Strategic robustness in bi-level system-of-systems design