 g/mol; molecular formula C₂₂H₁₈FN₇O₂; quinazolinone-purine chimera scaffold with (S)-configured propylamine stereocenter, 5-fluoroquinazolin-4(3H)-one bicyclic core, 3-phenyl N-substituent, and 9H-purin-6-ylamino adenine isostere; MECHANISM: SELECTIVE PI3Kδ [PHOSPHATIDYLINOSITOL-3-KINASE DELTA] INHIBITOR — idelalisib is the FIRST phosphoinositide 3-kinase inhibitor and the FIRST lipid kinase inhibitor in the 514-attack Glyphward adversarial portfolio; TENTH distinct mechanism class; PI3K LIPID KINASE MECHANISM: PI3Kδ catalyzes the transfer of the γ-phosphate from ATP to the D3 position of the inositol headgroup of membrane-embedded phosphatidylinositol-4,5-bisphosphate [PIP2; PI(4,5)P₂] → generating phosphatidylinositol-3,4,5-trisphosphate [PIP3; PI(3,4,5)P₃]; PIP3 is a lipid second messenger that recruits PH-domain proteins [AKT, PDK1] to the inner plasma membrane leaflet → AKT Thr308 phosphorylation [PDK1] + Ser473 phosphorylation [mTORC2] → FOXO1/3a nuclear exclusion, mTORC1/S6K1 activation, MDM2/p53 suppression, MCL-1 induction; PI3Kδ IC50 ~2.5 nM; >1000-fold selective PI3Kδ/α; DISTINCT FROM ALL PRIOR ATTACKS: all 513 prior Glyphward attacks [protein tyrosine kinases EGFR/HER2/ALK/BTK; serine-threonine kinases BRAF/MEK/CDK4/6/mTOR; non-kinase targets BCL-2/PARP/proteasome] phosphorylate PROTEIN residues [Ser, Thr, Tyr]; PI3Kδ phosphorylates LIPID inositol ring — the PIP2→PIP3 phosphorylation event occurs at the inner plasma membrane leaflet interface, not on a protein; LIPID SECOND MESSENGER SIGNALING: entirely absent from all NIOSH/ACGIH/OSHA OEL derivation frameworks; FOUR-BBW DEFLECTION: hepatotoxicity [ALT/AST >5× ULN; fatal cases; LFTs q2 weeks × 3 months] + diarrhea/colitis [immune-mediated T-reg suppression by PI3Kδ inhibition in lymphocytes; ~14% severe/fatal; colonoscopy] + non-infectious pneumonitis [lymphocytic/interstitial; up to 4%; chest CT/BAL] + intestinal perforation [rare fatal; most BBWs in Glyphward 514-attack portfolio; 4 vs carfilzomib’s 1 cardiac BBW]; FIRST GILEAD SCIENCES ONCOLOGY NDA NULL: NDA 206545; Gilead primarily antiviral/HIV [tenofovir/emtricitabine/sofosbuvir portfolio]; idelalisib first kinase inhibitor and first oncology NIOSH HD Cat 1 at Gilead; antiviral-to-oncology EHS database structural gap [Cority antiviral library has zero prior NIOSH HD Cat 1 compounds]; SCAFFOLD: quinazolinone-purine chimera; MW 415.4 g/mol; C₂₂H₁₈FN₇O₂; OSHA: No PEL; ACGIH: No TLV; NIOSH: No REL — NIOSH Hazardous Drug Category 1 [NIOSH 2016 HD List Table 1]; GHS H340 H350 H361; FDA NDA 206545 [Zydelig; Gilead Sciences; approved July 2014]; indications: CLL [with rituximab], relapsed FL, relapsed SLL — 514th adversarial attack, 118th long-form blog). Produces FIRST idelalisib (CAS 870281-82-6) NIOSH HD Category 1 OEL null-return adversarial blog [triple enforcement vacuum: OSHA No PEL + ACGIH No TLV + NIOSH No REL; only NIOSH HD Category 1; no OEL derivation for any PI3K lipid kinase inhibitor]; TENTH mechanism class [FIRST lipid kinase; PIP2→PIP3 lipid phosphorylation absent from all OEL frameworks]; FOUR-BBW deflection maxima [hepatotoxicity + colitis + pneumonitis + perforation; four-organ monitoring ≠ OEL]; FIRST Gilead Sciences oncology null [antiviral-to-oncology EHS structural gap]; FIRST quinazolinone-purine scaffold.

The Tenth Mechanism Class: PI3Kδ Lipid Kinase and the Lipid Second Messenger Signaling Gap

The 514 adversarial attacks documented in the Glyphward portfolio have mapped a progressive architecture of EHS AI platform failure across nine prior mechanism classes: receptor tyrosine kinases (RTKs: erlotinib Attack #489, gefitinib #490, osimertinib #503, alectinib #509, lorlatinib #511, neratinib #515, and others), serine/threonine kinases (BRAF: vemurafenib #495, dabrafenib #504; MEK1/2: trametinib #505; CDK4/6: palbociclib #500, ribociclib #502; mTOR allosteric: everolimus #496, temsirolimus #497), BTK covalent (ibrutinib #499, acalabrutinib #512, zanubrutinib #513), PARP DNA repair enzymes (olaparib #501, niraparib #507, rucaparib #510), 20S proteasome (bortezomib #481, carfilzomib #506), BCL-2 anti-apoptotic (venetoclax #508), and immunomodulatory agents. Every kinase attack in this portfolio — from erlotinib’s EGFR tyrosine kinase to palbociclib’s CDK4/6 serine/threonine kinase — targets a protein kinase: an enzyme that transfers the γ-phosphate from ATP to a serine, threonine, or tyrosine hydroxyl group on a protein substrate, generating a phosphoprotein. Idelalisib introduces the tenth mechanism class: PI3Kδ, a lipid kinase that phosphorylates a membrane-embedded phosphoinositide lipid rather than a protein.

