Every AI tool answers questions about your documents. Almost none can prove, months later, what the cited paragraph said. Why hash-anchored paragraph citations matter for counsel, DPOs, GRC teams, and procurement.
A citation that survives audit is a provision URI that resolves, text that matches, and a refusal when neither holds. Inside the cite-resolve-compare pipeline.
RAG citations are decorative — no provenance contract links chunk to answer. Regulated work needs typed corpus tools, deterministic validation, and refusal.
6,041 Swedish statutes from Riksdagen, segmented to section level and served as an MCP — query by SFS number, chapter, and paragraf, every result cited.
Chat and RAG hallucinate regulatory citations. An MCP gateway adds routing, fan-out, tier auth, and deterministic citation validation — and when you need one.