AI accuracy disclaimer present
Why it matters
Language models hallucinate — they generate plausible-sounding but factually incorrect output with no inherent signal to the user that something is wrong. NIST AI RMF MAP 5.1 explicitly calls out the risk of users treating AI output as authoritative. OWASP LLM09 categorizes this as a misinformation risk. Without a visible accuracy disclaimer, users who act on incorrect AI-generated advice — whether medical, legal, financial, or procedural — have no prior warning that verification was expected. The developer carries moral and increasingly legal exposure when that warning is absent.
Severity rationale
Info because the absence of a disclaimer is a transparency gap rather than a technical vulnerability, but it increases user harm from hallucinated outputs and reduces the developer's liability defense.
Remediation
Add a single line of helper text near the AI chat input. Keep it short — a long legal disclaimer that users learn to ignore is worse than none.
// Near the AI chat input
<p className="text-xs text-muted-foreground mt-1">
AI can make mistakes. Verify important information before acting on it.
</p>
Place it below the input field or as persistent footer text in the chat panel, not in an onboarding modal the user dismisses once and never sees again. For domains where hallucination is high-stakes (medical, legal, financial), add domain-specific language: "Not medical advice. Consult a healthcare professional before acting on health information."
DetectionPro
The detection method for this pattern is part of AuditBuffet Pro.
The full method (what to look for, pass and fail conditions, and how results get reported) ships inside the AI Data Privacy Audit. The pattern definition, severity rationale, and remediation remain openly licensed under CC-BY-4.0.
External references
- owasp-llm:2025 · LLM09 — Misinformation
- nist-ai-rmf:1.0 · MAP 5.1 — Likelihood and magnitude of risks from AI output inaccuracies
Taxons
History
- 2026-04-18·v1.0.0·Initial import from ai-data-privacy·automated