Who should be held accountable when an AI Agent (accidentally) acts maliciously?