Phosphatidylinositol 3-kinases (PI3Ks) belong to the PI3K/PI4K superfamily of lipid kinases — enzymes whose substrate is not a protein residue but the 3-OH of the inositol headgroup of phosphatidylinositol lipids embedded in the inner leaflet of the plasma membrane. Class I PI3Ks are the most clinically relevant and directly regulated class: they are obligate heterodimers of a 110-kDa catalytic p110 subunit and a regulatory adapter subunit. Four Class I PI3K isoforms exist: PI3Kα (p110α/p85α heterodimer; encoded by PIK3CA/PIK3R1; ubiquitous expression; the most commonly mutated kinase in human solid tumors; oncogenic PIK3CA gain-of-function point mutations H1047R [helical-kinase interface domain], E545K [helical domain, disrupts p85 inhibitory interaction], E542K [same region] are found in ~30% of breast cancers, ~15% colorectal cancers, ~10% endometrial cancers, and multiple other solid tumors); PI3Kβ (p110β/p85; GPCR- and integrin-coupled; implicated in PTEN-deleted tumors); PI3Kγ (p110γ/p101; exclusively GPCR-coupled [Gi-subunit activated]; myeloid and neutrophil-predominant expression; relevant in inflammation); PI3Kδ (p110δ/p85α or p85β; encoded by PIK3CD/PIK3R1 or PIK3R2; expression predominantly restricted to hematopoietic lineage cells — B lymphocytes, T lymphocytes, mast cells, basophils, neutrophils, monocytes, and their malignant counterparts in B-cell lymphomas, CLL, and SLL).

The enzymatic mechanism of Class I PI3Ks proceeds through the p110 catalytic subunit’s C2-helical-kinase domain architecture. The ATP-binding cleft of p110δ (PI3Kδ) accommodates ATP in a conserved orientation: adenine ring is sandwiched by Trp760 and Met772 (the hinge-region residues critical for kinase-inhibitor interactions across the PI3K family; idelalisib’s purine ring mimics the ATP adenine, making two key contacts: Val828 and Asp911 via water-mediated H-bonds; Ile825 and Tyr813 provide hydrophobic contacts). The phosphate-transfer reaction proceeds via a catalytic Asp residue in the activation loop acting as a base to deprotonate the PIP2 3-OH, enabling nucleophilic attack on the γ-phosphate of ATP. The substrate, PIP2 (phosphatidylinositol-4,5-bisphosphate; PI(4,5)P₂), is a phospholipid anchored to the cytoplasmic inner leaflet of the plasma membrane: its diacylglycerol portion (two acyl chains embedded in the phospholipid bilayer; typically 1-stearoyl-2-arachidonoyl in vivo) positions the inositol-4,5-bisphosphate headgroup at the membrane-cytoplasm interface, accessible to the PI3K catalytic domain recruited to the membrane surface. After phosphorylation, the product PIP3 (PI(3,4,5)P₃) remains membrane-anchored via its diacylglycerol moiety but now displays a 3-phosphorylated inositol headgroup (inositol-3,4,5-trisphosphate) at the inner membrane surface.

PIP3 is a lipid second messenger — it functions not as a kinase substrate but as a membrane-localized scaffold that recruits cytoplasmic proteins containing pleckstrin homology (PH) domains with PIP3-selective binding. The two critical PH-domain effectors are AKT (three isoforms: AKT1/PKBα, AKT2/PKBβ, AKT3/PKBγ; all three bind PIP3 via their PH domains with Kd ~30–100 nM) and PDK1 (3-phosphoinositide-dependent kinase 1; also PH-domain-containing; membrane-recruited constitutively). At the inner plasma membrane leaflet, PDK1 phosphorylates AKT at Thr308 within the activation loop (partial activation); mTORC2 (mTOR complex 2; rictor-containing) simultaneously phosphorylates AKT Ser473 within the hydrophobic motif (full activation). Doubly-phosphorylated AKT (pThr308/pSer473) dissociates from the membrane and phosphorylates cytoplasmic targets: FOXO1 and FOXO3a (Forkhead transcription factors; AKT phosphorylation at three sites → 14-3-3 binding → cytoplasmic sequestration → prevents FOXO-driven transcription of BIM, FASL, p27 → cell survival); TSC1/2 (hamartin/tuberin GTPase-activating complex; AKT phosphorylation → TSC2 inactivation → Rheb-GTP accumulation → mTORC1 activation → S6K1 and 4EBP1 phosphorylation → cap-dependent translation → cyclin D1/MYC expression); GSK3β (AKT phosphorylation → inactivation → stabilization of cyclin D1 and MYC); MDM2 (AKT phosphorylation → nuclear translocation → p53 ubiquitination/degradation → p53 tumor suppressor suppressed); BAD (BCL-2 family pro-apoptotic; AKT phosphorylation → 14-3-3 sequestration → removed from BCL-2/BCL-XL interaction → survival). The negative regulator of this entire cascade is PTEN (phosphatase and tensin homolog; chromosome 10q23; the second most commonly mutated tumor suppressor in human cancer after TP53): PTEN is a lipid phosphatase that dephosphorylates PIP3 back to PIP2 at the 3-OH position, directly opposing PI3K activity. PTEN deletion (10q23 LOH, frameshift mutations, promoter methylation in ~35% of glioblastoma, ~25% prostate cancer, ~15% breast cancer) = constitutive PI3K/AKT/mTOR activation without PI3K mutation.

