Predictive self-tuning control by parameter bounding and worst-case design