How to Guarantee the Safety of Autonomous Vehicles