Safety demonstration of autonomous vehicles: a review and future research questions