Risk · R-139 · Generative Content & Information Integrity
Ungrounded or misattributed answers
A retrieval-based system cites a source that does not support its answer, or presents content the model generated as though it came from a source.
- Severity
- Medium
- Audience
- Heads-of · Practitioner
- Frameworks
- AML.T0067 · Confabulation · LLM07
- Responsible AI domain
- Lifecycle stage
- Reviewed
- 2026-11-11
What it is
Retrieval is meant to keep a model honest: it answers from documents and shows which ones. The promise fails in several ways. The model may draw on its own memory and attach a retrieved document as decoration. It may cite the right document for a claim the document does not make. It may blend two sources into a statement neither contains. The user sees a citation and reasonably assumes the claim has been checked. A wrong answer with a reference is trusted more than a wrong answer without one. The general problem is covered in misinformation and confabulation.
How it happens
- Retrieval returns nothing relevant and the model answers regardless.
- The model is not constrained to the retrieved passages.
- Citations are attached at document level, so the supporting passage cannot be checked.
- Chunks are cut in a way that separates a statement from its qualification.
Why it matters
The organisation has told users the answer is sourced. Decisions are made on that footing, and the source is rarely opened. In regulated advice or legal work, a misattributed authority is as damaging as an invented one.
Warning signs
- Nobody has measured how often citations support the claims they accompany.
- The system gives a confident answer when retrieval found nothing.
- Citations point to whole documents, not passages.
- Users report that the linked source does not say what was claimed.
Mitigating controls
Primary controls
- Retrieval grounding and citation Preventive
- Requires every answer to be supported by a retrieved source and cites it. The system answers only from retrieved, approved sources, cites the source for each statement, and declines where the sources do not support an answer.
Supporting controls
- Evaluation suite and regression testing Detective
- Measures attribution accuracy on each change. A maintained set of test cases with expected results is run on every change to model, prompt, data or tools, and the results are compared with the approved baseline.
- Factuality and hallucination verification Detective
- Checks that the cited source says what is claimed. Claims, figures and citations in AI-generated output are checked against a trusted source before the output is relied on for a consequential decision or sent to a customer.
Framework and clause references
| Framework | Clause | Title |
|---|---|---|
| MITRE ATLAS | AML.T0067 | LLM Trusted Output Components Manipulation Manipulation of citations and trusted output components. |
| NIST Generative AI Profile (NIST AI 600-1) | Confabulation | Confabulation Confabulated sources. |
| OWASP Top 10 for LLM Applications | LLM07 | Misinformation Misinformation. |
Sources
- NIST Generative AI Profile NIST · framework
- OWASP Top 10 for LLM Applications OWASP GenAI Security Project · framework
- MITRE ATLAS MITRE · framework
Related terms
How to cite
Axiom Verity (2026). Ungrounded or misattributed answers. Reference Library, R-139. https://axiom-verity.com/risks/ungrounded-or-misattributed-answers. Reviewed 2026-11-11.
Found an error or a better source? Report a correction.