How states are placing guardrails around AI in the absence of strong federal regulation