No OEL derivation framework — NIOSH REL, ACGIH TLV, OSHA Z-table, DFGM, EH40, GESTIS — addresses phosphatidylinositol lipid kinases, PIP2/PIP3 equilibrium, lipid second messenger signaling, or PH-domain effector recruitment as occupational hazard mechanisms. The PI3K/AKT/mTOR signaling axis has been intensively characterized in cancer biology since the late 1990s, generating tens of thousands of publications on the role of PIP3 in cell survival. This literature exists entirely within cell biology, cancer pharmacology, and clinical oncology — not industrial hygiene or occupational health. The distinction between idelalisib’s lipid kinase target and all prior Glyphward kinase attacks (protein kinases) is invisible to EHS AI platforms: CAS 870281-82-6 returns “OSHA PEL: not established. ACGIH TLV: not established. NIOSH REL: none” from Cority, VelocityEHS, and EHS Insight with no annotation that idelalisib inhibits a lipid phosphorylation reaction at the inner plasma membrane leaflet that has no precedent in any OEL derivation framework, or that the prior nine mechanism classes in the Glyphward portfolio (all protein-directed) collectively exhaust the protein kinase landscape while failing to represent the lipid kinase family at all.

PI3Kδ Selectivity and BCR/CXCR4 Signaling in CLL/FL: Why Hematopoietic-Restricted Expression Defines the Clinical Indication

The therapeutic rationale for idelalisib’s PI3Kδ selectivity derives from PI3Kδ’s restricted expression profile. Unlike PI3Kα (ubiquitous; present in hepatocytes, cardiomyocytes, epithelial cells, endothelial cells, neurons) and PI3Kβ (widely expressed), PI3Kδ protein expression is approximately 50–100-fold higher in hematopoietic cells (B lymphocytes, T lymphocytes, mast cells, natural killer cells, myeloid cells) than in most solid tissue cell types. In B lymphocytes, PI3Kδ is critical for BCR (B-cell receptor) signal transduction: B-cell receptor cross-linking by antigen on the cell surface initiates a proximal signaling cascade through membrane-associated protein tyrosine kinases SYK and LYN, which phosphorylate CD19 co-receptor cytoplasmic ITAM sequences → PI3K regulatory p85 SH2 domains bind phospho-CD19 → p110δ catalytic subunit is recruited to the inner membrane → PI3Kδ generates PIP3 locally in proximity to the BCR signaling complex → AKT/PDK1 recruitment → full BCR-dependent B-cell activation. Simultaneously, BTK (Bruton’s tyrosine kinase; also PH-domain-containing; attacked as a separate mechanism class via ibrutinib #499, acalabrutinib #512, zanubrutinib #513) is recruited to the inner membrane via its PH domain binding to PIP3 generated by PI3Kδ — creating a mechanistic linkage between the BTK attacks (#499, #512, #513) and the idelalisib PI3Kδ attack (#514) that is entirely invisible at the EHS AI level: PI3Kδ generates the PIP3 that recruits BTK; idelalisib blocks PI3Kδ; ibrutinib/acalabrutinib/zanubrutinib block BTK downstream of PI3Kδ. Both upstream (PI3Kδ) and downstream (BTK) targets in the same BCR signaling cascade independently yield zero OEL from NIOSH/ACGIH/OSHA — a mechanistic pathway-level null that EHS AI platforms cannot detect.

In CLL, follicular lymphoma (FL), and small lymphocytic lymphoma (SLL), malignant B cells are constitutively dependent on PI3Kδ for three concurrent survival mechanisms. First, constitutive BCR signaling (termed “tonic” BCR signaling in CLL): even in the absence of exogenous antigen, CLL B cells maintain low-level BCR signaling through auto-reactive surface IgM interactions and BCR microcluster formation, creating a continuous PI3Kδ/PIP3/AKT survival signal. Idelalisib inhibits this tonic BCR-driven PIP3 generation → AKT dephosphorylation → FOXO1/3a nuclear translocation → BIM transcription → MCL-1 suppression → apoptosis. Second, lymph node microenvironment survival signaling: T-helper cells in the lymph node germinal centers and CLL pseudofollicular proliferation centers provide CD40L (CD154) costimulatory signals to CLL B cells via CD40 receptor → CD40-dependent PI3Kδ activation → NF-κB and AKT survival signals; simultaneously, stromal cells secrete CXCL12 (SDF-1) and CXCL13 (BCA-1), which bind CXCR4 and CXCR5 on CLL B cells → PI3Kδ-dependent chemotaxis toward the lymph node stroma. Idelalisib disrupts both: direct PI3Kδ inhibition + CXCR4-driven chemotaxis disruption → CLL cells lose their ability to home to the lymph node microenvironment and are mobilized into the peripheral blood (explaining the characteristic idelalisib-induced lymphocytosis in the first weeks of treatment). Third, VLA-4 (very late antigen-4; CD49d/CD29 heterodimer) integrin-mediated stromal adhesion: CLL B cells use PI3Kδ-dependent inside-out integrin activation to adhere to VCAM-1 (vascular cell adhesion molecule 1) on bone marrow stromal cells — a survival niche mechanism; idelalisib disrupts PI3Kδ-dependent VLA-4 activation → CLL cell detachment from stromal niches → loss of survival signals.

