Formal safety assessment of ships