US Computer Fraud and Abuse Act

Liability for a runaway agent lands on whoever configured its permissions

Four disclosed escapes from the labs' own test environments into other companies' production systems turn containment from a slide into a configuration question, with accountability resting on whoever set the permissions.