A financial services company runs a customer-facing RAG chatbot on Amazon Bedrock. Compliance requires that the assistant only answer using facts from the retrieved source passages and refuse when the retrieved context does not support the answer. During testing, the model sometimes fabricates account policy details that are not present in the retrieved documents. Which Amazon Bedrock Guardrails capability should the team configure to specifically detect and block these unsupported responses?