Restricted analysis, made public daily.
Declassified under standing order Edition No. 062 Thursday, September 3, 2026

In an AI-Q Study, 84.7% of
Identified Final-Report Errors
Traced to the Orchestrator.

A peer-reviewed error-localization study, accepted to EMNLP 2026, traced where citation and faithfulness errors enter multi-agent research systems, including the evaluated configuration of NVIDIA’s AI-Q, an open reference architecture positioned to “deliver trusted business insights.” Researchers attributed 84.7% of the identified final-report errors to the orchestrator: the layer that assembles the cited report from researcher notes, planner output, raw search-engine snippets, and a source registry, without inspecting the full source documents. The components that summarized one document at a time made the fewest mistakes.

The question sounds like an engineering detail until your name is in the report: when a machine-written research brief gets something wrong, which part of the machine made the error? The wrong can be small: a claim pinned to a source that never made it, a citation pointing at work that says otherwise. A research team at Bar-Ilan University, UNC Chapel Hill, and the University of Texas at Austin built a method to trace where those errors entered the pipeline, following identified citation and faithfulness errors in a finished report back to the specific agent that introduced them. The paper, accepted to the main conference of EMNLP 2026, examined three top-ranked open-source “deep research” systems, the multi-agent pipelines that search, read, and assemble long-form cited reports. Among them: AI-Q, the open reference architecture whose NVIDIA repository description promises to “deliver trusted business insights.”

The finding arrives in the paper’s own bolded words: “The majority of mistakes start at the orchestrator.” In the evaluated AI-Q configuration, the researchers found “84.7% of final-report errors in AI-Q originate at the orchestrator, roughly 31% of them hallucinations” — the rest citation mistakes. The other two systems ran 52.6% and 100%: a three-system observation, not a controlled architectural effect, and the authors caution that the capability of the underlying model appeared to explain the dominant error type better than the shared multi-agent architecture. The authors’ image for why is a children’s game: information moves through the pipeline’s agents like a “telephone game.” In their words: “As content crosses agent boundaries, and often gets compressed, both core information as well as citations may get corrupted.”

Be precise about what the orchestrator is, because the precision is the story. In the paper’s evaluated build, the orchestrator is the main agent — the one that assembles the final, cited report. And it is not blind. Per the study’s appendices, the evaluated orchestrator received the researcher agents’ synthesized notes with raw search-engine snippets of the cited URLs appended, along with planner output and a source registry: a map of citation identifiers to URLs. Notes, snippets, and a list of where the sources live. What it does not inspect is the full source document. One taxonomy caution belongs on the record: NVIDIA’s current product page slices the pipeline with its own newer names — an intent-classifying orchestration node at the front door, a separate writer stage for final synthesis — so the paper’s finding attaches to the assembly layer of the build the researchers evaluated, whatever label the box carries this quarter. The paper’s own summary line names the one exception in the error pattern: most agents “make a lot of mistakes, except those that summarize a single document.” The layer that assembles the final, cited account works from mediated evidence — and it is the layer to which, in the evaluated system, most of the identified final-report errors were attributed.

From outside, the evidence available to the assembly layer is invisible. This study measured where identified errors entered three relay-based research systems — and located most of them at final assembly.

The Telephone Game, Measured

Anatomy of an error born at the assembly layer

What was measured. The error-localization analysis ran 20 benchmark research queries through three top-ranked open-source deep-research systems. Identified citation and faithfulness errors in citation-requiring running-text sentences were traced to the agent that introduced them — judged by an LLM-based method the authors validated against human annotators, on running text only, tables excluded. A bounded instrument, honestly sized: error location inside pipelines, measured carefully. Not a survey of an industry.

What it showed. The error shares varied by system: 84.7% at AI-Q’s orchestrator, 52.6% at MS-Agent’s, 100% at TrajectoryKit’s. Across all three, a majority of identified final-report errors were attributed to the final assembly layer, though the shares and dominant error types differed sharply, and the authors caution that model capability appeared to explain the dominant error type better than the shared architecture. The number belongs to one configuration under one method.

The interventions. The authors then tested two repairs — a separate experiment, run on all 50 English benchmark queries. Replacing researcher notes with raw cited-source snippets raised citation recall from 64.5% to 69.7% and citation precision from 87.6% to 94.1%. A separate citation-guidance instruction raised recall comparably — 64.5% to 69.6% — and under it, the orchestrator’s share of identified errors fell from 84.7% to 77.0%, still the largest attributed origin under that repair.

