Identifying safety properties guaranteed in changed environment at runtime | IEEE Conference Publication | IEEE Xplore