As of August 2026, Damien Charlotin's AI Hallucination Cases Database tracks 1,954 documented court proceedings involving AI-fabricated citations, up from approximately 200 a year prior. The canonical case is Mata v. Avianca (S.D.N.Y. 2023), where attorneys submitted six fabricated citations complete with invented judicial opinions, fictional quotes, and non-existent internal citations. When opposing counsel challenged them, the attorneys asked ChatGPT to confirm the cases existed. ChatGPT confirmed they were real. Sanctions followed.
The pattern across these 1,954 cases is not that lawyers used AI carelessly. The pattern is structural: the retrieval often worked. A real document was retrieved and provided as context. The output still contained wrong legal authority.
Two preregistered empirical studies from Stanford quantify the gap. "Large Legal Fictions" (Dahl, Magesh et al.; Journal of Legal Analysis, 2024) tested over 800,000 legal questions against random federal court cases: GPT-4 hallucinated on 58% of queries, GPT-3.5 on 69%, Llama 2 on 88%. "Hallucination-Free?" (Magesh, Surani et al.; Journal of Empirical Legal Studies, 2025) is the more consequential study. It is the first preregistered evaluation of commercial RAG-based legal tools specifically marketed as reliable: Lexis+ AI hallucinated on 17% of queries. Westlaw AI-Assisted Research hallucinated on 33%. These are not general-purpose LLMs. These are purpose-built products with full legal data infrastructure, vetted by attorneys, marketed specifically for citation accuracy. They still get the legal assertion wrong in roughly one of every three to six queries.
RAG closes the retrieval gap. It does not touch the verification gap, which in law is the entire problem.
1. The correct document is not the most similar document
A 2025 preprint, "Controlling Authority Retrieval: A Missing Retrieval Objective for Authority-Governed Knowledge" (arXiv:2604.14488), formalizes a critical insight: the controlling legal document is often not the most semantically similar document. A later case overruling an earlier case may use nearly identical language to the original. Vector retrieval returns whichever has higher cosine similarity, with no awareness of the supersession relation between them.
The Stanford study documents a specific failure of this type: Westlaw's RAG system mischaracterized a 10th Circuit holding on a statutory subsection as a finding that the entire statute was unconstitutional, when the 10th Circuit had actually rejected that argument. The retrieved passage was genuinely relevant. The generated summary of the holding was wrong. Standard RAG optimizes for retrieval. It has no mechanism to verify the characterization of what was retrieved.
The paper calls this the "authority-ordering problem": the retrieved document must be the one that controls the question under a formal precedence or supersession relation, not the one that matches its surface text. Embedding cosine distance addresses only the second.
2. Even the right document has no treatment history
The fact that Loper Bright Enterprises v. Raimondo (2024) overruled Chevron U.S.A. v. Natural Resources Defense Council (1984) is not written anywhere in the original Chevron opinion. A system that retrieves and embeds source documents when they are first loaded has no way to reveal this relationship unless it has separately modeled the citation treatment graph.
"Citation Grounding: Detecting and Reducing LLM Citation Hallucinations via Legal Citation Graphs" (arXiv:2606.00898, 2025) decomposes citation accuracy into three components: precision (does the provision exist?), relevance (contextually appropriate?), and temporality (valid at the relevant date?). Tested across five systems on 100 legal queries, 13 to 21% of generated citations were hallucinated. The temporal validity component was the most common failure mode, not outright fabrication. Hudson de Martim's "Beyond Probabilistic Similarity" (arXiv:2606.09724) names this "diachronic blindness": a retrieved regulation may be semantically relevant but have been repealed. RAG cannot know this from the document alone.
"treatment": "OVERRULED" // not in source document
"overruled_by": "loper_bright.scotus.2024.h01" // requires treatment graph
"good_law_through": "2024-06-28" // temporal boundary, first-class field
3. Holdings occupy one paragraph. The document doesn't label which one.
A federal circuit court opinion routinely runs 40 to 80 pages. The binding holding may occupy a single paragraph. The rest is factual background, procedural history, party arguments, analysis of prior cases, hypotheticals, and dicta. None of these carry precedential weight. At the document level, or at the chunk level, they are indistinguishable from holdings by surface text alone.
We measured this directly in our extraction runs across the 1951–1953 federal corpus. Less than 9% of sentence-level text classified as a holding. When a retrieval system returns the full opinion as context, it is handing the model roughly 91% noise by this measure (factual background, procedural history, arguments of counsel) alongside the one or two sentences that actually matter.
"LegalBench-RAG: A Benchmark for Retrieval-Augmented Generation in the Legal Domain" (Pipitone, Alami et al.; arXiv:2408.10343, 2024) found that standard reranking pipelines were inferior to not reranking after retrieval in legal contexts. Legal retrieval requires extracting minimally relevant, precisely typed text segments. Off-the-shelf retrieval optimization degrades this precision because it optimizes for broad semantic relevance, not for the narrow assertion that is legally operative. The document does not label its own parts. Without sentence-level type classification at extraction time, HOLDING, REASONING, DICTA, and PROCEDURAL text are indistinguishable to any retrieval system.
The purpose-built tools evaluated by Stanford, with full legal data infrastructure and attorney review, still hallucinated on 17 to 33% of straightforward queries. The Stanford authors explicitly note these figures are likely lower bounds. The failure is not retrieval quality. It is that the document does not contain what a verification system needs.
4. Even the right holding may be the wrong jurisdiction
A 9th Circuit holding is binding precedent within the 9th Circuit. It is persuasive authority elsewhere. A 5th Circuit case on the same question may use more similar language to a query than the controlling 9th Circuit case, and thus rank higher in vector retrieval. The system has returned the wrong authority, not because its retrieval failed, but because authority is an ordering relation that embedding distance cannot represent.
