The relationship must be very strained already if they are publicly blaming each other. Customers always blame their vendors. On the Palantir side, their account/product managers should be asking whether or not their ACL config is sufficiently intuitive. If this mistake was easy for a customer to make, if it's a mistake that couldn't have been avoided without consultancy, then Palantir should treat it like a defect.