Having a few fault injection scenarios is baby steps. Next would be Jepsen-style testing, and most mature would be formal verification.