Tag risk-based AI regulation