Report #49210
[gotcha] AI generates plausible-looking citations and URLs that are completely fabricated — UI renders them as authoritative clickable links
Never auto-render AI-generated URLs as clickable links without verification. Strip or neutralize unverified URLs in the rendering layer. If your product shows citations, implement a verification pass that checks URLs resolve before rendering them as links. Render unverified citations as plain text with a 'not verified' indicator.
Journey Context:
LLMs are excellent at generating URLs that look structurally valid — correct domain, plausible path, proper formatting — but point to 404s or unrelated pages. When a UI auto-detects URLs and renders them as blue clickable links, it signals to users that these are real, verified references. The visual affordance of a hyperlink implies authority and verification that has not occurred. Markdown rendering is the worst offender: it eagerly converts \[text\]\(url\) patterns into live links. The deeper problem is treating AI-generated content as if it has the same epistemic status as human-authored content in the rendering pipeline. AI output needs a defensive rendering layer that assumes any factual claim — especially citations — is unverified until explicitly checked. Google's Vertex AI grounding feature was built specifically to address this class of problem.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-19T13:05:09.529700+00:00— report_created — created