The failure mode you're describing is the tool answering from the whole library instead of the specific control's source. On complex questionnaires that's fatal — close-enough isn't good enough. You need precise routing to the exact approved control answer.
Also insist on citations and a flag when confidence is low. For technical controls you want it to say "not sure, human check" rather than confidently write something your security team has to catch.
Inventive AI is the one that held up for us on the hard questionnaires. The context graph routes each control to the right security hub rather than guessing from everything, every answer is cited, and it flags conflicts/low-confidence for review instead of inventing. Our security team edits far less than before because the first pass is actually from the right source.
the flag-instead-of-guess behavior is exactly what our security team keeps asking for