What This Study Does Not Say

It does not say AI-Q is broken. The system placed among the top-ranked open architectures the study examined, and it is an open reference. Publishing its structure for inspection is exactly what an open reference is for; the study reads that published structure, which is analysis, not indictment. It does not say 84.7% of reports are wrong; the figure is the share of identified errors attributed to one layer, in one configuration, on 20 benchmark queries. The paper states the tension itself: that share lands at the orchestrator despite its having one of the lowest agent-level mistake rates in its own system, 30.9% against 70.8% at its least reliable researcher, “which illustrates the value of system-level evaluation on top of agent-level evaluation.” Where identified errors enter a report and how often a component errs per sentence are different measurements. And it does not measure harm to any named professional — no reputation was tracked, no client was lost on camera. The study localizes error and stops there. What can be said on its evidence is narrower and colder: in the evaluated AI-Q configuration, the component to which most identified final-report errors were attributed assembled its account from mediated evidence without inspecting the full documents.

Through the Agentics lens — and in this record’s clinical register, rather than the researchers’ diagnosis — the mechanism has a name: Signal Fragmentation, one of the five clinical characteristics of Digital Derangement Syndrome. The signal does not disappear in these pipelines: it fragments in transit. What a source actually says survives each hand-off as notes, snippets, and identifiers — and the final account is assembled from that mediated evidence, never from the full documents. Trust Transfer Failure, a second of the five characteristics, rides along: the product promise on the label — trusted business insights — is underwritten upstream at the assembly layer. That is the component to which most identified final-report errors were attributed.

Edition No. 061 filed the litigated version of this distance on September 2nd: records submitted for review, a complaint alleging the review never happened. Today’s edition files the measured version, inside the machine itself. Presence in the pipeline is not full-document inspection — and this time there is a number on the distance. For Answer Engine Authority, the design question extends beyond retrieval: how much of the source’s meaning survives the hand-off? This study did not test AEA. The study’s own repairs still point the direction: change what the assembly layer holds — raw source snippets in place of summaries — and citation quality moves. What the assembly layer holds is the whole game.

The paper set out to assign blame inside a machine, and did. What it leaves on the record reaches past the pipeline it measured: the account of you that reaches a reader is written by whatever the assembly layer holds, and the assembly layer holds what the relay gave it. For the person named in the report, the evidence available to the assembly layer remains invisible. This study measured the relay once — and showed where its identified errors entered.

Sources

Eran Hirsch, David Wan, Han Wang, Elias Stengel-Eskin, Mohit Bansal, and Ido Dagan, “Who is the Agent to Blame? Localizing Faithfulness and Citation Mistakes in Agentic Deep Research,” arXiv:2608.24306 (submitted August 25, 2026). The EMNLP 2026 Main Conference acceptance is recorded in the paper’s own arXiv listing. All quoted passages extracted directly from the paper. Method: 20 DeepResearch Bench examples for the error localization; two interventions evaluated separately on all 50 English benchmark queries (raw-snippet replacement raised citation recall from 64.5% to 69.7% and citation precision from 87.6% to 94.1%; a citation-guidance instruction raised recall to 69.6% and reduced the orchestrator’s attributed share from 84.7% to 77.0%); LLM-based error judging validated against human annotators; running-text citations only, tabular content excluded. Error-origin shares are configuration-specific (AI-Q 84.7%, MS-Agent 52.6%, TrajectoryKit 100%) and are attribution of identified final-report errors, never a component’s error probability — at the agent level, the paper reports the AI-Q orchestrator among the lowest sampled-sentence mistake rates.

NVIDIA AI-Q blueprint, first-party documentation: the current pipeline description — an intent-classifying orchestration node, with final synthesis delegated to a writer stage — from the build.nvidia.com product page; the “deliver trusted business insights” positioning from the NVIDIA-AI-Blueprints/aiq repository description. Both accessed September 2, 2026. The paper’s error attribution refers to the orchestrator of its evaluated build, not to NVIDIA’s front-door orchestration node.

Boundary note: the study localizes citation and faithfulness errors inside deep-research pipelines on benchmark queries. It does not measure reputational harm to any person or business, and it does not evaluate NVIDIA’s hosted or commercial deployments. AI-Q is an open reference architecture, and the evaluated configuration is the paper’s own build of it. Error share is attribution of identified final-report errors, never a component’s probability of error.

The orchestrator wrote the report.

What, exactly, did it read?

When a research system assembles an account of you from notes, snippets, and identifiers, the report carries your name either way.
Whether the account a deciding system holds was ever checked
against the source it cites is a question for SIA —
the Intelligence Officer, briefed on every edition
of this record
the morning it releases.

Every edition, in order, from No. 001 · A new edition releases daily, 05:30 CT.

Open the Record
‹ Edition No. 061 Edition No. 063 ›