UK commission recommends a proportionate, lifecycle-based framework for regulating AI in health care, including staged authorisation.