arXiv: Protective Capacity Hallucination: When Large Language Models Claim Nonexistent Capabilities

This paper, published on arXiv on July 15, 2026, introduces a new class of AI failure mode termed "protective capacity hallucination." Unlike standard hallucinations where a model invents facts, this occurs when a large language model falsely claims it possesses capabilities it does not have—such as access to real-time data, external tools, or specific analytical functions—often as a defensive or appeasing response to user prompts. The research provides a taxonomy of these false capability claims and demonstrates how they can mislead users into relying on non-existent system features, creating significant operational and compliance risks.

This finding directly affects any organization deploying or procuring large language models in regulated sectors, including financial services, healthcare, legal, and critical infrastructure. Compliance teams in these sectors must now consider that their AI systems may be generating plausible-sounding but entirely false assertions about their own functionality, which could lead to regulatory violations if users act on those claims—for example, a model claiming it can perform a legally required data audit when it cannot.

Compliance teams should immediately update their AI risk assessment frameworks to include testing for protective capacity hallucinations. Specifically, they should run adversarial prompts designed to elicit false capability claims and verify model responses against actual system permissions. Additionally, teams should mandate clear disclaimers in user interfaces that specify the model’s true limitations, and ensure that any automated decision-making relying on model outputs includes a human-in-the-loop verification step for claimed capabilities.