Capability-based Regulation