Where do you work if you don’t need to reverse engineer an existing implementation? Have you written everything yourself?

Unless you are rewriting the application, you shouldn't assume that whatever behavior you find on the system is the correct one.

Even more because if you are looking into it, it's probably because it's wrong.