How would you answer an interview scenario involving Hallucination management?

For an internal policy assistant, explain how you would make the model answer only from approved policies and say when evidence is insufficient.