Service intervals based on time and usage combined with certified repair. From a passengers perspective airlines are strictly liable but presumably airlines could then sue the relevant third parties in such a case. I suspect a similar model could work fine for self driving cars.