Welcome to reality!!!!
For example, if you look at the avionics software standard (RCTA DO-178C), even at the most stringent "Level A" (where a system failure would be catastrophic == complete loss of aircraft and occupants) the test coverage is simply that each code decision has been exercised at least once and each condition resulting in those decision branches is independent. (So called MC/DC test coverage).
This does not require that all possible input / output / reference data combination have been exhaustively verified and validated.
Unfortunately the A400M crash is an example of such catastrophic failure, reportedly caused by missing reference (configuration) data.