A test suite going green tells you one thing: the assertions you wrote passed. It does not tell you that the property you actually care about holds. Those two things usually overlap. On a recent piece of infrastructure work — a system meant to coordinate independent actors under a set of hard invari...