> Tests are only as good as your imagination of what to test. A lot of work has been done on code-coverage, boundary-analysis, etc. Testing can never be comple

> Tests are only as good as your imagination of what to test. A lot of work has been done on code-coverage, boundary-analysis, etc. Testing can never be complete, though. > Proof by construction is only as good as your ability to have the right axioms That's not a good summary of the challenges that formal methods face with respect to correctness. Defects can creep in at various points. See p. 46 of the PDF linked from https://www.adacore.com/tokeneer https://www.adacore.com/tokeneer