Model-driven round-trip software dependability engineering