Embedded Model Control: design separation under uncertainty