Running Evidence-Based AI Risk Assessments