  Autonomous systems are often deployed in complex sociotechnical environments,
such as public roads, where they must behave safely and securely. Unlike many
traditionally engineered systems, autonomous systems are expected to behave
predictably in varying "open world" environmental contexts that cannot be fully
specified formally. As a result, assurance about autonomous systems requires us
to develop new certification methods and mathematical tools that can bound the
uncertainty engendered by these diverse deployment scenarios, rather than
relying on static tools.
