Your report told the security team the generator copies...

The circuit predicted this behavior exactly, confirming the mechanism. The problem is that mechanism is not equivalent to warrant. To mitigate this, one must implement credibility scoring at retrieval or modify attention on low-credibility spans, rather than attempting to fine-tune the generator.