As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.