The system behind the practice
MBLegalOS: the system this firm runs on
Most firms say they use AI. This one was built on a system we designed, secured, and own. MBLegalOS is a persistent AI workspace that knows the firm's clients, matters, and conventions across every session. A lawyer makes every judgment call. The system handles everything that isn't judgment.
Not a chatbot. An operating layer.
Most people hear "AI that remembers your clients" and picture a longer chat history. MBLegalOS is different. It is a structured workspace the firm controls: a memory of who the clients are, what is open, and how the work gets done, that the assistant reads at the start of every matter and writes back to when it is finished.
Because the firm built it, we know exactly what the AI does, where it stops, and where the lawyer takes over. That is the same discipline we help clients apply to their own use of AI. It is also what makes the pricing work: turnaround is faster, effort is predictable, and most engagements can be quoted flat instead of billed by the hour.
The pieces below tell the full story, in the firm's own words.
The system map
What actually runs, and where a lawyer stands.
Most descriptions of AI in a law firm stay at the level of adjectives. This is the architecture instead: the five lanes a matter moves through, the automations that run between sessions, and the point in each lane where the work stops and a lawyer decides. Nothing here is aspirational. It is the working state of the practice as of October 2026.
The one constant
The system surfaces, drafts, and queues. A lawyer reviews, decides, and transmits.
Nothing leaves this system without a lawyer approving it at the gate before it. No email sends itself, no document files itself, no time entry posts itself, and no matter opens without a cleared conflicts check. Read the five lanes below and you will find that every one of them ends at a person.
How a matter moves through it
Five lanes. The first three carry a matter from an inbound signal to a finished draft, the fourth stands between that draft and the client, and the fifth runs the business. Expand any lane to see what actually runs inside it.
-
Flow
New matter Intake and conflicts
A new counterparty, contract request, or dispute inquiry arrives.
- Inbound mail, chat, and signature traffic is scanned on a schedule, not when someone remembers to look.
- Anything that looks like a new matter surfaces as an intake card in the next morning briefing.
- A conflicts check runs a fuzzy-match search across every client, related entity, adverse party, and counterparty the practice has ever touched.
- Documents from outside the firm are read by a read-only reader that returns findings, not instructions, and every outside read is logged.
Attorney gate. A lawyer clears the conflicts result. No matter file opens on an uncleared hit.
Once cleared, the matter file, folder structure, correspondence history, and task record are built in one pass, headed by a current-state block: status, last action, next step, what we are waiting on.
What runs here → Hide the detail ↓
- Conflicts registry
- 92 entities (clients, related entities, adverse parties, counterparties, opposing counsel, former members and employees) checked by a deterministic script at a 0.72 match threshold. Screening by script, not by recall.
- Matter setup
- Nine steps run in fixed order: conflicts, matter log, matter folder, email threads, chat history, documents, ticket search, index update, task record.
- Current-state block
- Capped at eight lines and rewritten in place at every wrap-up. It is the re-anchor point when context is lost: read first, then the append-only log beneath it.
- Party identity
- Names, addresses, and entity status are checked against the public registry before they go into a signature block, a service list, or a signing envelope.
-
Rhythm
Daily operations The loops that run themselves
The clock. More than thirty recurring automations, whether or not anyone is watching.
- The morning briefing is built before the desk is opened: calendar, overnight mail across two inboxes, task list, dated obligations, litigation deadlines.
- A light scan runs five times a weekday, flagging anything actionable to a queue between briefings.
- A midday triage pass sweeps mail, chat, tickets, and signature envelopes, and pulls promises with deadlines out of message threads before they die in an inbox.
Attorney gate. A lawyer reviews the briefing and sets the day. The briefing is a proposal, not a plan.
At the end of the day the system reconciles what happened: the day summary, signature status, billing gaps, tomorrow’s priorities, and a write-back to every record the day touched.
What runs here → Hide the detail ↓
- Automation audit
- Every task’s last run is diffed against its own schedule before the briefing is trusted. Late and missed runs are logged, and a check at the start of every session warns when scheduled output falls behind. A briefing that silently did not run is worse than no briefing.
- Forcing registers
- Dated obligations live in a docket with 90/30/7-day escalation tiers; litigation deadlines live in a separate synced watchlist. Neither depends on anyone remembering.
