Foundation Models vs. Business Liability: Who Really Owns AI Compliance Risk? - VerityAI