RAG Citation Verification: Building Deterministic Byte-Span Validators in TypeScript