ibl.ai Agentic AI Blog

Insights on building and deploying agentic AI systems. Our blog covers AI agent architectures, LLM infrastructure, MCP servers, enterprise deployment strategies, and real-world implementation guides. Whether you are a developer building AI agents, a CTO evaluating agentic platforms, or a technical leader driving AI adoption, you will find practical guidance here.

Topics We Cover

Featured Research and Reports

We analyze key research from leading institutions and labs including Google DeepMind, Anthropic, OpenAI, Meta AI, McKinsey, and the World Economic Forum. Our content includes detailed analysis of reports on AI agents, foundation models, and enterprise AI strategy.

For Technical Leaders

CTOs, engineering leads, and AI architects turn to our blog for guidance on agent orchestration, model evaluation, infrastructure planning, and building production-ready AI systems. We provide frameworks for responsible AI deployment that balance capability with safety and reliability.

Back to Blog

A Court Struck a Deutsche Bank Brief Over Fake AI Cites

Mikel AmigotSeptember 11, 2026
Premium

On September 3, 2026 the D.C. Court of Appeals struck a brief filed for Deutsche Bank National Trust Co. because four cited cases did not exist. It is one of more than 1,148 such US filings.

The Short Answer

On September 3, 2026, the D.C. Court of Appeals struck the appellee's brief in Douglas v. Deutsche Bank National Trust Co. after four cited authorities turned out not to exist. The court did not throw out the case; it struck the filing and referred the matter to disciplinary counsel. Legal AI has to retrieve from verified sources with provenance on every citation, not generate them. With ibl.ai you own all the code and the data.

The distinction that matters is not which model wrote the brief. It is whether a citation in that brief is a document the system retrieved or a string the model produced.

What did the D.C. Court of Appeals actually do to the Deutsche Bank brief?

It struck the brief in its entirety and referred the matter to the District of Columbia Bar's Office of Disciplinary Counsel.

The order in Douglas v. Deutsche Bank National Trust Co., No. 24-CV-1099, was issued on September 3, 2026. Four of the authorities cited in the appellee's brief did not exist.

Counsel acknowledged using Google's generative artificial intelligence search tool to locate case authority, and not verifying that the results were real.

This is worth stating precisely, because the story is circulating as "a Deutsche Bank filing was thrown out." The case was not thrown out.

One filing was struck, which is a different and more instructive outcome: the bank's side of the appeal lost its written advocacy while the appeal itself continued.

The panel also declined to treat this as one attorney's mistake.

As reported by the ABA Journal, it found that every firm attorney who signed the brief bears some responsibility, and described a brief with fake citations as something that "misdirects the court, burns time and resources, and sows confusion."

That is the operative rule. Signing is certifying. No tool moves that obligation.

How common are AI-hallucinated citations in court filings?

Common enough that it is now a tracked category of litigation misconduct rather than a novelty.

Norton Rose Fulbright, surveying generative-AI sanctions decisions, counted more than 1,148 US cases of hallucinations by lawyers as of June 2026, drawing on the public database of AI hallucination decisions maintained by researcher Damien Charlotin.

The penalties are no longer symbolic.

In Whiting v. City of Athens, the Sixth Circuit imposed $15,000 in punitive sanctions on each of two attorneys, plus fees, double costs and a disciplinary referral β€” the court did not find the fabrications were AI-generated, only that counsel had not read what they cited.

Two years ago this was one famous case. It is now a pattern with a docket count, and appellate panels are actively checking citations that look unfamiliar.

Not on its own, and this is the part most coverage of these incidents gets wrong.

The reflex conclusion is that the lawyer used the wrong tool β€” a general chatbot rather than a legal one.

But Stanford's RegLab ran the first preregistered evaluation of commercial legal research tools and found that tools built on retrieval over proprietary case law still hallucinated between 17% and 33% of the time, against vendor marketing that promised "hallucination-free" citations.

The paper was published in May 2024 by Magesh, Surani, Dahl, Suzgun, Manning and Ho, and its conclusion was blunt: providers' claims are overstated.

So "we bought legal AI" is not an answer to this failure mode. Retrieval narrows the gap. It does not close it, because a system can retrieve a real case and still mis-describe what it held, or assemble a citation whose reporter volume and page never went together.

What closes it is a verification step that runs after generation and before filing.

What is the difference between a model generating a citation and a system retrieving one?

A generated citation is a prediction about what a citation usually looks like. A retrieved citation is a pointer to a specific document.

A language model producing "Smith v. Jones, 412 F.3d 118 (4th Cir. 2005)" has produced a well-formed string. Nothing in that process consulted a corpus. The format is right because the format is learnable; the case may never have existed.

A retrieval system does something structurally different. It queries a corpus, gets back a document with an identifier, a court, a date and a text, and carries those attributes forward. The citation is a reference to a row that exists, and the system can show you the row.

That difference produces four properties a filing workflow can actually check:

  • An identifier that resolves. Every cited authority maps to a document in a corpus, and the link opens it.
  • Provenance on the face of the draft. Which database, which version, retrieved on which date β€” visible to the attorney reviewing, not buried in a log.
  • Quotation bound to source text. A quoted passage is a span from the retrieved document, not a paraphrase the model reconstructed.
  • A failing verification gate. A resolver checks every citation before the draft can be filed, and a citation that does not resolve blocks the draft instead of warning about it.

The first three are architecture. The fourth is process, and it is the one that would have caught this brief.

This is the same failure shape described in worse than hallucination: confidently wrong β€” the system's confidence is uncorrelated with whether the underlying fact is real, so confidence cannot be the check.

What should a firm require before an AI-assisted filing goes out?

Five things, none of which is a model choice.

