The COMPASS Approach: Correctness, Modelling and Performability of Aerospace Systems