Why does it happen?
A model is trained to produce likely text, not true text, and it has no internal signal separating "I know this" from "this is the shape an answer would take". Asked for a citation, it generates something with the cadence of a real citation: plausible authors, a plausible journal, a plausible year. Fluency is preserved end to end; accuracy is not, because accuracy was never the objective being optimised.
Rare, specific and recent facts are the danger zone. Anything thinly represented in training data — a small company, a niche API, last month's release — is where invention is most likely and hardest to spot.
