An AI regulation strategy that could really work