A citation resolver in the pipeline. Every authority in a draft is checked against a corpus, automatically, as a blocking step. Unresolved citation, no filing.

Provenance rendered for the reviewer. The attorney who signs sees where each authority came from and when, and can open it in one click.

A record of what the system was asked and what it returned. When a court asks how a citation got into a brief, the firm should be able to answer from logs rather than recollection.

Confidentiality that survives the tool. Client material in a draft should not leave the firm's perimeter to be processed, which is a deployment question before it is a vendor question. That argument is developed in legal AI's next crisis is trust, not intelligence.

A named human check. Rule 11 in federal district practice puts responsibility on the signer β€” and where no such rule exists, as here, the sanction lands on the client's brief instead.

The workflow should make verification the default path, not a discipline the busiest associate is expected to remember at 11 p.m.

With ibl.ai you own all the code and the data.

The platform runs on the firm's own infrastructure with full source code access, so privileged material and work product stay inside the perimeter.

It is model-agnostic across any LLM, so a firm can change models without rebuilding its citation and retrieval layer. It is usage-based with no per-seat pricing, so cost tracks matter volume rather than headcount.

And you can deploy anywhere, from your own cloud to on-premise, GovCloud or a fully air-gapped network.

For this failure mode specifically, ownership is what makes verification auditable.

Agents retrieve from the sources the firm designates, every retrieved authority carries its identifier and retrieval date through to the draft, and the verification step is code the firm can read and test rather than a vendor assurance about a black box.

Per-seat licensing also has the wrong shape here. A firm's AI spend should follow the volume of work the system does, not the number of people who might one day open it.

1.6M+ users across 400+ organizations run the platform this way, including NVIDIA, MIT, and Syracuse University.

ibl.ai is family-owned and operated from New York, NY.

Related reading: legal AI's next crisis is trust, not intelligence β€” why identity and provenance, not model quality, decide whether legal AI is usable; and worse than hallucination: confidently wrong β€” the same confidence-without-grounding failure outside the courtroom. See how ibl.ai deploys for firms at ibl.ai/solutions/legal.

Sources: the order in Douglas v. Deutsche Bank National Trust Co., No. 24-CV-1099 (D.C. Ct. App. Sept. 3, 2026), is published by the D.C. Courts and was reported by the ABA Journal and Eugene Volokh; the case count and the Whiting sanctions from Norton Rose Fulbright's 2026 generative-AI sanctions update; the 17–33% hallucination rates from Stanford RegLab and the May 2024 paper.

Why does owning the AI stack matter?

ibl.ai is the agentic AI platform where you own all the code and the data. You self-host the entire stack inside your own perimeter, run it model-agnostic across any LLM and switch anytime, and pay by usage with no per-seat pricing β€” so you can deploy anywhere: your cloud, on-premise, GovCloud, or fully air-gapped.

  • You own all the code and the data

    Full source code under a perpetual license, running on your infrastructure. Not API access to someone else's platform β€” the stack itself is yours.

  • Model-agnostic

    Run any LLM β€” Claude, GPT, Gemini, Llama, Command, or your own fine-tune β€” and switch providers without rewriting the platform.

  • No per-seat pricing

    Usage-based billing against a budget cap you set. Cost tracks what your organization actually uses, not how many people you employ.

  • Deploy anywhere

    Your cloud, your VPC, on-premise, GovCloud, or a fully air-gapped network with no outbound connectivity.

1.6M+ users across 400+ organizations run the platform this way, including NVIDIA, MIT, and Syracuse University.

ibl.ai is family-owned and operated from New York, NY β€” a U.S.-headquartered, domestically-owned long-term partner, not a vendor that sells licenses and moves on.

See the ibl.ai AI Operating System in Action

Discover how leading universities and organizations are transforming education with the ibl.ai AI Operating System. Explore real-world implementations from Harvard, MIT, Stanford, and users from 400+ institutions worldwide.

View Case Studies
Work with our team

Pilots, deployment, and full ownership

Most enterprise engagements are one-time, not subscriptions. You integrate ibl.ai with your own data, deploy it on your own infrastructure, and the engineering hours scale with the work β€” so the price tracks the scope, not your headcount.

Start here

Pilot

from $15K

fixed scope Β· fixed timeline

A time-boxed proof of value on your real data β€” not a slide deck.

Best for: Teams that want to see ibl.ai working before committing.

  • Deployed on your infrastructure or our cloud
  • 1–2 production agents wired to a slice of your data
  • One integration (LMS / SIS / SSO / data source)
  • Weekly working sessions with our engineers
  • Pilot fee credits toward a full engagement
Scope a pilot
Most common

Integration & Deployment

$25K – $80K

one-time Β· not a subscription

Full deployment integrated with your data and systems. Engineering hours scale with scope.

Best for: Organizations rolling ibl.ai out across a department, campus, or business unit.

  • Platform deployed in your VPC, on-prem, or air-gapped
  • Integrated with your data + identity (SSO / SAML)
  • Multiple custom agents built to your workflows
  • Engineering hours proportional to scope
  • You own the data Β· run any LLM you choose
Plan a deployment
Full ownership

Codebase Transfer + Custom AI Engineering

Six figures

perpetual license Β· you own the stack

We transfer the full source code. You own and self-host the entire platform β€” outright.

Best for: Government, defense, and enterprises that require perpetual ownership and sovereignty.

  • Complete source-code transfer + perpetual license
  • Dedicated AI engineering team on your roadmap
  • Custom agents, models, and integrations to spec
  • Air-gapped capable Β· zero vendor lock-in
  • Family-owned, New York–based long-term partner
Talk about ownership
You own the code and data Run any LLM β€” Claude, GPT, Gemini, Llama Family-owned & operated from New York, NY