Test driving cannot prove safety.
A test campaign visits finitely many conditions, and the road presents uncountably many.
Proving one vehicle beats a human driver would take 275 million failure-free miles. Kalra & Paddock, RAND, 2016
Formal verification reads the weights and proves what a steering model will do in conditions it never drove. White paper: testing between the test cases