Architecture Level Qualitative Reasoning About Safety