It seems to be the designer's responsibility to construct his mechanism in such a way--i.e, so effectively structured--that at each stage of the testing procedure the number of relevant test cases will be so small that he can try them all and that what is being tested will be so perspicuous that he will not have overlooked any situation
- Dijkstra, 1968, The Structure of the "THE"-Multiprogramming System