Buying or deploying an AI tool? Here is how to run a defensible AI vendor risk assessment that satisfies the EU AI Act and your enterprise buyers.