Provably safe autonomous guidance and control for in-orbit assembly