I imagine you would use something that errs on the side of safety - e.g. insist on total functional programming and use something like Idris' totality checker.