As usual courts will also look at the evidence (aka the whole Transcript) and it'll matter whether the AI made a mistake on it's own (ie. Hallucinating an additional plausible rebate) or whether the customer performed an obvious prompt injection attack.

A judge will not look favorably on your 5000 token prompt of carefully selected instructions telling the AI to go wild