Safe-ROS: An Architecture for Autonomous Robots in Safety-Critical Domains