Can We Trust This AI Agent? A One-Day Hands-On Risk Review Sprint