Four lessons from 2023 that tell us where AI regulation is going