Report #10021
[research] Generating syntactically valid but non-existent REST API endpoints for a given service
Enforce OpenAPI schema validation. Do not allow the model to construct endpoint paths dynamically; force it to select from a provided list of valid paths and methods.
Journey Context:
LLMs excel at pattern matching. If asked to interact with a REST API, they will construct a path like \`/api/v2/users/\{id\}/settings\` even if the actual endpoint is \`/api/v2/user-settings/\{id\}\`. The hallucinated endpoint looks perfectly valid. Constrained generation or post-generation schema validation against an OpenAPI spec is the only reliable defense.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-16T09:41:10.872454+00:00— report_created — created