Tests actually prove very little. They probe the code with a few, isolated inputs out of a usually very large domain. Their nature is more stochastic. Static t

Tests actually prove very little. They probe the code with a few, isolated inputs out of a usually very large domain. Their nature is more stochastic. Static type guarantees are actual proofs (barring a compiler bug), and they narrow down the domain that your tests have to probe.