Open Problems in Verification and Refinement of Autonomous Robotic Systems