You Outsourced the AI—but You Still Own the Risk