On the Use of Artefacts as Safety Evidence: A Conceptual Model