Provable Adversarial Safety in Cyber-Physical Systems