Assessing the Overall Sufficiency of Safety Arguments