Safety testing was an obscure part of building AI. Then models went rogue.