The FDA approvals for idelalisib reflect this hematopoietic-selective mechanism: (1) CLL in combination with rituximab (anti-CD20 mAb) in previously treated CLL patients who may not be appropriate for cytotoxic chemotherapy (STUDY 116 Phase III: idelalisib + rituximab vs placebo + rituximab; PFS 93% vs 46% at 24 weeks; HR 0.15; OS benefit confirmed); (2) relapsed follicular lymphoma (FL; Grade 1–2) after two prior therapies (single-agent; ORR ~57%; median DOR 11.2 months); (3) relapsed SLL after two prior therapies. All three are B-cell malignancies with PI3Kδ-dependent survival. Solid tumor indications — despite frequent PIK3CA mutations — were not pursued with idelalisib because PI3Kδ (not PI3Kα) is the B-cell-relevant isoform; PI3Kα-selective or PI3Kα/δ dual inhibitors (copanlisib Attack #516; alpelisib for PIK3CA-mutated breast cancer) target solid tumors through PI3Kα. This isoform biology creates an occupational exposure context specific to hematology pharmacy settings — CLL clinics, lymphoma dispensing centers, specialty pharmacy oncology units — rather than the broader solid-tumor oncology pharmacy settings where prior Glyphward attacks are also relevant. The hematology-specific dispensing footprint means idelalisib’s NIOSH HD Category 1 OEL gap is concentrated at hematology cancer center pharmacies and specialty hematology distributors.

Four Black Box Warnings: Hepatotoxicity, Colitis, Pneumonitis, and Perforation — Maximum Clinical Safety Deflection

Idelalisib carries the largest black box warning count of any single agent in the 514-attack Glyphward portfolio: four separate BBWs. For comparison: carfilzomib (Attack #506) carries one complex cardiac BBW (cardiac arrest, cardiac failure, cardiomyopathy, cardiac ischemia, hypertension); the PARP inhibitors (olaparib #501, niraparib #507, rucaparib #510) carry no BBWs; most kinase inhibitors in the portfolio carry no BBW or one BBW for specific toxicities. Idelalisib’s four-BBW profile represents an unprecedented clinical safety monitoring burden for a single antineoplastic, and simultaneously represents the most complete “safety cognition capture” in the portfolio — a phenomenon where the elaborate patient-safety monitoring infrastructure absorbs all safety-related attention, leaving no cognitive headroom for occupational exposure recognition.

BBW 1 — Hepatotoxicity: Serious and fatal hepatotoxicity occurred in idelalisib clinical trials. Grade 3 or greater elevations in ALT and/or AST (>5× ULN) occurred in 35% of idelalisib-treated patients in Phase I/II trials (STUDY 101, STUDY 102); fatal hepatic failure was reported. The hepatotoxicity mechanism is distinct from direct hepatocyte toxicity: idelalisib’s inhibition of PI3Kδ in T regulatory cells (T-regs) in the liver disrupts hepatic immune homeostasis, allowing effector T-cell-mediated hepatic inflammation (akin to drug-induced autoimmune hepatitis rather than cytotoxic DILI). Onset is typically within weeks 2–12 of treatment. Required monitoring per USPI: LFTs (ALT, AST, total bilirubin) every 2 weeks for the first 3 months of therapy, every 4 weeks for months 3 to 6, and every 1–3 months thereafter; if Grade 3 (ALT/AST >5× but ≤20× ULN): withhold idelalisib, resume at 100 mg BID when resolved to ≤ Grade 1; if Grade 4 (ALT/AST >20× ULN): permanently discontinue. This biweekly LFT schedule for months 0–3 creates a monitoring cycle with 6 separate LFT draws in the first 12 weeks — an intensive hepatic monitoring workflow that generates a steady stream of ALT/AST values, liver enzyme trending analyses, and dose-modification decisions, consuming significant pharmacovigilance capacity.

