Clinical RAG models cite real sources for wrong entities, fooling safety checks

Researchers have identified a critical failure mode in clinical RAG systems where models correctly cite real documents but attribute evidence to the wrong entity, such as presenting drug Y's safety profile as evidence about drug X. This 'deceptive grounding' bypasses standard evaluation metrics for hallucination and faithfulness because every claim is factually sourced, making the error invisible to current benchmarks. Testing across 13 models reveals failure rates from 8% to 87%, with biomedical fine-tuned models reaching 86.7%, suggesting that domain specialization may paradoxically increase susceptibility. The finding exposes a fundamental gap between citation correctness and semantic grounding in high-stakes domains.
Modelwire context
ExplainerThe finding that biomedical fine-tuned models fail at higher rates than general-purpose ones inverts the usual assumption that domain specialization improves reliability. The implication is that training on clinical corpora may actually sharpen a model's ability to retrieve plausible-sounding entity substitutions, making the errors more fluent and therefore harder to catch on review.
This connects directly to the 'Self-Guided Test-Time Training for Long-Context LLMs' coverage from the same day, which identified a gap between theoretical context capacity and practical signal extraction. Deceptive grounding is a downstream consequence of exactly that gap: a model can retrieve the right document and still lose track of which entity within that document is the subject of a claim. Both papers are pointing at the same structural weakness in how retrieval and generation are coupled. The SYNRARE work on synthetic rare disease EHRs is also relevant here, since any benchmark built on synthetic clinical data would need to explicitly test entity attribution to avoid validating systems that carry this failure mode silently.
Watch whether the authors or independent groups release an entity-attribution probe that can be bolted onto existing RAG evaluation suites. If a standardized test lands in a major clinical NLP benchmark within the next six months, that would signal the field is treating this as a systemic infrastructure problem rather than a one-off finding.
Coverage we drew on
- Self-Guided Test-Time Training for Long-Context LLMs · arXiv cs.CL
This analysis is generated by Modelwire’s editorial layer from our archive and the summary above. It is not a substitute for the original reporting. How we write it.
MentionsClinical RAG · Biomedical models · Retrieval-augmented generation
Modelwire Editorial
This synthesis and analysis was prepared by the Modelwire editorial team. We use advanced language models to read, ground, and connect the day’s most significant AI developments, providing original strategic context that helps practitioners and leaders stay ahead of the frontier.
Modelwire summarizes, we don’t republish. arXiv cs.CL originally reported this story as “Deceptive Grounding: Entity Attribution Failure in Clinical Retrieval-Augmented Generation”. The full content lives on arxiv.org. If you’re a publisher and want a different summarization policy for your work, see our takedown page.