Assuring Autonomy