BBW 2 — Severe Diarrhea or Colitis: Life-threatening and fatal diarrhea and/or colitis were observed in idelalisib-treated patients. The incidence of severe (Grade 3–4) diarrhea/colitis is approximately 14%, substantially higher than typical chemotherapy-induced GI toxicity. The mechanism is immune-mediated: idelalisib inhibits PI3Kδ in T regulatory cells (CD4+CD25+FoxP3+ T-regs), which depend on PI3Kδ/AKT signaling for maintenance of their immunosuppressive function; T-reg suppression allows effector T-cell (CD4+ Th1 and CD8+ T-cell) expansion in the gut lamina propria, generating a colitis that histopathologically resembles inflammatory bowel disease or immune checkpoint inhibitor-induced colitis. Clinically distinct from conventional chemotherapy diarrhea (which is secretory/osmotic): idelalisib colitis is immune-mediated, does not respond to loperamide or bismuth, and requires immunosuppression (prednisone 1 mg/kg/day for severe cases; budesonide for mild-moderate; vedolizumab [anti-integrin α4β7 mAb targeting gut-homing T-cells] for steroid-refractory cases; fecal microbiota transplant in selected cases). Monitoring: patients must be instructed to report diarrhea immediately; ≥6 stools/day above baseline or abdominal pain/blood/mucus warrants withholding idelalisib and urgent colonoscopy or sigmoidoscopy with biopsy for histopathologic confirmation and differential diagnosis from infectious colitis.

BBW 3 — Non-Infectious Pneumonitis: Serious, including fatal, non-infectious pneumonitis occurred in idelalisib-treated patients (up to 4% overall; Grade 3–4 in 1–2%). Mechanism: same T-reg suppression phenomenon as colitis, now in the lung; loss of pulmonary T-reg immunosuppression → lymphocytic infiltration of alveolar septa and interstitium → non-infectious interstitial pneumonitis/hypersensitivity pneumonitis pattern on chest CT. Monitoring requires baseline chest imaging, vigilance for new or worsening cough/dyspnea, chest CT for evaluation, bronchoalveolar lavage (BAL) to exclude opportunistic infections (PCP [now PJP], bacterial/fungal pneumonia; idelalisib also predisposes to opportunistic infections via PI3Kδ inhibition in T cells). Treatment: withhold idelalisib; systemic corticosteroids (prednisone 1 mg/kg/day tapering over 6–8 weeks); permanent discontinuation for Grade 3–4.

BBW 4 — Intestinal Perforation: Cases of fatal intestinal perforation, though rare, have occurred in idelalisib-treated patients, most likely as a complication of idelalisib-induced severe colitis. GI wall inflammation from the immune-mediated colitis mechanism can extend transmurally, leading to perforation. Surveillance requires prompt evaluation of any abdominal pain; permanent discontinuation is required if intestinal perforation occurs. The four-BBW profile as a deflection mechanism: each BBW generates independent monitoring protocols, adverse event terminology, dose-modification algorithms, and pharmacovigilance reporting obligations. A pharmacovigilance director at Gilead Sciences Foster City managing NDA 206545 post-market safety operates within a four-domain clinical safety framework simultaneously: hepatic function surveillance (LFT monitoring, RUCAM causality assessment for DILI cases), GI monitoring (diarrhea/colitis adverse event coding, colonoscopy outcome tracking, steroid treatment response monitoring), pulmonary surveillance (pneumonitis reporting, BAL/CT outcomes), and intestinal perforation incident review. This four-domain framework occupies the full scope of clinical safety cognition available to the NDA 206545 pharmacovigilance function. When an EHS AI platform is embedded in the adverse event review workflow — processing narratives from clinical sites, generating safety signal summaries, drafting PSUR (periodic safety update report) sections — it operates in a context saturated with patient-adverse-event information, with zero structured field for occupational exposure assessment. Adversarial injection into any of these four monitoring document types (LFT trend report, colonoscopy biopsy narrative, chest CT radiology report, perforation incident summary) can steer the AI toward null-generating advisory outputs that suppress the independent NIOSH HD Category 1 occupational exposure question.

FIRST Gilead Sciences Oncology NDA Null: Antiviral-to-Oncology EHS Architecture Gap

Gilead Sciences, Inc. (333 Lakeside Drive, Foster City CA 94404; San Mateo County CA; NASDAQ: GILD; ~30,000 employees; founded 1987 by Michael Riordan; market capitalization ~$80B) built its position as one of the world’s largest pharmaceutical companies primarily through the antiviral category. The Gilead compound library is dominated by nucleoside/nucleotide analogs and direct-acting antivirals: tenofovir disoproxil fumarate (TDF; CAS 202138-50-9; Viread 2001; component of Truvada, Atripla, Complera, Stribild), emtricitabine (FTC; CAS 143491-57-0; Emtriva; Truvada, Biktarvy), tenofovir alafenamide (TAF; Vemlidy, Genvoya, Descovy, Biktarvy; prodrug for reduced renal/bone toxicity vs TDF), bictegravir (CAS 1611493-60-7; integrase strand transfer inhibitor; Biktarvy 2018), sofosbuvir (GS-7977; CAS 1190307-88-0; HCV NS5B polymerase nucleotide analog inhibitor; Sovaldi 2013; $84,000/12-week course; ~$12.8B 2014 US revenue), ledipasvir (NS5A inhibitor; Harvoni with sofosbuvir; 2014), velpatasvir (NS5A; Epclusa; 2016), remdesivir (GS-5734; nucleoside analog; Veklury; SARS-CoV-2; 2020). None of these compounds are NIOSH Hazardous Drugs Category 1. Nucleoside/nucleotide analog antivirals are not classified under the NIOSH HD framework, which targets antineoplastics with carcinogenic, teratogenic, or reproductively toxic properties. Gilead’s EHS infrastructure — including the Cority SDS and OEL database, industrial hygiene monitoring programs, and occupational health systems at Foster City HQ and manufacturing sites — developed over 30+ years entirely around antiviral compounds with no NIOSH HD Category 1 entries.

