Regulatory Obligations as Design Controls