To fill the void in federal rules, autonomous tech companies need to show local governments that their systems have been independently vetted.