The Vanishing Ground: Link Rot, Source Spoofing, and the Epistemic Fragility of Web-Grounded AI
Authors/Creators
- 1. Ronin Institute for Independent Scholarship
Description
Abstract
Web-grounded artificial intelligence systems increasingly rely on online information to retrieve evidence, generate answers, and support knowledge-intensive tasks. Yet the web is neither a stable archive nor a uniformly trustworthy evidentiary environment. Sources may disappear, change without notice, become inaccessible, or be deliberately manipulated. These conditions create an epistemic vulnerability that extends beyond model-level errors: even a capable system may produce unreliable conclusions when the evidence available to it is incomplete, altered, or inauthentic.
This paper develops a multidisciplinary narrative review of three interrelated vulnerabilities: link rot and content drift, selective information disappearance, and source spoofing or data manipulation. Drawing on research in digital preservation, information science, cybersecurity, political communication, and social epistemology, it examines how changes in the availability and integrity of online evidence can affect web-grounded AI systems. Existing research documents substantial rates of digital decay and demonstrates the feasibility of certain attacks on web-scale training datasets. However, these findings do not establish the prevalence or coordinated deployment of comparable attacks against contemporary AI search and retrieval systems.
The paper distinguishes source unavailability from source falsity, and technical susceptibility from demonstrated exploitation. It argues that epistemic reliability should be evaluated not only in terms of answer accuracy, but also through the availability, authenticity, temporal stability, and traceability of the evidence supporting an answer. It proposes a research agenda centered on source provenance, temporal verification, archival preservation, retrieval integrity, and systematic testing of how source changes affect generated outputs. The central claim is that the reliability of web-grounded AI depends partly on the survival and integrity of its evidentiary environment, not solely on the capabilities of the model processing it.
Keywords: web-grounded AI; link rot; content drift; source spoofing; data poisoning; retrieval-augmented generation; epistemic reliability; digital preservation
Disclaimer
This paper presents a multidisciplinary narrative review and a conceptual framework for examining the epistemic vulnerabilities of web-grounded artificial intelligence. It does not claim that the prospective scenarios discussed have occurred at scale, that source disappearance necessarily indicates deliberate manipulation, or that any specific organization is responsible for coordinated interference. Throughout the text, demonstrated technical vulnerabilities, reported cases, theoretical risks, and proposed safeguards are strictly distinguished.
Furthermore, the psychological literature is utilized to contextualize potential effects on memory and reasoning, rather than to establish a direct causal relationship between web instability and individual or collective memory distortion. Accordingly, the claims concerning downstream effects on AI-generated knowledge should be understood as foundational research questions that require further empirical validation.
Author’s Note
This paper examines the evidentiary instability of the online environment on which web-grounded artificial intelligence partly depends. It brings together research on link rot, content drift, source impersonation, selective information removal, and data manipulation to examine how changes in accessible evidence may affect the reliability and later verifiability of AI-generated claims.
The argument does not assume a coordinated campaign by any particular corporation, government, or other actor. Source disappearance, content revision, ordinary technical failure, institutional decisions, and deliberate manipulation are distinct processes that may produce superficially similar outcomes. None, by itself, establishes malicious intent or demonstrates that an AI-generated error resulted from external interference. Claims about intent, prevalence, and causation require evidence beyond the observation of a missing, altered, or inconsistent source.
Research on human memory provides a relevant but limited point of comparison. Studies of misinformation and its continued influence show that inaccurate information can affect later recollection and reasoning under particular conditions (Loftus, 1992; Walter & Tukachinsky, 2020). These findings do not establish that the disappearance of digital sources necessarily distorts memory, that inaccessible records cause people to accept false accounts, or that such effects occur uniformly. The relationship between source instability, individual recollection, and the reconstruction of shared accounts remains an empirical question.
The paper’s narrower purpose is to make the evidentiary dependencies of web-grounded AI more explicit. A plausible or even currently accurate answer is not necessarily one whose supporting evidence can be independently recovered and checked later. Evaluating reliability therefore requires attention not only to answer quality, but also to source availability, content integrity, provenance, and the possibility of reconstructing the evidentiary path. The proposed safeguards and evaluation framework are research directions rather than established solutions. The aim is to make claims about evidence loss testable without presuming either systematic manipulation or inevitable failure.
