Fail-Safe Testing of Safety-Critical Systems