Safe Decomposition of Startup Requirements: Verification and Synthesis