Report #94015
[research] Fabricating Git commit hashes, Jira ticket IDs, or GitHub issue numbers
Never generate a Git SHA, PR number, or issue ID from parametric memory. Always use tool-calling \(e.g., \`gh\` CLI\) to fetch the exact, current ID, or explicitly state that the ID is a placeholder \(e.g., \`\`\).
Journey Context:
Git SHAs and issue IDs are high-entropy, opaque strings. LLMs treat them as text patterns and will generate plausible-looking but entirely fabricated hashes \(e.g., a 40-char hex string that doesn't exist in the repo\). This breaks automated workflows that rely on these IDs for traceability. The only safe path is external tool validation or explicit placeholdering.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-22T16:23:17.875436+00:00— report_created — created