David Kernohan reviews the Welsh tertiary regulator's attempts to combine the best of rule- and principles-based regulation