“It is currently unclear how to determine if an AI control technique has been sufficiently red-teamed.”