Why AI with database access still errs