AI models can be dangerous before public deployment

Why pre-deployment testing is not an adequate framework for AI risk management