When a Configuration Looks Right, But No One Has Proven It Works

Here's something I've learned investigating infrastructure: a configuration can look perfectly correct and still not be doing what we think it is. Recently, while investigating Docker and network secu