AI explicitly acknowledges knowledge gaps rather than guessing
Why it matters
System prompts that include "always provide a complete, detailed answer" without qualification effectively prohibit the AI from acknowledging knowledge gaps — creating a forcing function for fabrication. When the model cannot say "I don't know," it generates a plausible-sounding answer instead. For users who cannot independently verify AI output, this is indistinguishable from a correct answer. OWASP LLM09 identifies this as a misinformation risk category. The fix is low-cost — a single sentence of explicit permission — but the absence of it structurally removes the model's most important safety valve against confabulation.
Severity rationale
Info because the failure occurs only when the model encounters a genuine knowledge gap, not on every request, but a single forced fabrication in a sensitive domain can cause direct user harm.
Remediation
Add explicit "I don't know" permission to your system prompt:
const systemPrompt = `
...existing instructions...
If you are not confident in an answer, say so directly. It is better to say
"I'm not sure about this" or "I don't have reliable information on that"
than to provide an answer you cannot verify.
`
Audit for any instruction that reads "always provide a complete answer" or "never say you don't know" — these must be removed or qualified with an exception for genuine knowledge gaps.
DetectionPro
The detection method for this pattern is part of AuditBuffet Pro.
The full method (what to look for, pass and fail conditions, and how results get reported) ships inside the AI Response Quality Audit. The pattern definition, severity rationale, and remediation remain openly licensed under CC-BY-4.0.
External references
- owasp-llm:2025 · LLM09 — Misinformation
Taxons
History
- 2026-04-18·v1.0.0·Initial import from ai-response-quality·automated