Basically what everybody else said: tests and a static code analyzer.