Synergistic Redundancy: Towards Verifiable Safety for Autonomous Vehicles