Brain fade, I wasn't there so I can't really comment on the details and what conversations might have taken place on R/T or what I would have done.
I do think that responsibility rests on oneself though. As quite a few security manuals in previous and current companies would back up, as well as all the other documents and legislation at our disposal.
Common sense is the most important thing in this type of situation. Each party concerned have there own objectives and agenda's but the law states pretty clearly who is ultimately responsible.