Why “it works” is no longer good enough for clinical AI