"For large and complex programs, even the most time-consuming of the labor-intensive methods [of design verification] is much faster and more effective than testing."