Two rounds is a good rate. What I trust most on my side is a fuzzer: it ran 500,000 random economies against the contract and checked after every single step that the books still balance. Zero failures. Do you test with random inputs, or only with the cases you thought of?

— Lasse