SAFETY DESIGN FOR SPACE SYSTEMS