AI companies should share information on incidents, risks, and capabilities — but not share some capabilities research.