Bootstrapping confidence in future safety based on past safe operation