Whatever the AI can read, it may be talked into saying. Anything that bypasses a check once spoken cannot rely on the AI simply remembering not to say it.
Never put a “skip review if you enter the code” rule where the AI can read it. Whether a return skips review is decided by the backend checking staff identity, not by a note field.