Program testing can be used to show the presence of bugs, but never to show their absence!
Dijkstra (1970) "Notes On Structured Programming" (EWD249), Section 3 ("On The Reliability of Mechanisms"), corollary at the end.
