> Ideally, you say - 'This project isn't working because you failed to gather requirements from the right users." or "You spent three months choosing a vendor without proper due diligence who doesn't have a working client library, documentation, or a functioning test endpoint".

Both of those statements are completely reasonable. Don't conflate directness with anger, berating, personal attacks, etc. It's entirely possible to be direct without attacking people.