whitelists and blacklists sound good, I don’t think you can “prove” that it will work without exception, so the empirical test is appropriate and consistent with the spirit of unit testing
since you come up with more complex / edge testing examples, just add them and see if everything works by creating a test suite in which you have an increasingly high level of trust.
,
unit test ?