Actually, it's impossible to guarantee perfection, even in safety-critical software. The best you can do is to prove that statistically, the chance of a mishap (caused by a combination of unlikely circumstances including equipment malfunction) is acceptably low - say one death or serious injury in 200 years. That's in total, not per installation.