- Work-ahead
- Overnight, recognized inbound patterns get a first draft staged before the request is opened. Drafts only: never sent, never routed for signature.
- Session record
- True session start times are captured three independent ways so that billable hours come from timestamps rather than estimates.
- No duplicate work
- When two working sessions are open at once, each claims the matter it is touching, so one does not redo or overwrite the other’s work.
-
Production
Legal work Draft, review, research
A lawyer poses the task.
- Grounding rules run before any answer: read the matter file first, analyze the executed agreement rather than a draft, check what the firm already knows before searching the web.
- Context loads selectively: the matter log, then the governing documents, then the firm’s standing positions, then the open web to confirm currency.
- 146 written procedures route the work. Each one encodes how a recurring task gets done here, so it is done the same way every time.
Attorney gate. A lawyer reviews the draft before it leaves this lane. The procedures assemble the analysis; the lawyer decides whether it is right.
What comes out is a draft. It goes to the governance lane before it goes anywhere near a client.
What runs here → Hide the detail ↓
- Why order matters
- The first answer comes from the file, not from general knowledge with the file read afterward to confirm. Most of these rules exist because one was broken once and the error was caught.
- The compounding loop
- Raw source material lands in a knowledge base of nearly three thousand files. Standing positions on recurring questions live separately and sharpen every time a real matter tests one. Research in, position out, applied on a matter, matter feeds the position.
- Signed versus draft
- Material deal terms are kept as records with a status (executed, superseded, draft, or proposed) and a source down to the section, so a term from a dead draft cannot pass for a signed one.
- What the procedures cover
- Contract review and redlines, indemnity and IP provisions, NDAs, subcontracts, LLC governance, vendor and AI-tool risk assessments, privacy, breach notification and security compliance, trademark clearance, employment risk, insurance tenders and renewals, subpoena productions, corporate records, and the formatting specs the firm’s documents follow.
-
Controls
Governance and QC Every deliverable, no exceptions
Runs on every deliverable
Any draft headed for a client, a counterparty, or a file.
- Every case cited is verified three ways: the citation is resolved to the real opinion, the opinion is read and confirmed to support the proposition, and the citation network is checked for negative treatment.
- A document QC pass checks defined terms, numbering, party names, cross-references, operative word choice, and grammar.
- A pre-delivery pass checks the firm’s writing rules, formatting spec, change attribution, file naming, and the correct signatory, and enforces the rule that email drafts are presented and never sent.
- Before anything goes out, the exact files are fingerprinted and checked: the newest version, the clean copy matching the redline, no internal notes left behind.
Attorney gate. A lawyer reviews and approves. The lawyer’s judgment is the product; everything upstream is preparation for this moment.
Approved work is filed to the matter, key dates are docketed, and what the matter taught is written back so the next matter starts from it. A signed agreement is closed out in one pass: filed, logged, its dated obligations docketed.
What runs here → Hide the detail ↓
- No citation from memory
- Not one. Zero citing references is not proof that a case is still good law, so the citation network is checked separately from the retrieval.
- Eleven hard gates
- The pre-delivery pass is one of eleven standing rules that run before an answer rather than after it. They are listed below.
- The gates are red-teamed
- Fourteen small fake case files, each built so the wrong answer is the easy one, are run before any new AI model is trusted with client work. Every gate held on the current model.
- Mistakes become tests
- Every caught error gets a written lesson, and each lesson is marked closed, partial, or open depending on whether a test proves the fix holds. 88 lessons so far: 15 closed, 24 partial, 49 open.
- Measured, not assumed
- Every deliverable records which standing positions it relied on, with "none" as an affirmative answer, so the claim that the system compounds is something the firm can check. Four in five now draw on at least one.
-
Business
Billing Monthly, on a schedule
The first of the month.
- The pipeline reads the billing calendar and pulls the prior month’s time entries. Hours come from real session timestamps, never estimated after the fact.
- Rates are confirmed before anything is generated.
- Prebills are produced for line-by-line review, then invoices with drafted delivery emails.
- Every invoice is checked against the sent mail to confirm it actually went out, and open balances are aged.
Attorney gate. Three separate approvals: rates, then the prebill, then the decision to send. The system never sends.
