>If there are well defined contracts for the software, and the software behaves correctly [...]

But how would you ever know if this assumption is true?