A green 60-test suite can prove your patch runs. It cannot prove the trust boundary survived review. A second model still found four edge-case failures in ours. If review is ceremonial, it's just CI with better manners.