Beyond Algorithms: Toward A Normative Theory Of Automated Regulation