A SAFE SUPERVISORY FLIGHT CONTROL SCHEME IN THE PRESENCE OF CONSTRAINTS AND ANOMALIES