Programming Languages for High Assurance Vehicles