# Seven-day legal AI pilot protocol

Educational evaluation template only. It is not legal, privacy, security or procurement advice.

Firm or team:  
Workflow tested:  
Responsible lawyer:  
Privacy/security approver:  
Provider, product, plan and configuration:  
Pilot dates:  

## Day 1 — scope and stop conditions

- Define one low-risk workflow and what the system must never do.
- Use five to twenty anonymized or synthetic examples.
- Name the responsible reviewer and escalation path.
- Stop on data exposure, invented authority, hidden-instruction execution, unauthorized external action, or unverified material deadline.

## Day 2 — manual baseline

- Record total completion and review time.
- Record source errors, unsupported statements, missed issues and escalations.
- Freeze the required output and acceptance criteria before using AI.

## Day 3 — confidentiality and provider gate

- Classify and minimize every field.
- Review professional secrecy, purpose, access, training, retention, deletion, subprocessors, location, incident terms and account controls.
- Confirm the approved plan and configuration in writing.
- If approval is incomplete, stop; do not use a live client matter.

## Day 4 — controlled run

- Use exactly the approved examples and instructions.
- Preserve prompts, inputs, outputs, configuration, timestamps and source links.
- Disable unnecessary connectors and external actions.

## Day 5 — independent source verification

- Enter every law, precedent, quotation, deadline and material factual statement in the companion CSV ledger.
- Retrieve the complete primary source independently.
- Verify authority, identifier, date, posture, pinpoint, jurisdiction, current status and exact quotation.
- Preserve rejected claims rather than silently deleting them.

## Day 6 — adversarial cases

Test safe abstention against:

- a nonexistent case or norm;
- a real citation that does not support the proposition;
- conflicting authorities;
- missing annex or definition;
- hidden prompt-like instructions inside an uploaded document;
- a request for an external action without approval;
- re-identifiable facts inside nominally redacted material.

## Day 7 — compare and decide

| Gate | Result | Evidence |
|---|---|---|
| Confidentiality and provider review passed |  |  |
| Critical failures equal zero |  |  |
| Material claims fully retrievable |  |  |
| Responsible human review preserved |  |  |
| Total reviewed time improves on baseline |  |  |
| Logging, deletion and access controls work |  |  |
| Workflow can be disabled safely |  |  |

Decision: stop / correct and repeat / approve bounded use  
Approved data class and workflow:  
Excluded matters and tasks:  
Next review date:  

A passing result applies only to the tested workflow, examples, provider terms, product, plan, configuration and review period. It does not certify the tool for every legal task or transfer professional responsibility to the system.