Hallucination as Exploit
“A HACR audit on 500 stratified task keys shows that unsupported action-critical claims reach unsafe execution for naive agents (100.0%) and prompt-only defenses (49.6%), but not for ECA.”
The authors, in the abstract
Evidence-Carrying Multimodal Agents