It appears that Box provides 5 citations from the Hub content for almost any prompt to a Box Hub. Sometimes they're duplicated.
But users are unable to determine what parts of the response were produced from each citation. Further, im my testing I have often been unable to find any actual content from the cited document in the response.
Inline citations within the response are critical to validate citations.