Foundations of Trusted Autonomy