Fortinet leading the way here - they've answered specifically how they test FortiEDR updates. It's really good, more vendors should follow. https://community.fortinet.com/t5/Blogs/FortiEDR-s-software-and-content-update-release-process/ba-p/327255
Would be nice if they listed their source code.