Multiverse Computing named this failure mode in ProvenanceGuard (Hugging Face, September 29, 2026; arXiv 2606.18037). Source-blind faithfulness metrics can pass the claim because the fact exists in the combined context. A source-aware verifier should reject the attribution, which matters when MCP agents mix records, policies, search, and databases in one answer.