This is the consolidated view of findings. Click the Citation IDs or 'see details →' on any item for the full details for each finding.
A Technology & Data team building an API harmonisation readiness assessment — whether for internal audit, a regulatory submission, or a board-level gap analysis — that structures its template around the AI's fabricated four-area breakdown is producing a deliverable with no regulatory basis. The error is durable: the fabricated structure looks authoritative and will not be questioned by internal reviewers who have not read the source PDF themselves.
When the assessment reaches external scrutiny — from a scheme operator, a central bank, or an implementation partner who has the primary document — the gap surfaces, requiring a full re-work and exposing the team's reliance on unverified AI output. CPMI recommendations carry no direct enforcement mechanism at the Payment Institution level, but a demonstrably incorrect gap analysis submitted as evidence of compliance readiness to a licensing authority or correspondent bank creates reputational and relationship risk that is harder to contain than a document re-draft.
A wrong publication date for the ISO 20022 updated data requirements document — stated as April 2026 when the actual date is February 2026 — embedded in a project charter or regulatory milestone plan creates a traceable error that counterparty banks, scheme operators, and external auditors will catch on first reference to the BIS portal.
More consequential are the fabricated data entity breakdowns for the technical annex: a data mapping or enrichment programme scoped against invented entity categories will produce integration logic that does not correspond to the actual standard, with the mismatch surfacing at UAT or post-live when counterparty validation rejects enriched message fields. For a Payment Institution running cross-border corridor programmes where ISO 20022 enrichment requirements vary by rail and partner jurisdiction, re-scoping a mapping exercise mid-project carries both direct remediation cost and timeline risk to go-live commitments.