SACCO-SYCOJET: two different ways of verifying knowledge-based systems