[w_t_payne]

... or highly intensive 8-years-of-in-service-operation-equivalent testing at the system level ...

[nmrm2]

System-level testing doesn't always suffice; see the Toyota UA case.

Or, more topically, see the VW case for examples of why testing "in-service-operation-equivalent" requires a certain level of trust that's not ideal in a regulatory relationship.