In non-deterministic systems we often immerse into thousands of testing hours within real environment to argue acceptable level of safety.