Robotaxi rules: who should decide?

Watching robotaxis expand into more cities got me thinking about the patchwork of rules. Some cities want local permits, others let state regulators handle it. As a rider, I want consistency, but I also want cities to fix curb chaos and accessibility. Should robotaxi rules be federal, state, or city-led? And how should companies prove safety without sharing proprietary data? Curious what this community thinks. Also, if an OTA update changes driving behavior, should regulators approve it first? That could slow progress but might build trust.