Standard answers include
•
Human inspection
•
Simulation
•
Analysis
•
Aside: especially for safety-critical systems,
I cannot imagine using only a single
approach