> It shouldn't matter, because whoever is producing the work product is responsible for it, no matter whether genAI was involved or not.

I hate to ask, but did you RTFA? Scrolling down ever so slightly (emphasis not my own)

  | *Who authorized this class of action, for which agent identity, under what constraints, for how long; and how did that authority flow?*
  | A common failure mode in agent incidents is not “we don’t know what happened,” but:
  | > We can’t produce a crisp artifact showing that a specific human explicitly authorized the scope that made this action possible.

They explicitly state that the problem is you don't know which human to point at.