Managing uncertainty in bidirectional model transformations