I was once training an intern on the concept of “negative testing”, and as an example someone shouldn’t be able to withdraw a negative amount of money from an account.
Upon a demonstration, at a multi-billion dollar financial company, it caused an error message but the account balance was actually incremented.
The quality of enterprise code is quite poor.