Secure multiparty computation.
You trust that the right software runs, because unless multiple mutually distrusting parties runs the EXACT SAME software in the same configuration, nothing will happen at all - and they'll hopefully never agree to collude on running anything but the officially agreed upon version.
https://roamingaroundatrandom.wordpress.com/2014/06/16/an-mp...