Eh. I suppose 3 points, all minor: 1) Best of luck in an audit explaining that there is almost a 14% chance that your project is free of backdoors given reason

Eh. I suppose 3 points, all minor: 1) Best of luck in an audit explaining that there is almost a 14% chance that your project is free of backdoors given reasonable assumptions. I recommend taking a photo of the auditor's expression and reporting back. 2) There are quibbles to be had about the IID assumption here; dependencies tend aren't selected randomly and attackers aren't targeting them randomly. 3) You don't need a for loop for that, you can calculate directly with `1-(0.99*200)`.