Regulating gun ownership is exactly regulating the application.
In your analogy, the gun is the AI. What you can do with the gun is the application.
Different actors with different credentials in different contexts will have different requirements and permissions of what they can do with the technology, be it a gun or AI.