Since the initial response contains the (correct) current year, it must have entered the context at some point, most likely before the first (wrong) output token was generated.