Who is Liable When AI Agents Go Rogue?