Verifying functionality is simply not enough