[raw_anon_1111]

If you are writing the correct tests that mirror the requirements, why wouldn’t passing tests mean the code is correct?

[catgary]

Because it doesn’t? Thats why the field of formal methods exists.

[raw_anon_1111]

Then that sounds like you aren’t writing good tests…