A human is not punished, the access of the robot to the API is restricted. The human has not suffered any damage.

You’re responsible for the things your AI agent does.