An early warning system for novel AI risks