Synthesis of insulin pump controllers from safety specifications using bayesian model validation