I have an application that does this. When the AI response comes back, there's code that checks the citation pointers to ensure they were part of the request and flags the response as problematic if any of the citation pointers are invalid.

The idea is that, hopefully, requests that end up with invalid citations have something in common and we can make changes to minimize them.