points
Short of formal verification, which I think is often going to be unreasonable, we generally have a spectrum of “less bad” options.