We need to avoid a 'ready, fire, aim!' approach to AI regulation