A Structured Approach to the Formal Certification of Safety of Computer Aided Development Tools