Risk · R-139 · Generative Content & Information Integrity

Ungrounded or misattributed answers

A retrieval-based system cites a source that does not support its answer, or presents content the model generated as though it came from a source.

Severity
Medium
Audience
Heads-of · Practitioner
Frameworks
AML.T0067 · Confabulation · LLM07
Reviewed
2026-11-11

What it is

Retrieval is meant to keep a model honest: it answers from documents and shows which ones. The promise fails in several ways. The model may draw on its own memory and attach a retrieved document as decoration. It may cite the right document for a claim the document does not make. It may blend two sources into a statement neither contains. The user sees a citation and reasonably assumes the claim has been checked. A wrong answer with a reference is trusted more than a wrong answer without one. The general problem is covered in misinformation and confabulation.

How it happens

  • Retrieval returns nothing relevant and the model answers regardless.
  • The model is not constrained to the retrieved passages.
  • Citations are attached at document level, so the supporting passage cannot be checked.
  • Chunks are cut in a way that separates a statement from its qualification.

Why it matters

The organisation has told users the answer is sourced. Decisions are made on that footing, and the source is rarely opened. In regulated advice or legal work, a misattributed authority is as damaging as an invented one.

Warning signs

  • Nobody has measured how often citations support the claims they accompany.
  • The system gives a confident answer when retrieval found nothing.
  • Citations point to whole documents, not passages.
  • Users report that the linked source does not say what was claimed.

Mitigating controls

Primary controls

Retrieval grounding and citation Preventive
Requires every answer to be supported by a retrieved source and cites it. The system answers only from retrieved, approved sources, cites the source for each statement, and declines where the sources do not support an answer.

Supporting controls

Evaluation suite and regression testing Detective
Measures attribution accuracy on each change. A maintained set of test cases with expected results is run on every change to model, prompt, data or tools, and the results are compared with the approved baseline.
Factuality and hallucination verification Detective
Checks that the cited source says what is claimed. Claims, figures and citations in AI-generated output are checked against a trusted source before the output is relied on for a consequential decision or sent to a customer.

Framework and clause references

FrameworkClauseTitle
MITRE ATLASAML.T0067LLM Trusted Output Components Manipulation Manipulation of citations and trusted output components.
NIST Generative AI Profile (NIST AI 600-1)ConfabulationConfabulation Confabulated sources.
OWASP Top 10 for LLM ApplicationsLLM07Misinformation Misinformation.

Sources

NIST Generative AI Profile NIST · framework
OWASP Top 10 for LLM Applications OWASP GenAI Security Project · framework
MITRE ATLAS MITRE · framework

Related terms

How to cite

Axiom Verity (2026). Ungrounded or misattributed answers. Reference Library, R-139. https://axiom-verity.com/risks/ungrounded-or-misattributed-answers. Reviewed 2026-11-11.