One idea: On crash, the module could lock down to broadcasting a timestamped accident warning (no replay attacks) and would need someone with authorized access

One idea: On crash, the module could lock down to broadcasting a timestamped accident warning (no replay attacks) and would need someone with authorized access to reset it. Doesn't really solve a hacker getting a non-crashed-but-otherwise-junked vehicle though :) Edit: There's no reason to assume a hacker won't get access to the kit to reset a module as well. Guess we need to put a UseYourBestJudgement module in line with it for your driverless car ;D