The Existence Trap

Three unrelated industries had a documentation-fraud scandal in the last three years. Academic publishing. Commercial aviation. Biodiesel feedstock. Different regulators, different continents, no coordination between any of them, and no shared vendor selling a common fix.

All three converged on the same response. All three responses check the same wrong thing.

Existence Is Not the Same Claim as Verification

A record can exist, be correctly formatted, reference a real institution, and still be wrong about the one fact it was created to prove. A DOI can resolve to a real paper. A certificate can name a real manufacturer. A shipment's paperwork can reconcile cleanly from one link of a supply chain to the next. None of that confirms the founding claim underneath: that the cited paper actually supports the sentence citing it, that the named inspector actually examined that part, that the barrel genuinely started as waste oil rather than virgin oil relabeled to collect a subsidy.

Checking existence is cheap. It is a comparison a machine can run in milliseconds: does this identifier resolve, does this record connect to the next one in the chain, is the document internally consistent. Checking verification is expensive. It means reaching the party that made the original claim and confirming it against a record that party cannot alter after the fact. Every case below is an industry that built the cheap check, called it the expensive one, and found out the difference the hard way.

Case One: The Citation That Resolves

Four independent measurement efforts on fabricated academic citations landed within weeks of each other in 2026. Zhao and colleagues, including arXiv founder Paul Ginsparg, audited 111 million references across 2.5 million papers and estimated 146,932 hallucinated citations in 2025 alone.Sources: Zhao et al., “LLM hallucinations in the wild” (arXiv, 2026)

Topaz and colleagues, publishing in The Lancet, verified 97.1 million biomedical references and found the share of papers containing a fabricated citation moved from roughly one in 2,828 in 2023 to one in 277 in early 2026.Sources: Topaz et al., “Fabricated citations: an audit across 2.5 million biomedical papers” (The Lancet, 2026)

GhostCite found invalid citations in 1.07 percent of papers at leading AI and security conferences, venues that run peer review specifically to catch this.Sources: “GhostCite: A Large-Scale Analysis of Citation Validity in the Age of Large Language Models” (arXiv, 2026)

The response taking shape across scholarly publishing is DOI verification at submission. A DOI either resolves or it does not, so the check is cheap, fast, and fully automatable.

It is also the wrong finish line. A DOI resolving tells you the reference exists. It says nothing about whether the paper actually supports the claim it is cited for. A real, resolvable citation attached to a sentence it does not support passes every existence check ever built, because existence was never the question that mattered. The gap is structural, not effort: 41.5 percent of authors do not check the reference entries they paste, and 76.7 percent of reviewers report not checking references at all. Nobody has been made responsible for the check that actually matters, at the point where it would cost least to run it.

Case Two: The Certificate That Exists

On February 23, 2026, Jose Alejandro Zamora Yrala was sentenced to four years and eight months in a London court. His company, AOG Technics, had sold more than 60,000 aircraft engine parts with falsified airworthiness release certificates, most for CFM56 engines, the type that powers the Boeing 737 and Airbus A320 families. The parts reached at least 96 engines — a figure CFM later revised up to 126 — installed across aircraft operated by Delta, WestJet, American, United, Southwest, TAP, Virgin Australia and Ryanair. The scheme ran from 2019 to 2023 before GE Aerospace and Safran found inconsistencies during a routine audit and alerted regulators.Sources: “Fake parts fraudster jailed for scam that grounded airlines” (Aerotime, 2026)

Zamora did not invent parts out of nothing. He altered genuine certificates and fabricated the identities of quality managers who never existed, so the paperwork read exactly like the paperwork on a legitimate part: a real manufacturer name, a real part number, a signature block, a certificate number. Every document in the chain existed and was internally consistent. That is precisely why it took four years to catch.

The regulatory response taking shape at the FAA and EASA is Back-to-Birth digital traceability: a continuous, verifiable digital record of a part's custody from manufacture to installation. It is a real improvement, and it checks the same thing the DOI check does. A digital chain of custody tells you the paperwork trail is unbroken. It says nothing about whether the first link in that chain was ever true. A forged certificate, digitized and passed cleanly from owner to owner, produces a Back-to-Birth record with perfect continuity and a false origin at the root of it. The fraud was not caught by a receiving inspection at any of the eight airlines involved. It was caught when an engine manufacturer cross-checked documentation against its own records during a routine audit, four years and 60,000 parts in.Sources: “FAA issues AOG Technics update after analyzing fake parts” (Aerotime, 2026)

Case Three: The Chain That Reconciles

Used cooking oil trades at a discount to virgin vegetable oil, but not mainly because it is lower grade. Under EU renewable-fuel rules, biodiesel made from genuine waste UCO gets preferential treatment toward blending targets, because it is treated as a waste stream rather than a crop grown for fuel. That regulatory premium is worth real money, and it creates a specific incentive: relabel virgin palm oil as used cooking oil and collect the same premium without doing the collection work.