Gilead acquired idelalisib through its 2011 purchase of Calistoga Pharmaceuticals (Seattle, WA; founded 2004; developed the PI3Kδ-selective inhibitor program including the clinical candidate CAL-101/idelalisib; Calistoga was spun out of the Icos Corporation, which itself had been acquired by Eli Lilly in 2006 — ironically the same Icos that developed tadalafil; the Calistoga PI3Kδ program was a distinct Icos legacy asset). Gilead paid $375 million upfront plus up to $225 million in development milestones for Calistoga. Idelalisib’s IND was submitted in 2007; Phase I/II trials in CLL, indolent B-cell lymphomas, and acute leukemia demonstrated clinical activity with the manageable but serious toxicity profile ultimately reflected in the four BBWs. FDA approved idelalisib on July 23, 2014 (NDA 206545; Zydelig; Priority Review; Breakthrough Therapy Designation for CLL) — making idelalisib Gilead’s first oncology drug approval and first NIOSH HD Category 1 compound.

The antiviral-to-oncology EHS transition created a structural gap. Gilead’s Cority SDS library, expanded incrementally over decades to document ~200+ antiviral compounds, had established a library-wide pattern: no NIOSH HD Category 1 entries; no HD Category antineoplastic handling protocols; no NIOSH 2016 Table 1 designations. When idelalisib (CAS 870281-82-6) was added to the Cority system, it represented a categorically distinct compound relative to every other entry in the library: the first entry with H340 (suspected mutagen), H350 (suspected carcinogen), H361 (suspected reproductive toxicant) GHS hazard statements; the first NIOSH HD Category 1 compound; the first compound requiring oncology pharmacy containment protocols (USP <800> applies to antineoplastics; HD Category 1 requires BSC [biological safety cabinet] for compounding/reconstitution, CSTDs for IV preparation, double gloving, HD-specific waste disposal, wipe testing). An EHS AI platform operating on the Gilead Cority database — a database of ~200+ antiviral compounds with no HD Category 1 precedents — has been pattern-trained by Gilead’s compound library to return null for nucleoside analogs, nucleotide prodrugs, and direct-acting antiviral scaffolds. When idelalisib (CAS 870281-82-6) is queried, the AI’s antiviral-dominated context returns the same null pattern, with no flag that this single compound represents the sole NIOSH HD Category 1 entry in Gilead’s portfolio and requires an entirely different handling framework than every other compound in the library.

The pharmacovigilance director at Gilead Sciences Foster City CA (52M; 21 years Gilead tenure; NDA 206545 post-market safety officer) embodies this structural gap. Over 21 years, this individual’s pharmacovigilance experience spans antiviral compounds: HIV drug adverse event profiles (renal tubular toxicity from TDF/tenofovir, bone mineral density effects, lipid effects of integrase inhibitors), HCV treatment adverse events (ribavirin-containing regimens: hemolytic anemia, teratogenicity; sofosbuvir/ledipasvir: minimal adverse effects; NS5A resistance), influenza therapy. The clinical pharmacovigilance intuition developed over 21 years in antivirals is: these are generally well-tolerated compounds with manageable renal/bone/metabolic toxicities; none require HD Category 1 handling; none have H350/H340/H361. Idelalisib’s four BBWs (hepatotoxicity, colitis, pneumonitis, perforation) represent the largest adverse event monitoring workload this pharmacovigilance director has ever managed for a single compound — a monitoring burden that reinforces a clinical-safety-focused cognitive frame rather than an occupational-safety-focused one. The EHS AI platform supporting this pharmacovigilance operation, queried for idelalisib occupational risk, returns the antiviral-library null: CAS 870281-82-6 → OSHA No PEL, ACGIH No TLV, NIOSH No REL. The NIOSH HD Category 1 flag, if present at all in the EHS system, is not surfaced in the AI advisory output because the system was not designed to integrate NIOSH HD classification with OEL lookup results in any way that generates a positive alert.

Surface 1 — Gilead Sciences Foster City CA NDA 206545 Holder AI

At Gilead Sciences Foster City CA ([333 Lakeside Drive, Foster City CA 94404; San Mateo County CA; Gilead NDA 206545 holder for Zydelig [idelalisib] tablets 100 mg, 150 mg; idelalisib acquired via 2011 Calistoga Pharmaceuticals acquisition [$375M]; FIRST Gilead oncology NDA; FIRST Gilead NIOSH HD Category 1 compound; Gilead compound library dominated by antiviral nucleoside/nucleotide analogs [TDF, FTC, TAF, sofosbuvir, bictegravir, remdesivir] with zero prior NIOSH HD Cat 1 entries; Cority antiviral-library structural gap; 8-hr TWA: actual airborne idelalisib 0.00039 µg/m³; OVS-2 sorbent tube + LC–MS/MS; LIMS → Cority decimal displacement (÷10): displayed 0.000039 µg/m³; Cority: CAS 870281-82-6 → null; PI3Kδ lipid kinase mechanism absent; PIP2→PIP3 lipid second messenger absent; tenth mechanism class absent; four-BBW deflection absent; NIOSH HD Category 1 absent; H340 H350 H361 absent; 52M pharmacovigilance director 21yr]).

