A customer's saved data is gone after a power cut. One engineer says that can't happen, the customer says it just did, and nobody can make it happen again.
Molina settles the argument with an experiment. On my own machine I run the container image your engineers ship, and make its disk say "saved" before it is, cut its power, or cut its servers apart, at points I choose.
Nothing is installed in your environment and nothing is added to your tests.
If your software breaks a promise, like "no saved write is ever lost", you get a replay code that names the failure, a recording your engineers can check, and the shortest list of failures that still breaks it. You get it as a folder of plain files you can read and check, and one web page that opens in a browser.