Before companies let bots hash out important agreements, they need clear standards regarding oversight and accountability as well as robust technical protections.