AI red teaming and runtime protection