In my opinion, the developer should write comprehensive unit tests, so in theory the contracts should be bug free after all the unit tests pass. But after that, the client should do their own tests for two reasons: 1) to find bugs 2) to figure out if the contracts really do what they thought they'll do