Safety Design for Space Systems