The agent makes a mistake that costs the customer $50K. Who's liable? How do you prevent this?

"Prevention layers:

• (1)Action limits — no single agent action can exceed $X without human approval. For financial actions, implement 4-eyes principle.
• (2)Idempotency — every write action has an idempotency key. Retries don't double-execute.
• (3)Reversibility — prefer reversible actions. Don't delete; soft-delete. Don't send; draft.
• (4)Insurance via audit trail — full decision trace proves the agent followed its instructions. Liability typically sits with the company that deployed the agent, not the model provider — your terms of service should reflect this.
• (5)Graceful degradation — when confidence is below threshold, the agent must route to a human, not guess. The meta-answer: the agent should never be the sole decision-maker for high-value actions."