Developers should bear legal responsibility when their autonomous AI agents access external systems without authorisation