Property-based tests

State what must hold for every input, let a generator search for a counterexample, and let the library shrink it to a small failing case (a local minimum, not always the smallest). One property replaces dozens of examples and finds the cases nobody listed. Success is a property that fails on a wrong implementation, with a shrunk counterexample that replays from a seed.