The "Controlling Authority Retrieval" paper formalizes this: jurisdiction is an authority-ordering constraint. Metadata filtering on circuit can partially address it, but fails when out-of-circuit cases are genuinely more similar than in-circuit authority, which is precisely the case where filtering would matter most. A legal verification system must model jurisdictional scope as a first-class field, not as a document-level filter applied after retrieval. A 2025 EMNLP evaluation found a compounding problem: chunks from entirely wrong source documents are especially common in legal corpora because all judicial opinions share structural boilerplate; the very homogeneity that makes law internally consistent makes it adversarial for vector retrieval.
5. Courts speak in multiple voices. Cosine distance doesn't hear the difference.
"HalluGraph: Auditable Hallucination Detection for Legal RAG Systems via Knowledge Graph Alignment" (arXiv:2512.01659, December 2024) documents a critical failure mode: BERTScore, the standard semantic similarity baseline, performs near chance (AUC 0.50 to 0.60) for legal hallucination detection. It is insensitive to entity substitutions. Swapping "plaintiff" for "defendant," "2024" for "2025," or "the court holds" for "the dissent argues" barely moves cosine distance. In legal text, these substitutions are fatal errors.
When knowledge graph alignment is used instead, treating relational structure rather than embedding proximity as the ground truth, AUC improves to 0.89. That 39-point gain does not come from better retrieval. It comes from treating legal text as a relational structure where party names, dates, and speaker attribution carry meaning, rather than as tokens whose proximity implies agreement.
Courts speak in multiple voices in a single document. The majority opinion, a concurrence, and a dissent all appear in the same file. Correct speaker attribution requires dependency parsing and coreference resolution at the sentence level, tracing the pronoun "we" to the judicial speaker through the preceding paragraphs. A passage three paragraphs into a dissenting section, where "we" refers to dissenting justices, is indistinguishable from a majority holding by surface text alone.
6. The citation graph is between documents, not in them.
Legal reasoning is inherently multi-hop. "Is this employment discrimination doctrine binding on California employers, given subsequent Supreme Court guidance?" requires traversing a citation graph: the original circuit case, the SCOTUS opinion, any circuit-level application, and the treatment relationship between them. Standard RAG, optimized for single-hop retrieval, cannot traverse this graph because the graph is not in the documents. It exists between them.
A 2025 systematic evaluation (arXiv:2502.11371) comparing RAG against graph-augmented RAG on multi-hop legal benchmarks found multi-hop accuracy of 23% for standard RAG versus 87% for graph-augmented retrieval. The specific ratio varies by benchmark; the direction holds across every independent evaluation we have seen, and matches what we observe internally on our own corpora. The gap reflects the structural mismatch between single-pass embedding retrieval and the relational traversal that legal reasoning requires.
What the alternative looks like
The alternative is not a better embedding model or a smarter reranker. It is a different data structure.
Legal verification requires assertions, not documents. An assertion is a typed, attributed, jurisdiction-stamped record of what a specific court decided in a specific case, with a treatment field that reflects what subsequent courts have done with it. The document is the evidence for the assertion.
"speaker": "MAJORITY" // not dissent or concurrence
"treatment": "AFFIRMED" // currently good law
"binding_circuits": ["9th","DC"] // jurisdiction scope, first-class field
"decided": "2019-06-12" // opinion date
"good_law_through": null // still current
"confidence": 0.97 // extraction confidence, from gold evaluation
This is what your retrieval system should be querying: the assertion, not the document. The document remains in the provenance chain, available for full-text verification. But the queryable, verifiable unit is the structured record with all the fields that semantic similarity cannot encode.
The practical implication
If you are building a legal AI product and your grounding strategy is "retrieve relevant case law and condition the model on it," you have a retrieval system, not a verification layer. The Stanford data puts a number on the gap: even best-in-class commercial products with dedicated legal infrastructure produce wrong legal authority in 17 to 33% of queries on relatively simple questions. On multi-hop questions (the kind that require traversing a citation graph), the comparison in §6 shows what that gap looks like in practice: 87% accuracy for graph-augmented retrieval versus 23% for standard RAG.
Sanctions are accelerating. From $5,000 in Mata v. Avianca (2023) to approximately $109,700 in the Oregon winery case (2025): an 11x increase in 18 months, despite Mata's deterrent effect. 47 state bars have issued formal AI guidance.
The question that ends procurement conversations is not "did your system find a relevant case?" It is "how do I know this holding is still good law, and does it bind my circuit?" That requires knowing the treatment history, the jurisdiction scope, and whether the passage came from the majority or a dissent. None of that is in the retrieved document.
They are the documented reasons why purpose-built commercial tools, built by companies with billions in legal data infrastructure and teams of attorneys, still get the answer wrong one in three times. The solution is a different data structure: one the model queries rather than one the model is conditioned on, not a different model.
Further reading
Dahl, Magesh et al. "Large Legal Fictions." Journal of Legal Analysis 16, no. 1 (2024): 64-93. arXiv:2401.01301 · Magesh, Surani et al. "Hallucination-Free?" Journal of Empirical Legal Studies (2025). arXiv:2405.20362 · "Controlling Authority Retrieval." arXiv:2604.14488 (2025) · de Martim. "Beyond Probabilistic Similarity." arXiv:2606.09724 (2025) · "HalluGraph." arXiv:2512.01659 (2024) · "Citation Grounding." arXiv:2606.00898 (2025) · Pipitone et al. "LegalBench-RAG." arXiv:2408.10343 (2024) · "Towards Reliable Retrieval." arXiv:2510.06999 (NLLP/EMNLP 2025) · RAG vs. GraphRAG comparison. arXiv:2502.11371 (2025)