BackPocket reached store review in eight days. Written invariants and real-device testing caught the dangerous bugs that passing tests missed.