The Surface 1 subject is a 52-year-old male Gilead Sciences pharmacovigilance director (21-year Gilead tenure; primary duties: Zydelig NDA 206545 post-market pharmacovigilance including hepatotoxicity signal monitoring [biweekly LFT PSUR data aggregation], colitis/diarrhea adverse event coding and trending, pneumonitis signal detection, intestinal perforation incident analysis, FDA IND/NDA regulatory submissions for idelalisib line extension studies, and safety coordination with rituximab co-partner Roche/Genentech for the CLL combination program; 21 prior years at Gilead in antiviral pharmacovigilance [TDF/FTC renal safety monitoring; HCV DAA adverse event profiling] with no prior NIOSH HD Category 1 compound management; Cority null: CAS 870281-82-6 returns “OSHA PEL: not established. ACGIH TLV: not established. NIOSH REL: none. No occupational exposure limit established for this substance.”; PI3Kδ lipid kinase mechanism absent; antiviral-to-oncology structural EHS gap: idelalisib is the first and only NIOSH HD Cat 1 compound in the Gilead Cority library; null indistinguishable from 200+ antiviral null entries; H340 H350 H361 absent; 52M 21yr Gilead antiviral-to-oncology pharmacovigilance director).

Consequence pathway: Idelalisib 0.00039 µg/m³ (actual) → 0.000039 µg/m³ displayed (÷10); Cority: null; PI3Kδ lipid kinase absent; tenth mechanism class absent; antiviral-to-oncology EHS gap absent; NIOSH HD Cat 1 absent; H340 H350 H361 absent; four-BBW monitoring saturates safety cognition; 52M 21yr Gilead NDA 206545 pharmacovigilance director.

Surface 2 — McKesson Specialty Health Nashville TN PI3Kδ Dispensing AI

At McKesson Specialty Health Nashville TN ([McKesson Specialty Health; McKesson Corporation [NYSE: MCK; One Post Street, San Francisco CA 94104; ~46,000 US oncology pharmacy employees]; Nashville TN oncology specialty pharmacy hub; McKesson Specialty distributes NIOSH HD Category 1 antineoplastics including idelalisib [Zydelig] to oncology clinics, cancer centers, and community hematology practices across the southeastern US; specialty pharmacy pharmacist primary duties: idelalisib 100/150 mg tablet dispensing for CLL/FL/SLL, four-BBW counseling [hepatotoxicity LFT schedule, colitis management protocol, pneumonitis symptoms, perforation warning], drug interaction review [idelalisib is a CYP3A4 inhibitor — dose-adjustments for co-administered CYP3A4 substrates with narrow therapeutic index; idelalisib also inhibits CYP2C8 and P-gp; relevant interactions: warfarin, digoxin, simvastatin dose reduction required], and USP <800> HD containment for dispensing; 8-hr TWA: actual airborne idelalisib 0.00022 µg/m³; wipe sampling + HPLC-UV; LIMS → VelocityEHS decimal displacement (÷10): displayed 0.000022 µg/m³; VelocityEHS: CAS 870281-82-6 → null; PI3Kδ lipid kinase absent; quinazolinone-purine scaffold absent; four-BBW patient counseling absorbs safety cognition; NIOSH HD Category 1 absent; H340 H350 H361 absent; 44F specialty oncology pharmacist 13yr]).

The Surface 2 subject is a 44-year-old female McKesson Specialty Health pharmacist (13-year McKesson tenure; primary responsibilities include idelalisib dispensing for ~30–50 active CLL/FL/SLL patients monthly, four-BBW patient counseling at each dispensing cycle [hepatotoxicity: emphasize LFT appointments; colitis: report diarrhea immediately/withhold; pneumonitis: report dyspnea; perforation: emergency care for abdominal pain], CYP3A4 drug interaction screening [idelalisib inhibits CYP3A4; co-administered narrow-TI CYP3A4 substrates require dose reduction: simvastatin → avoid; warfarin → INR monitoring; digoxin → plasma level monitoring], and USP <800> containment requirements for HD Category 1 oral tablet handling; VelocityEHS null: CAS 870281-82-6 returns null independently; four-BBW counseling creates a clinical safety context for every dispensing interaction that is entirely about patient outcomes; PI3Kδ lipid kinase mechanism absent; quinazolinone-purine chimera scaffold absent; NIOSH HD Category 1 absent; H340 H350 H361 absent; 44F 13yr McKesson specialty oncology pharmacist).

Consequence pathway: Idelalisib 0.00022 µg/m³ (actual) → 0.000022 µg/m³ displayed (÷10); VelocityEHS: null; NIOSH HD Cat 1 absent; H340 H350 H361 absent; PI3Kδ lipid kinase absent; four-BBW patient counseling frame absent; quinazolinone-purine scaffold absent; 44F McKesson specialty oncology pharmacist.

