Design for safety with an integrated design and operational tool design-NAPA and onboard-NAPA