Files
The Vanishing Ground_Link Rot, Source Spoofing, and the Epistemic Fragility of Web-Grounded AI.pdf
Additional details
Dates
- Issued
-
2026-10-18
References
- Aggarwal, P., Murahari, V., Rajpurohit, T., Kalyan, A., Narasimhan, K., & Deshpande, A. (2024). GEO: Generative engine optimization. In Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining (pp. 5–16). Association for Computing Machinery. https://doi.org/10.1145/3637528.3671900
- Alyukov, M., Makhortykh, M., Voronovici, A., & Sydorova, M. (2025). LLMs grooming or data voids? LLM-powered chatbot references to Kremlin disinformation reflect information gaps, not manipulation. Harvard Kennedy School (HKS) Misinformation Review, 6(5). https://doi.org/10.37016/mr-2020-187
- Anthropic, UK AI Security Institute, & Alan Turing Institute. (2025, October 9). A small number of samples can poison LLMs of any size. Anthropic. https://www.anthropic.com/research/small-samples-poison
- Bai, Y., Kadavath, S., Kundu, S., Askell, A., Kernion, J., Jones, A., … Kaplan, J. (2022). Constitutional AI: Harmlessness from AI feedback. arXiv. https://doi.org/10.48550/arXiv.2212.08073
- Carlini, N., Jagielski, M., Choquette-Choo, C. A., Paleka, D., Pearce, W., Anderson, H., Terzis, A., Thomas, K., & Tramèr, F. (2024). Poisoning web-scale training datasets is practical. In 2024 IEEE Symposium on Security and Privacy (pp. 4074–4092). IEEE. https://doi.org/10.1109/SP54263.2024.00179
- Chapekis, A., Bestvater, S., Remy, E., & Rivero, G. (2024, May 17). When online content disappears. Pew Research Center. https://www.pewresearch.org/data-labs/2024/05/17/when-online-content-disappears/
- End of Term Web Archive. (n.d.). End of Term Web Archive. https://eotarchive.org/
- Goldman, A. I. (1999). Knowledge in a social world. Oxford University Press. https://doi.org/10.1093/0198238207.001.0001
- Greshake, K., Abdelnabi, S., Mishra, S., Endres, C., Holz, T., & Fritz, M. (2023). Not what you've signed up for: Compromising real-world LLM-integrated applications with indirect prompt injection. In Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security. Association for Computing Machinery. https://arxiv.org/abs/2302.12173
- Hardwig, J. (1985). Epistemic dependence. The Journal of Philosophy, 82(7), 335–349. https://doi.org/10.2307/2026523
- Jaźwińska, K., & Chandrasekar, A. (2025, March 6). AI search has a citation problem: We compared eight AI search engines. They're all bad at citing news. Columbia Journalism Review. https://www.cjr.org/tow_center/we-compared-eight-ai-search-engines-theyre-all-bad-at-citing-news.php
- King, G., Pan, J., & Roberts, M. E. (2013). How censorship in China allows government criticism but silences collective expression. American Political Science Review, 107(2), 326–343. https://doi.org/10.1017/S0003055413000014
- Loftus, E. F. (1992). When a lie becomes memory's truth: Memory distortion after exposure to misinformation. Current Directions in Psychological Science, 1(4), 121–123. https://doi.org/10.1111/1467-8721.ep10769035
- Longpre, S., Mahari, R., Lee, A., Lund, C., Oderinwale, H., Brannon, W., Saxena, N., Obeng-Marnu, N., South, T., Hunter, C., Klyman, K., Klamm, C., Schoelkopf, H., Singh, N., Cherep, M., Anis, A. M., Dinh, A., Chitongo, C., Yin, D., ... Pentland, A. (2024). Consent in crisis: The rapid decline of the AI data commons. In Advances in Neural Information Processing Systems, 37. https://proceedings.neurips.cc/paper_files/paper/2024/file/c3738949a80306cc48a8ea8ba0560f9d-Paper-Datasets_and_Benchmarks_Track.pdf
- Ouyang, L., Wu, J., Jiang, X., Almeida, D., Wainwright, C. L., Mishkin, P., Zhang, C., Agarwal, S., Slama, K., Ray, A., Schulman, J., Hilton, J., Kelton, F., Miller, L., Simens, M., Askell, A., Welinder, P., Christiano, P., Leike, J., & Lowe, R. (2022). Training language models to follow instructions with human feedback. In Advances in Neural Information Processing Systems, 35. https://arxiv.org/abs/2203.02155
- Rafailov, R., Sharma, A., Mitchell, E., Manning, C. D., Ermon, S., & Finn, C. (2023). Direct preference optimization: Your language model is secretly a reward model. In Advances in Neural Information Processing Systems, 36. https://papers.nips.cc/paper/2023/hash/a85b405ed65c6477a4fe8302b5e06ce7-Abstract-Conference.html
- Rao, D., Wong, E., & Callison-Burch, C. (2026). Detecting and correcting reference hallucinations in commercial LLMs and deep research agents. arXiv. https://doi.org/10.48550/arXiv.2604.03173
- Sadeghi, M., & Blachez, I. (2025, March 6). A well-funded Moscow-based global "news" network has infected Western artificial intelligence tools worldwide with Russian propaganda. NewsGuard. https://www.newsguardtech.com/special-reports/moscow-based-global-news-network-infected-western-artificial-intelligence-russian-propaganda/
- Sharma, M., Tong, M., Korbak, T., Duvenaud, D., Askell, A., Bowman, S. R., Durmus, E., Hatfield-Dodds, Z., Johnston, S. R., Kravec, S., Maxwell, T., McCandlish, S., Ndousse, K., Rausch, O., Schiefer, N., Yan, D., Zhang, M., & Perez, E. (2024). Towards understanding sycophancy in language models. In The Twelfth International Conference on Learning Representations. https://doi.org/10.48550/arXiv.2310.13548
- Souly, A., Rando, J., Chapman, E., Davies, X., Hasircioglu, B., Shereen, E., Mougan, C., Mavroudis, V., Jones, E., Hicks, C., Carlini, N., Gal, Y., & Kirk, R. (2025). Poisoning attacks on LLMs require a near-constant number of poison samples. arXiv. https://doi.org/10.48550/arXiv.2510.07192
- Walter, N., & Tukachinsky, R. (2020). A meta-analytic examination of the continued influence of misinformation in the face of correction: How powerful is it, why does it happen, and how to stop it? Communication Research, 47(2), 155–177. https://doi.org/10.1177/0093650219854600
- Zittrain, J., Bowers, J., & Stanton, C. (2021). The paper of record meets an ephemeral web: An examination of linkrot and content drift within The New York Times. Library Innovation Lab, Harvard Law School. https://cyber.harvard.edu/publication/2021/paper-record-meets-ephemeral-web