Regulators are shifting the focus from splashy claims to core safety features, rethinking what autonomy should mean.