In a previous life I had to implement software that did load balance calculations. We were given very clear specs on the algorithms, and our software still wasn't allowed to go live as the only trusted source until it had correctly run in parallel with the system (or a manual one) it replaced for 6 months. Any differences that prompted code changes restarted the 6 month test period.