Who's Liable When AI Agents Escape? Hugging Face Breach Raises Hard Questions | AI Sec Watch