Architectural Reference Models For Safety-Critical Systems