Safe-by-Design