Safety assurance cases metamodel