Primary AI liability should rest with deployers, not developers. Chen (2026) develops a user-centric governance framework grounded in proximity, control, and expertise, and resolves the black-box API challenge through a spectrum-of-control approach in which deployer obligations intensify with actual control and enhanced provider disclosure compensates for reduced deployer visibility.