📝 counselos builds Mike a European in-house legal desk 2 commits 2mo ago contract-reviewcompliance draft
Five new review workflows turn the codebase into something an EU legal team can actually run on day one.
counselos/mike-inhouse
Mike extended for EU/UK in-house counsel, with hardened production defaults for privileged document handling
counselos/mike-inhouse extends willchen96/mike with five built-in workflows aimed at EU/UK in-house legal teams - NDA playbook review (RED/AMBER/GREEN), GDPR Article 28 DPA review, EU AI Act vendor addendum review, MSA/order-form red-flag memo, and vendor intake triage - alongside Mike's original three finance workflows. Three production defaults are changed: document text and LLM stream content is gated behind MIKE_DEBUG_STREAMS=1 so nothing content-bearing lands in container logs or backups by default; download URL signing requires a deployment-specific DOWNLOAD_SIGNING_SECRET (minimum 32 characters) with no fallback; and the server refuses to start without it. Three EU tabular-review column presets round out the data-extraction side: sub-processors (bulleted list with name/service/country), transfer mechanism (closed enum), and AI Act role allocation.
The security changes are the most portable part of this fork. The LLM log gating and the startup check are narrow, clean changes that apply to any Mike derivative handling privileged documents.
What's in it
- In-house EU workflow pack Five built-in workflows aimed at in-house counsel: NDA-vs-playbook review, GDPR Article 28 DPA review, EU AI Act vendor addendum review, MSA red-flag memo, and vendor intake triage.
- EU tabular review presets Column presets for tabular review tuned to in-house concerns - sub-processors, transfer mechanism, and AI Act role.
- Mike-InHouse positioning Rebranded and repositioned for in-house EU and UK counsel, with the README rewritten as a pitch for that audience rather than generic setup notes.
- Production-minded defaults Tightened defaults around logging and signing-secret handling - small signals that someone is thinking about operating this, not just running it locally.
Direction
contract-reviewcompliancebranding
Activity
📝 counselos repoints Mike at Europe's in-house legal desks 2 commits 3mo ago contract-reviewcompliance draft
The fork sheds its transactional-finance origins and rebuilds around GDPR, the EU AI Act, and the vendor paperwork in-house teams actually face.
📝 counselos slams the door on guessable download links 1 commit 3mo ago securityinfrastructure draft
A fork tuned for in-house legal teams now refuses to start unless someone has set a real signing secret.
📝 counselos stops Mike from leaking privileged documents into the logs 1 commit 3mo ago securitycompliance draft
A legal-AI fork quietly closes a hole that was writing document excerpts and file names into production logs by default.
📝 counselos teaches Mike to read DPAs like a privacy lawyer 1 commit 3mo ago contract-reviewcompliance draft
Three new extraction columns pull sub-processors, data-transfer mechanisms, and EU AI Act roles straight out of data processing agreements into a clean table.
Threads of work (detailed view)
counselos builds Mike a European in-house legal desk
Five new review workflows turn the codebase into something an EU legal team can actually run on day one.
Five EU/UK in-house workflows added alongside Mike's original three finance workflows
counselos adds five built-in workflows targeting EU/UK in-house counsel - NDA playbook review, GDPR Article 28 DPA review, EU AI Act vendor addendum review, MSA/order-form red-flag memo, and vendor intake triage - and after an initial "replace" commit, reverses course and restores the three upstream finance workflows as well. The result is eight total built-ins.
counselos repoints Mike at Europe's in-house legal desks
The fork sheds its transactional-finance origins and rebuilds around GDPR, the EU AI Act, and the vendor paperwork in-house teams actually face.
counselos slams the door on guessable download links
A fork tuned for in-house legal teams now refuses to start unless someone has set a real signing secret.
DOWNLOAD_SIGNING_SECRET made mandatory at startup - silent fallback removed
counselos removes the `"dev-secret"` fallback from `downloadTokens.ts` and adds a boot-time check that prints a helpful error and exits if `DOWNLOAD_SIGNING_SECRET` is missing or shorter than 32 characters. Any deployment without the variable set won't start.
counselos stops Mike from leaking privileged documents into the logs
A legal-AI fork quietly closes a hole that was writing document excerpts and file names into production logs by default.
Content-bearing LLM and document logs gated behind MIKE_DEBUG_STREAMS flag
counselos wraps every log site in the document pipeline and LLM stream handlers that emits filenames, storage paths, or document text behind a `MIKE_DEBUG_STREAMS=1` env flag, off by default. Three files, around 50 net lines. With the flag off, none of that content reaches container logs, backups, or your SIEM.
counselos teaches Mike to read DPAs like a privacy lawyer
Three new extraction columns pull sub-processors, data-transfer mechanisms, and EU AI Act roles straight out of data processing agreements into a clean table.
Three EU column presets added to tabular review (sub-processors, transfer mechanism, AI Act role)
counselos adds three column presets to `columnPresets.ts` that fire on EU/GDPR-flavored column headers and produce tightly constrained output: structured bullet lists for sub-processors, a closed enum for transfer mechanisms, and a defined actor taxonomy for AI Act roles. One file, 18 lines, no schema changes.