I think "write code and see if it works" may be tad more succinct and closer to reality than "build models, reason about them, find properties, then prove them,

I think "write code and see if it works" may be tad more succinct and closer to reality than "build models, reason about them, find properties, then prove them, then rely on them. Tests ... provide guarantees of correctness." wrt to OP's comment.