Model-driven design-runtime interaction in safety critical system development: An experience report