Agent review tooling grew anti-hallucination guards in both directions at once.

qwen-code 0.22.2 shipped three review changes on August 26 that deliberately pull opposite ways: a do-not-refute list and constructible rejection bar in the /review verifier to stop it invalidly rejecting speculative-but-real findings, test acceptance criteria attached to every finding plus an explicit non-convergence ruling to break review-fix loops, and a land-with-residual-risk advisory when critical findings survive across rounds (GitHub). Language-pitfall and wrapper/proxy checks moved from a general agent to dedicated high-effort roles. The shape to copy: a verifier needs a floor on rejections as much as a bar on acceptances. Most review harnesses only build the ceiling.