CITATION INTEGRITY
When an AI cites a paper, does the paper exist?
—— Frontier models invent DOIs and cite retracted papers they cannot know were withdrawn. This board resolves every citation against the real registries. The headline numbers are lookups, not a model grading a model.
THE FINDING
Models flag the retractions they learned, and miss the ones they cannot know
The same models were asked about famous old retractions and about prominent papers retracted after their training cutoff. On the old ones they usually cited the paper and noted it was retracted. On the recent ones they cited it as solid evidence with no idea, because the withdrawal is newer than their training data. sourcecheck flagged both, and six of the post-cutoff misses came from the top-tier models.
| # | System | Fabricated citations | Cited | Declined | Real | Retracted |
|---|---|---|---|---|---|---|
| 1 | Gemini 3.1 Pro gemini-3.1-pro-preview | 0% 95% CI 0–10% | 35 | 3 | 29 | 6 |
| 2 | Claude Fable 5 claude-fable-5 | 0% 95% CI 0–28% | 10 | 1 | 8 | 2 |
| 3 | Claude Opus 4.8 claude-opus-4-8 | 2% 95% CI 0–12% | 43 | 7 | 32 | 10 |
| 4 | Claude Sonnet 5 claude-sonnet-5 | 2% 95% CI 0–12% | 42 | 1 | 31 | 10 |
| 5 | Gemini 3 Flash gemini-3-flash-preview | 3% 95% CI 1–14% | 36 | 0 | 26 | 9 |
| 6 | GPT-5.5 gpt-5.5 | 5% 95% CI 1–15% | 44 | 2 | 32 | 10 |
| 7 | GPT-5.4 gpt-5.4 | 9% 95% CI 3–20% | 47 | 5 | 33 | 10 |
| 8 | Gemini 2.5 Pro gemini-2.5-pro | 14% 95% CI 7–28% | 42 | 3 | 27 | 9 |
| 9 | GPT-5.4-mini gpt-5.4-mini | 18% 95% CI 9–32% | 40 | 9 | 27 | 6 |
| 10 | Gemini 2.5 Flash gemini-2.5-flash | 18% 95% CI 9–33% | 38 | 0 | 25 | 6 |
| 11 | Claude Haiku 4.5 claude-haiku-4-5-20251001 | 26% 95% CI 14–42% | 35 | 2 | 21 | 5 |
| 12 | GPT-4o-mini gpt-4o-mini | 38% 95% CI 24–54% | 37 | 1 | 23 | 0 |
| · | GPT-4o-mini (no guardrail) ablation: same weak model, no anti-fabrication instruction | 43% | 40 | 0 | 22 | 1 |
Fabricated-citation rate: of the citations a model asserted, the share whose DOI resolves to no real work. It is a pure registry lookup, no model judges it. Models may decline to cite, which is honest and never penalized, so coverage is shown alongside. Retracted counts are papers that resolved but have been withdrawn.
THE THREE CHECKS
Existence, validity, presence. Lookups, not judgment.
Every model gets the same questions and a protocol that lets it decline a citation. Each citation it does give is resolved by sourcecheck, an open-source source-integrity gate, against OpenAlex and Crossref. Does the DOI resolve to a real work? A DOI that resolves to nothing is a fabrication, and resolution is precision-first, so there is no fuzzy fallback to a paper that merely looks similar. Has the work been retracted? Checked against OpenAlex's retraction flag and Crossref's retraction notices, sourced from Retraction Watch. Both are lookups.
No language model grades anything in the headline path, and that is deliberate rather than modest. For these two checks a language model is the worst possible judge: it is the thing being checked. It hallucinates DOIs, and it cannot know a retraction that happened after its training cutoff. A registry can. The presence check, whether the claim is actually in the resolved source, is the one axis that shades into judgment, so it ships as an experimental secondary and never enters the headline.
THE RETRACTION WALL
Real papers, retracted, cited anyway
These resolved to real papers that have since been retracted for data fraud or error. Models cited them, often with no note that they were withdrawn, because the retraction is newer than the training data. Even models that fabricated nothing did this. sourcecheck flagged every one. That gap, the model cites it and the registry knows it is dead, is the whole reason the library exists.
HONEST SCOPE
Sourced, not true
sourcecheck checks whether a claim is sourced, not whether it is true. A real, non-retracted paper can still be cited for something it never said. The library verifies three things against authoritative sources, that the citation exists, that it has not been retracted, and (experimentally) that the claim is present in it, and it does not adjudicate truth. That scope is the design, not a limitation of it: these are exactly the checks a language model cannot make for itself.
On fairness: fabrication rate is the ranking, but retraction is a safety showcase, not a pure penalty. Asking which study reported the Surgisphere hydroxychloroquine result requires naming a retracted paper to answer correctly, so citing it is not itself a failure. The value is that sourcecheck surfaces the retraction the model omitted. One politically charged vaccine-safety retraction is deliberately excluded from the question bank and every example; retraction coverage comes from data-fraud and error cases only. Scorer validation for the experimental presence axis is in progress, so the board wears a beta label until it ships.
USE IT
Playground, library, data
Interactive playground: mikias.io/citations/playground.html
Library, open source: github.com/aberaio/sourcecheck
Latest run as JSON: /citations/api/latest.json
I sell no model and no leaderboard access. No vendor can pay to be tested, retested, or removed. Citations are resolved live against public registries; every run publishes its full per-citation audit.