After each Web search, a search-augmented model must decide whether its evidence suffices: answer, search again, or abstain. Prevailing systems leave this to holistic model judgement, which can accept a context naming every entity yet lacking one required fact. We instead make sufficiency structural: a per-query requirement hypergraph states which facts jointly yield another fact. This raises two challenges: deriving requirements from the question alone, and linking each requirement to passages about the right entity. Certify therefore decomposes the question, searches per requirement, and accepts links only after entity checks. Horn closure over the links yields a certificate, the minimal sufficient passages and their derivation, or an abstention naming open requirements. Given correct retrieval, requirements and links, the decision is sound, and complete up to the entity check. Pooled over three corpora with unanswerable twins, Certify decides significantly more accurately than search agents, graph retrieval and sufficiency judges in default configurations. On the same evidence, it matches a proprietary model's sufficiency label without an additional model call. Over 21M Wikipedia passages, entity checks add 4 to 13 points of decision accuracy where gold evidence exists. Finally, answers from its certificate are 80% correct, against 57% from all retrieved passages.
Figures & tables
Figure 1. The decision we study, on evidence that lacks one of two dates, a gap that a holistic judgement can miss. Certify joins both dates in one hyperedge, so it answers only when both are stated and otherwise names the missing one.
Figure 2. Certify on a complex case: requirement hypergraph, Horn closure by rounds, minimal certificate and the twin’s open requirement.
2WikiMultiHopQA
MuSiQue
Acc ↑
SAcc ↑
Calls ↓
Tok ↓
Acc ↑
SAcc ↑
Calls ↓
Tok ↓
RAG (top-5)
31.8 / 22.5
50.2
1
0.9
17.9 / 16.3
41.8
1
0.8
Verbalised sufficiency
32.0 / 21.8
53.0
2
1.6
17.1 / 14.7
41.9
2
1.6
Iterative search
51.9 / 47.3
55.6
3
2.2
34.6 / 31.9
41.8
3
2.1
S2G-RAG
45.0 / 40.0
71.6
5
5.6
17.0 / 15.6
59.6
7
8.2
Search-R1
70.2 / 66.7
72.1
4
3.4
47.2 / 45.7
51.9
4
3.5
Table 1. Accuracy and cost on answerable questions (test, 8B). Certify has the highest SAcc on both corpora, and only HALT and SR-RAG make more LLM calls. † Offline indexing not counted.
2WikiMultiHopQA
MuSiQue
Cov
Twin ↓
Gold ↓
AbsP ↑
Dec ↑
Δ Dec
Cov
Twin ↓
Gold ↓
AbsP ↑
Dec ↑
Δ Dec
Baselines, each on its own evidence
RAG (top-5)
48.2
32.8
3.7
64.9
44.8
33.8 ± 1.8
30.4
20.7
4.2
57.0
47.8
12.6 ± 1.3
Verbalised sufficiency
44.7
29.0
3.5
64.2
46.4
32.3 ± 1.8
26.6
16.2
2.4
57.1
49.2
11.2 ± 1.2
Iterative search
88.5
83.1
13.6
73.5
32.1
46.6 ± 1.8
74.2
67.2
10.1
63.6
32.4
28.1 ± 1.4
S2G-RAG
42.3
22.5
4.0
67.1
58.8
19.9 ± 1.7
18.0
9.4
2.4
55.3
53.1
7.3 ± 1.1
Table 2. Answering or abstaining on paired originals and twins (test, 8B, ± standard error). Certify is most accurate on 2WikiMultiHopQA and over two standard errors above every first-block baseline.
Dec ↑
8B
Qwen3-32B
DeepSeek V4.1 Flash
Web, 8B
Web, 32B
HQ
2W
MQ
HQ
2W
MQ
HQ
2W
MQ
HQ
2W
MQ
HQ
RAG (top-5)
53.0
53.0
49.8
58.5
54.5
53.1
63.1
41.6
44.0
43.2
46.0
45.1
45.2
Iterative search
38.0
57.0
46.6
53.9
73.7
63.3
70.4
23.5
22.0
28.3
39.8
27.7
39.8
S2G-RAG
62.5
61.5
55.2
68.9
74.3
59.9
75.3
50.4
47.4
48.4
55.8
49.8
58.4
Search-R1
40.1
38.9
25.7
37.4
38.5
30.8
38.0
30.1
21.2
30.9
34.5
16.2
30.9
Suff. Context (Gemini)
61.3
54.8
51.0
64.5
54.5
53.1
65.2
42.5
45.6
48.0
49.6
46.1
48.8
Table 3. Decision accuracy (%) in further settings (test pairs, DeepSeek only on those not answerable from memory, Web only on verified pairs). Certify is best in 6 of the 13 columns, and no row is significantly above it.
Certificate
Alternative
Context and abstention
Reader, 8B / 32B / DeepSeek (%) ↑
80.0 / 82.9 / 89.5
56.7 / 69.8 / 73.5 (pool)
Reader, passages only (%) ↑
74.0
21.8 (RAG, same size)
Names the deleted requirement (%) ↑
87.6
48.2 (at random)
Decision on the same links, with no model call
Originals right, only it answers ↑
10 of 11
3 of 27 (step-wise)
Table 4. What the certificate delivers, against the alternative on the same items (test, 8B unless stated, better value in bold). Reader: right on Certify ’s answered originals. Complex: three or more lookups or a join.
Accepted
Precision (%) ↑
share (%)
anchored
verified
rejected
Pooled
2WikiMultiHopQA
77
96.7 (145/150)
43.2 (38/88)
20.0 (30/150)
MuSiQue
50
84.7 (127/150)
74.0 (111/150)
54.7 (82/150)
HotpotQA
61
82.7 (124/150)
74.7 (112/150)
47.3 (71/150)
Web
2WikiMultiHopQA
56
76.7 (115/150)
N/A
44.7 (67/150)
MuSiQue
44
79.3 (119/150)
N/A
54.0 (81/150)
Table 5. Precision of Certify ’s positive links by acceptance class (test, 8B, up to 150 links per class and all 88 verified 2WikiMultiHopQA links graded by Gemini-2.5-Flash, correct/graded in parentheses). Anchored links are the most precise in every row (bold). N/A: the Web rule has no verification step.