Standard answers include
Human inspection
Simulation
Analysis
Aside: especially for safety-critical systems,
I cannot imagine using only a single
approach