Programming languages for high-assurance autonomous vehicles: extended abstract