IvanJS17/mike

A security-first legal AI workspace with tenant controls and governed bring-your-own-key model access.

Active early work: two recent changes package a broad security programme and a governed BYOK foundation, first seen and last updated on 14 August 2026.

View on GitHub →

IvanJS17 is building a legal AI deployment around tighter organisational boundaries and controlled access to external AI providers. The only identity signal available is the GitHub handle.

The fork is heading toward a multi-tenant workspace model: organisations, workspaces and matters, with role-based access controls. It also adds governed bring-your-own-key routing, so users can connect credentials for several AI providers while chats stay tied to a chosen provider, model and approved credential reference.

This looks like an early but purposeful security and deployment foundation for teams that need clearer control over access and AI credentials.

What's in it

Organisation, workspace and matter access A tenancy model for separating work and assigning role-based access across legal matters.
Security gate controls Access rules have been applied across existing public data, with verification of the intended permission matrix.
Governed bring-your-own-key access Personal provider credentials are encrypted and made available through controlled, versioned references.
Multi-provider model routing Supports approved routes across OpenAI, Anthropic, Gemini, OpenRouter, DeepSeek and OpenCode Zen/Go, with chats pinned to their selected setup.

Direction

securitymulti-tenantinfrastructure

Activity

Themed changes and pull requests touching this fork, newest first. Themed changes that haven't been turned into a public post yet still appear — they're real work even without a published writeup.

✅ #2 security: WS1 Gate A - CourtListener off, MFA, invitaciones (W1.3, W1.10, W1.11) +2,790 -7,314 35h ago self by IvanJS17 ↗ analysis ↗ GitHub

## W1.5 + W1.6 + W1.7 - Tenancy, RLS total y epochs (Gate A, items 5-7)

📝 IvanJS17 puts Mike behind a proper security perimeter 1 commit 35h ago securitymulti-tenant draft

This fork turns access control from a set of promises into rules the product actively enforces.

✅ #1 feat: add governed BYOK model routing +3,137 -108 3d ago self by IvanJS17 ↗ analysis ↗ GitHub

## Resumen

📝 IvanJS17 puts guardrails around bring-your-own AI 1 commit 3d ago securityintegration draft

This fork makes each chat's AI choice a recorded decision, with safer handling when firm credentials change.

📝 IvanJS17 locks down bring-your-own AI keys 0 commits — securitychat-ui draft

This fork turns personal AI credentials into a governed choice made once, rather than a setting that can drift mid-conversation.

📝 IvanJS17 gives Mike a hard security boundary 0 commits — securityworkflow draft

This fork turns a single-owner legal workspace into one that can enforce who sees, changes and downloads case material.

Threads of work (detailed view)

4 threads have been distilled into posts.

IvanJS17 puts Mike behind a proper security perimeter

This fork turns access control from a set of promises into rules the product actively enforces.

securitymulti-tenant

1 commit · latest 35h ago

IvanJS17 puts guardrails around bring-your-own AI

This fork makes each chat's AI choice a recorded decision, with safer handling when firm credentials change.

securityintegration

1 commit · latest 3d ago

IvanJS17 gives Mike a hard security boundary

This fork turns a single-owner legal workspace into one that can enforce who sees, changes and downloads case material.

securityworkflow

IvanJS17 locks down bring-your-own AI keys

This fork turns personal AI credentials into a governed choice made once, rather than a setting that can drift mid-conversation.

securitychat-ui

Pull requests (detailed view)

2 PRs touch this fork — inbound (filed against it) or outbound (filed from it). State icons match the editorial dashboard.

✅ Merged (2)

✅ merged · #2 security: WS1 Gate A - CourtListener off, MFA, invitaciones (W1.3, W1.10, W1.11)

by IvanJS17 · opened 2d ago · merged 35h ago by IvanJS17

IvanJS17/mike ← IvanJS17/mike · +2,790 -7,314 · self · ↗ analysis · ↗ GitHub

✅ merged · #1 feat: add governed BYOK model routing

by IvanJS17 · opened 3d ago · merged 3d ago by IvanJS17

IvanJS17/mike ← IvanJS17/mike · +3,137 -108 · self · ↗ analysis · ↗ GitHub