Reference Architectures for Critical Domains