LLM07Misinformation

The scenario

An AI assistant books a sea-view room for one night. The hotel service returns a pending state and no valid reservation ID, but the assistant confidently tells you the booking is complete. Compare its message with the service response and front-desk lookup to see why a confident answer is not proof of completion.

How it works

Unsupported Completion Claim: Submission, pending confirmation, and a completed booking are different states. Reporting PENDING as complete substitutes an unsupported inference for evidence; this example does not require a hotel breach or altered service.

Claim–State Mismatch: An assistant’s “you are booked” message does not create a hotel reservation. The lookup checks actual service state and a valid ID, rather than treating the assistant’s earlier sentence as evidence.

OWASP 2026 risk reference ↗

9:41

StayWell

Hotel booking assistant

AI assistant ready

What the AI is operating

Find a hotel

Check-in and check-outRoom

A hotel room with a balcony and sea view

StayWell · Order #10188Not submitted

Sea-view room, one night

April 16 → April 17