Multi-objective optimisation of safety-critical hierarchical systems