Transport & Environment, the European sustainable-transport NGO, analyzed ISCC-published origin data and estimated that around 80 percent of the EU's 2022 UCO imports were suspected mislabeled virgin palm oil. China supplies roughly 40 percent of Europe's total UCO; Bulgaria imports 96 percent of its UCO from China. In July 2023, ISCC, the certification body that issues sustainability certificates for this market, ran unannounced integrity audits at biodiesel and HVO plants in China and withdrew or suspended seven certificates as a result.Sources: “Fraudulent origins suspected for 80% of the EU's UCO imports” (Transport & Environment, 2024) · “7 ISCC certificates withdrawn or suspended so far in biodiesel-mislabeling investigation” (2023)

Here is the honest part, the part worth sitting with rather than rounding up. German authorities filed a fraud complaint in 2023, and the European Commission opened a formal examination. When it concluded on July 18, 2025, the Commission did not confirm fraud. Its own words: the information gathered did not allow confirmation of the existence of fraud. What it did find was systemic weaknesses in the way certification audits have been conducted, alongside a quantified incentive: certified UCO carries a price premium over virgin oil precisely because it is treated as waste, which is the only reason relabeling one as the other is worth doing at scale.Sources: European Commission, “Commission concludes examination of potential Chinese biofuel imports fraud” (2025)

A genuine regulator, with subpoena power and two years to look, could not verify the founding claim either way. And its response was the same one every other industry in this piece reached for: full mandatory deployment of the EU's biofuels traceability database, with a working group targeting early 2026 to revise the certification rules. Mass-balance accounting is genuinely good at confirming that volumes reconcile as material moves from collection point to aggregator to refiner to blender. It is structurally unable to confirm the one link that matters most, the first one, because by design it only carries a declared origin forward once it has been made. It does not re-derive it.

Why This Is Not a Coincidence

Nobody at ISCC read the AOG Technics court filings. Nobody drafting the FAA's Back-to-Birth mandate had heard of DOI verification pilots in scholarly publishing. Three industries independently discovered the same fraud shape and reached for the same fix, because the fix is not a matter of imagination. It is a matter of cost.

An existence check compares a document to itself or to the next document in its own chain. It never has to leave the paper trail, which is exactly what makes it automatable, fast, and nearly free to run at scale. A verification check has to leave the paper trail. It has to reach the original authority, the paper's actual content, the OEM's actual inspection log, the fryer the oil actually came from, and confirm the claim against a source the person who made the claim does not control. That is slow, sometimes impossible at scale, and in the UCO case, apparently too slow even for a government regulator with two years and legal authority behind it.

That asymmetry is also what a rational forger optimizes against. Zamora did not invent documents from nothing; he altered genuine ones, because beating an existence check only requires the shell to be well formed. The UCO fraud specifically targets the one link mass-balance accounting cannot independently re-derive. In both cases the attacker is not defeating verification. Nobody is running it. They are defeating the thing everyone mistook for verification, which is a much cheaper problem.

The prediction that follows is not really a prediction, more a standing bet: the next industry with a documentation-integrity scandal, in finance, in healthcare, wherever it lands, will announce a traceability or existence-check fix first, and it will be insufficient for the same reason, before anyone gets around to naming it.

What Would Actually Close the Gap

This is the part existence checks cannot reach by construction, and it is what we built Verifier Core and Grundnorm to do, from opposite ends of the same problem.

Grundnorm seals a record at the moment it is issued, so altering a genuine signature or a serial number afterward breaks a cryptographic seal instead of quietly passing as the original. That closes the forgery Zamora used: an altered document stops being indistinguishable from an untouched one.Sources: See how it works

Verifier Core checks the claim a document makes against the source it claims to come from, the same discipline whether the document is a citing sentence, a maintenance certificate, or a feedstock declaration. That is the check none of the three industries above had running: not does this paperwork connect, but does this specific claim hold up against the specific source it names.

Neither replaces the traceability systems being built right now. Back-to-Birth records and mandatory biofuel databases are worth having. They just answer a different question than the one that actually caused each of these scandals, and confusing the two is not a technicality. It is the whole failure mode.

Existence is the floor. It was never the ceiling.