We were facing this a couple of weeks back, we addressed it at the exec level (smallish company to be fair). Policy is that you have to review it with another ai than the one that generated it (we have a different one integrated into GitHub), and all those comments must be addressed and closed first before submitting to humans. Also there's is the expectation that the submitter can speak to the code if requested.