RAG Hallucinations Are Retrieval Failures

Most RAG hallucinations are retrieval failures, not generation errors. A test on the NIST Cybersecurity Framework showed the correct page ranked 55th out of 55 by cosine similarity. The model answered faithfully from wrong context. Fixing retrieval, not prompts, is the solution.