RAG Hallucinations Mostly Come from Retrieval Failures, Not Model Fabrication
An experiment on the 55‑page NIST Cybersecurity Framework shows a cosine‑based retriever ranks the correct answer last, while a simple keyword filter puts it first. The LLM then hallucinated because it never saw the right context. Fixing retrieval removes most RAG hallucinations.