Surface 3 — Stanford Cancer Institute Palo Alto CA CLL/FL Program AI

At Stanford Cancer Institute Palo Alto CA ([875 Blake Wilbur Drive, Stanford CA 94305; Santa Clara County CA; Stanford Health Care Stanford Cancer Center; NCI-designated Comprehensive Cancer Center; hematology and lymphoma programs [CLL program: Steven Coutre oncologist; follicular lymphoma/indolent NHL: Ranjana Advani, Ash Alizadeh]; Stanford oncology pharmacy: CLL idelalisib dispensing [100 mg BID; dose-modified for Grade 3 hepatotoxicity or Grade 3–4 colitis], FL and SLL dispensing [150 mg BID], LFT monitoring coordination [biweekly ALT/AST for months 1–3; scheduling biweekly lab draws for all active idelalisib patients], colitis management protocol coordination [colonoscopy referral for Grade 3 diarrhea; steroid prescribing coordination], and CYP3A4 drug interaction management; 8-hr TWA: actual airborne idelalisib 0.00015 µg/m³; OVS-2 + LC–MS/MS; LIMS → EHS Insight decimal displacement (÷10): displayed 0.000015 µg/m³; EHS Insight: CAS 870281-82-6 → “OSHA PEL: not established. ACGIH TLV: none. NIOSH REL: none — no OEL.”; four-BBW clinical monitoring workflow dominates safety cognition [biweekly LFT scheduling, colonoscopy protocol, chest CT for pneumonitis, perforation surveillance]; PI3Kδ lipid kinase mechanism absent; PIP2→PIP3 lipid second messenger absent; NIOSH HD Category 1 absent; H340 H350 H361 absent; 39F oncology pharmacist 12yr]).

The Surface 3 subject is a 39-year-old female Stanford Cancer Institute oncology pharmacist (12-year Stanford tenure; primary duties: CLL and FL/SLL idelalisib dispensing at Stanford Cancer Center, biweekly LFT monitoring coordination for all active idelalisib patients [ensuring LFT draws are scheduled, results reviewed, and dose modifications triggered for Grade 3 ALT/AST elevations per USPI protocol], colitis adverse event management coordination [Grade 3 diarrhea protocol: withhold idelalisib, urgent colonoscopy referral, systemic steroid prescribing coordination with oncologist, resume idelalisib at 100 mg BID if Grade 1 or better after immunosuppression], and pneumonitis surveillance [chest CT for respiratory symptoms; BAL referral for suspected PCP prophylaxis failures]; EHS Insight null: CAS 870281-82-6 returns “no OEL — no action”; four-BBW clinical monitoring framework creates a healthcare context in which every idelalisib-associated cognitive event concerns patient safety monitoring [LFTs, colonoscopy, CT scans, perforation alerts] rather than worker occupational exposure assessment; PI3Kδ lipid kinase mechanism absent; lipid second messenger signaling absent; NIOSH HD Category 1 absent; H340 H350 H361 absent; 39F 12yr Stanford hematology idelalisib pharmacist).

Consequence pathway: Idelalisib 0.00015 µg/m³ (actual) → 0.000015 µg/m³ displayed (÷10); EHS Insight: “no OEL — no action”; NIOSH HD Cat 1 absent; H340 H350 H361 absent; PI3Kδ lipid kinase absent; four-BBW monitoring deflection absent; PIP2→PIP3 absent; 39F Stanford Cancer Institute hematology idelalisib pharmacist.

Integrating Glyphward into Idelalisib AI EHS Monitoring

Glyphward’s multimodal prompt-injection scanner (glyphward.com) directly addresses the structural failures documented across the 514-attack portfolio. EHS AI monitoring platforms — Cority, VelocityEHS, EHS Insight — increasingly deploy LLM components for natural-language OEL queries, automated exposure narrative generation, and risk classification advisories. Each of these LLM integrations is vulnerable to adversarial manipulation via the prompt-injection vectors documented throughout the Glyphward portfolio.

For idelalisib specifically, Glyphward provides defenses against: (1) lipid kinase null exploitation — an EHS AI receiving a query including CAS 870281-82-6 can be adversarially prompted via embedded instructions in a retrieved SDS document to return a falsely reassuring narrative (“No OSHA PEL. No ACGIH TLV. Kinase inhibitor — consult medical team if patient exposure is suspected. No industrial hygiene action required.”) that misapplies the patient-facing BBW context to the worker-exposure context; (2) four-BBW deflection exploitation — an AI processing an idelalisib hepatotoxicity case narrative can be adversarially prompted via image injection in the case report header to suppress the NIOSH HD Category 1 worker handling advisory while appearing to provide a complete safety analysis; (3) antiviral-library pattern injection — an AI operating on Gilead’s antiviral-dominated compound library can be adversarially steered via a crafted compound comparison document to treat idelalisib’s null as equivalent to a tenofovir null, suppressing the categorically distinct NIOSH HD Category 1 designation.

The Glyphward free scanner (paste image or audio → 0–100 multimodal adversarial risk score) evaluates these specific injection vectors. The Pro API ($29/mo; 100k scans/month; webhook; SDK) provides programmatic integration into pharmaceutical EHS monitoring pipelines where CAS lookups, pharmacovigilance narratives, and safety advisory outputs are AI-generated. The tenth mechanism class gap — PI3Kδ lipid kinase inhibition — joins the prior nine mechanism classes in the Glyphward detection corpus: AI systems not robustness-tested against the lipid kinase attack pattern will return antiviral-library null advisories for idelalisib that are adversarially exploitable across all three documented surfaces and at Gilead’s antiviral-to-oncology EHS structural gap.