That's why you need a verifier and an acceptance criteria, at the end of each iteration and going one more level using a different model for that QA purpose different from the model that does the specification / implementation.