Foundations of trusted autonomy