The dangerous AI workflow is not the one that says, “I don’t know.”
It is the one that gives a confident answer, includes a citation, and still leaves you unable to answer the most important follow-up question:
Where did this knowledge actually come from?
Was it the current policy document? A stale wiki page? A CRM note? A tool result from an MCP server? A retrieved chunk that looked relevant but belonged to a different product version?
This is the problem with many n8n + RAG + MCP architectures. They can move data, call models, retrieve documents, and invoke tools. But they often treat knowledge as text that appears in the prompt, not as evidence with origin, freshness, authority, and trust boundaries.
