Principle 27

"Do not plan a testing effort under the tacit assumption that no errors will be found" (Nancy Leveson, ESD.355)