Challenges in composing and decomposing assurances for self-adaptive systems