We opened a mock clinical AI agent to three days of red-teaming. Here's what held, what didn't, and what we're not claiming yet.