Towards approval of autonomous ship systems by their operational envelope