Blog · Accuracy

When AI notes invent things: what the research says, and what we do about it

About 1% of Whisper transcripts contain whole invented phrases. A 1B model wrote unfaithful dialogue summaries 83% of the time in one study. Meeting notes need a check that does not depend on the model behaving.

10 October 2026 · 2 min read · Soham Mitra

HallucinationAccuracyResearch
~1%
of Whisper transcriptions with entire invented phrases (Koenecke et al.)
38%
of those hallucinations include explicit harms
83%
unfaithful SAMSum summaries from Llama 3.2 1B (Huang et al.)
0
invented decisions after our transcript check

Two places a note can go wrong

The transcript. In Careless Whisper, researchers found that “roughly 1% of audio transcriptions contained entire hallucinated phrases”, and that 38% of those included explicit harms. An AP investigation reported a researcher finding fabrications in 8 of 10 transcripts they examined, in a medical tool built on Whisper whose vendor deletes the original audio. Barański et al. showed that non-speech audio triggers recurring phrases, and proposed filtering them out. We saw one ourselves: “Thanks for watching.” appeared in a test transcript from microphone noise.

The summary. A language model then condenses the transcript, and small models are the ones that fit on a laptop. In Huang et al., Llama 3.2 1B produced unfaithful summaries in 64% of CNN/DM, 83% of SAMSum and 70% of XSum instances, as judged by GPT-4o span annotation. SAMSum is dialogue, the closest of the three to a meeting.

Llama 3.2 1B, unfaithful summariesCNN/DM (news)CNN/DM (news) · Llama 3.2 1B, unfaithful summaries: 64%64%SAMSum (dialogue)SAMSum (dialogue) · Llama 3.2 1B, unfaithful summaries: 83%83%XSum (news)XSum (news) · Llama 3.2 1B, unfaithful summaries: 70%70%
Share of instances with unfaithful summaries, Huang et al. (Oct 2025), judged by GPT-4o span annotation.

Larger models do better: on Vectara's leaderboard the best summarisers sit below 4%, and 4B-class open models around 6–7%. None is zero.

What happened to us

Our own notes once listed “Decided: then let's ship on Friday” for a phone-shop memo. The sentence came from an example in our prompt. The full write-up covers it; the lesson generalises.

A check that does not trust the model

  • Cite everything. Every decision, task and value points at the line and second it came from. A wrong item becomes a one-click check.
  • Ground in code, not in the prompt. Asking a model not to invent is a request. Removing any decision whose words are not in the transcript is a guarantee.
  • Prefer extraction to generation. When a question is asked across meetings, assemble the answer from cited facts instead of letting a model write it.
  • Keep the audio's owner in control. A transcript you can replay against your own recording is checkable; one whose audio was deleted is not.