Citation verification, defensible under URPC 1.1, 3.3, and ABA Op. 512.

A one-page reference for attorneys answering the bench's question: what verification did you perform on AI-generated citations before filing this document?

To save as PDF: Print this page (⌘P / Ctrl-P), choose "Save as PDF" as destination. The page is print-styled.

The duty

Three obligations converge on every AI-assisted filing:

URPC 1.1 (Competence) — the requisite knowledge, skill, thoroughness, and preparation reasonably necessary for the representation. Competence with AI tools includes understanding the tool's failure modes.
URPC 3.3 (Candor Toward the Tribunal) — a lawyer shall not knowingly make a false statement of fact or law. A fabricated citation, even unwittingly relayed, can violate this rule under the standards courts now apply.
ABA Formal Opinion 512 (July 2024) — the duty of competence requires that lawyers using generative AI understand its limitations and verify the accuracy of its work product before relying on it.

The failure mode that triggered this duty

In June 2023, Mata v. Avianca, 22-CV-1461 (S.D.N.Y.), sanctioned two attorneys for filing a brief that cited six entirely fabricated cases — the cases sounded real, the holdings were plausible, the citation format was correct, and not one of them existed. Subsequent reported sanctions have followed in at least eight federal districts and a growing number of state courts.

The common pattern: the AI returned a confident-sounding citation; the attorney filed it; opposing counsel ran a quick Westlaw check; the citation was fabricated; the court ordered the attorney to show cause. Independent verification of every citation is no longer optional.

What BenchSlap does at the kernel level

BenchSlap is the only legal-AI platform whose architecture cannot emit a citation that doesn't exist in a verified closed corpus. The relevant invention is called AEGIS:

Every authority in the 3.2-million-opinion corpus + 1.9-million-rule corpus is pinned with a SHA-256 content hash at ingest time and a 5-gram shingle signature.
Every citation that the AI emits is checked against the closed corpus before it appears in the user's brief. A hard block fires if no match.
Every verified citation is accompanied by a verdict badge displayed in the UI: ✓ VERIFIED / ⚠ UNVERIFIED / ✗ FABRICATION.
AEGIS PRIME extends this with structural verification — disposition, panel vote, holding binding weight, and a treatment graph — so the AI cannot quote a real case but frame the disposition or holding incorrectly.

How to answer the bench's question

When Judge X asks counsel "What verification did you perform on the citations in this brief?", the BenchSlap-using attorney can answer with concrete specifics rather than ambiguity:

The question	The defensible answer
Did you verify every citation?	Yes. Every citation in this brief was checked against a 3.2-million-opinion closed corpus before the brief was finalized.
How is the corpus authenticated?	Every authority is hash-pinned (SHA-256) at ingest time. The hash is recomputed on each verify pass; a mismatch hard-blocks the filing.
How do you know the AI didn't fabricate a citation?	The AI's output passes through the AEGIS gate. A citation that doesn't exist in the closed corpus cannot reach the printed brief.
How do you know the case wasn't overruled?	AEGIS PRIME maintains a treatment graph. When a cited case has a non-null `superseded_by_opinion_id`, the brief surfaces a warning and the AI rewrites with the controlling authority.
What if the AI quoted the dissent as the majority?	AEGIS PRIME's attribution check matches every quote to its panel role (majority / concurrence / dissent). A mis-attributed quote hard-blocks.
Can you produce the verification record?	Yes. Every Drafter and Auditor output exports with an embedded verification certificate listing each citation, its verdict, source tier (T0–T4), and the AEGIS hash.

What a verdict badge means

Badge	Meaning	Action required
✓ VERIFIED	Citation found in opinion library with content-hash match. Source tier T0 (cache) through T4 (multi-AI peer review).	None — cite as written.
⚠ UNVERIFIED	Citation not found in the closed corpus and could not be authenticated by remote source.	Verify independently before filing. Do not rely on the AI's word.
✗ FABRICATION	Citation does not exist as written. Structural fabrication (impossible year, volume, page) or AEGIS-confirmed absence from the corpus.	Remove from filing. The AI invented this citation.
⚠ OVERRULED	Citation exists but has been superseded by a later opinion. Treatment graph identifies the overruling case.	Cite the overruling authority or note the cited case is no longer good law.

The closed-corpus moat

The reason generate-then-verify pipelines (ChatGPT for legal work, plus other consumer LLMs marketed for legal use) cannot offer this defense: their architecture invites hallucination by design. They generate text first, then optionally ask a second AI to verify it. The second AI suffers from the same statistical failure mode as the first.

BenchSlap inverts the architecture. The corpus is closed and hash-pinned at ingest time, before any user request. The AI's role is constrained to selecting from the verified corpus — not to inventing citations and hoping a verifier catches it.

The practical consequence: a citation that doesn't exist cannot appear in a BenchSlap-generated filing. The defense doesn't depend on the user's diligence after the AI runs; it's enforced at the kernel.

Documentation a court can review

The 10-paper whitepaper canon: benchslap.pro/whitepapers/00–09
USPTO provisional filings: AEGIS, Cascading Opinion Harvester, Commission Inquest, Chomper Evidence Ingestion (2026-04 cohort)
Source code: public repository at github.com/Benchslap/Benchslap — the verification kernel (lib/authority-hash.js, lib/verification-pipeline.js, lib/post-stream-gate.js, lib/case-fact-extractor.js) is auditable
Live verification endpoint: benchslap.pro/api/demo/cite-check — any citation in a filing can be re-verified independently

Richard L. Sanders, Esq. · Utah Bar No. 15728
Founder, BenchSlap · benchslap.pro · richard@option.black
This document is provided for informational purposes only and does not constitute legal advice. Every jurisdiction's professional conduct rules apply differently; consult counsel for jurisdiction-specific requirements. The duty of independent verification rests with the filing attorney; BenchSlap is a tool that produces a defensible record of verification, not a substitute for the attorney's professional judgment.