Safe Multi-agent Learning via Trapping Regions