diff --git a/src/sweep/codex.ts b/src/sweep/codex.ts
index 1641923..62d20a2 100644
--- a/src/sweep/codex.ts
+++ b/src/sweep/codex.ts
@@ -38,7 +38,7 @@ export async function runReview(
         server.registerTool(
           'review_verdict',
           {
-            description: 'Submit your verdict. You may call it again to revise; the last call wins.',
+            description: 'Submit your verdict once, when your review is complete.',
             annotations: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
             inputSchema: ReviewOutput.shape,
           },
@@ -56,7 +56,7 @@ export async function runReview(
               }
             }
             got.verdict = parseReview(data)
-            return Promise.resolve(text('noted'))
+            return Promise.resolve(text('recorded. Do not call again unless your verdict changes.'))
           },
         ),
     })
diff --git a/src/sweep/prompt.ts b/src/sweep/prompt.ts
index b1f0b13..b98370e 100644
--- a/src/sweep/prompt.ts
+++ b/src/sweep/prompt.ts
@@ -34,7 +34,7 @@ ${corpus}
 # This PR
 Review this pull request against the spec and rubric.
 - Catch bugs, type-lies, dead code, footguns, and slop. Reuse corpus primitives; don't add LOC.
-- Submit the verdict by calling \`review_verdict\`; a second pass follows, and you may call it again to revise. Your text is not read.
+- When your review is complete, call \`review_verdict\` once. Your text is not read.
   - \`fixed\`: prior issues resolved, nothing new (runner posts \`${FIXED_NOTE}\`).
   - \`no_new_issues\`: clean, or prior issues still open (runner posts \`${STILL_NOTE}\` if clean).
   - \`findings\`: exact path/line for each inline comment, on a line this diff touches.${intent}${memory}