Safety Evidence Traceability: Problem Analysis and Model