Have you considered instituting a formal quality system? I'm not even saying that it's an alternative to or incompatible with licensing, but there are off-the-shelf standards for software process and quality you can download and implement today without government action.
A surgeon doesn't get to time-travel and test 1000 different ways to make a cut. You don't get to build 1000 bridges in the same location for load testing. But with software we can have a final deliverable that remains inert if you put quality gates between the development process and deployment. There is a very strong argument that when it is possible to have process and testing to hold the deliverable itself to the standards, that puts more confidence in the deliverable than just practitioner sign-off that it's right.
A surgeon doesn't get to time-travel and test 1000 different ways to make a cut. You don't get to build 1000 bridges in the same location for load testing. But with software we can have a final deliverable that remains inert if you put quality gates between the development process and deployment. There is a very strong argument that when it is possible to have process and testing to hold the deliverable itself to the standards, that puts more confidence in the deliverable than just practitioner sign-off that it's right.