By running an open source OS for which I can confirm the contents of all outgoing connections.
And you cannot really confirm the above use case very well. What if it is so sophisticated that it knows when it is being monitored, or it is so random or well hidden, that it might take years to spot.
We are just doomed.