Finite Safety Models For High -Assurance Systems