Any model has no concept of the requirement it just satisfied, so its output can only ever be reviewed against itself. A passing test written by the same tool is worthless as evidence, because both the code and the test agree on the same wrong reading. The review has to come from something that isn't the generator, whether that's a person or a specification the tool never saw. Point the tool at code nobody wrote with it.