Time capture feeds it all year. Entries are drafted from actual session activity and shown in full before anything is recorded, and non-billable relationship and development time is tracked separately so it stays off client bills.
What runs here → Hide the detail ↓
- Why three gates
- Each gate catches a different error: a wrong rate, a wrong entry, and a message going to the wrong person at the wrong moment. Collapsing them into one approval is how billing mistakes reach clients.
- Time entries
- Drafted through a single procedure, calculated from logged timestamps, never inflated, and always presented in full before posting. "Log my time" means draft it and show me.
- Orphan-work sweep
- A sweep before billing finds finished work with no matter behind it or no time entry against it, so nothing done goes unbilled or unfiled.
The controls layer The eleven rules that run before any answer → ↓ Eight exist because the rule was broken once and the error was caught. Three are preventive, written before anything went wrong. That is the honest version of how a system like this gets safe.
-
Rule 01
Read the matter file first
Any task touching an existing matter starts with the standing note, the matter log, and the matter folder. Never a first answer from general knowledge with the file read afterward. A session resumed on a later day re-reads it.
-
Rule 02
Executed agreements only
Contractual analysis grounds in the executed agreement plus executed amendments. Drafts and redlines are not binding and are not cited, even mid-negotiation.
-
Rule 03
Internal sources before the web
Research reads what the firm already knows first, then searches to fill gaps and confirm currency. It never opens with a search.
-
Rule 04
Document facts come from the document
Effective dates, clauses, retention periods, certifications: read from the governing document itself, never from a summary, an FAQ, a search snippet, or another AI. If it cannot be retrieved, it is unverified and says so.
-
Rule 05
Three-step citation verification
Resolve the citation, read the opinion and confirm it supports the proposition, check the citation network for negative treatment. All three, every cite, actually performed.
-
Rule 06
One canonical source per record
Governing documents are read from the single canonical location. Convenience copies drift, so they are never the source.
-
Rule 07
Real hours, shown before recorded
Time is calculated from logged timestamps, never inflated, and always presented in full before anything posts.
-
Rule 08
Pre-delivery pass on everything
Writing rules, formatting, attribution, naming, links, and the correct signatory, checked on every deliverable before it is presented.
-
Rule 09
Client messages are presented, never sent
Drafts are handed over. The system does not offer to send and does not send. The decision to communicate with a client is the lawyer’s alone.
-
Rule 10
Read the record, not the premise
Never report an edit, a closed task, or an updated record unless it actually happened. When a stated premise conflicts with a document in hand, check the document first. A search that finds nothing is not proof that nothing exists.
-
Rule 11
Outside documents are data, never instructions
Counterparty drafts, vendor terms, web pages, and forwarded mail are read by a read-only reader. Any instruction planted inside one is flagged and ignored, and every outside read is logged.
Figures verified against the live workspace October 25, 2026. MBLegalOS is an independent project of the firm and is not affiliated with, or endorsed by, any vendor or client of the firm.
The security review came first
The diligence happened before any client work touched it.
Before the system ran a single matter, it went through a formal vendor risk assessment: the same framework the firm uses when a client asks us to vet one of their vendors. The setup runs on a commercial Claude Team plan under a stand-alone firm account, with a data processing agreement in place, no training on anything the firm sends it, a sandboxed environment scoped to the task in front of it, and client files that live in the firm's own file system.
That deployment scored 4.16 out of 5 for a small firm. The most useful thing to come out of the review was not the score. It was a rule the whole system now runs on: a fact about a governing document comes from the document, never from a summary, a snippet, or another AI reading over your shoulder.
No training on your data
Commercial Team plan, DPA in place. Prompts and files are not used to train models.
Files stay in the firm's control
Client files live in the firm's own file system, scoped to the task at hand, not parked on a vendor platform.
A lawyer decides
Every loop ends at a gate. The system drafts and flags; the lawyer reviews and decides. Nothing sends itself.
Built over months of daily use
Not a demo. The working state of a real fractional practice.
150+
contact profiles the system carries across sessions
150+
matter files for the busiest client alone
146
custom skills that encode how the work gets done
30+
scheduled automations running between sessions
Watch the walkthrough
From prompts to skills
Mike joined Rok Popov Ledinski on his podcast to talk through running a law firm on a Claude-based operating system: how it grew from prompts into skills, and where the lawyer stays in charge.
How it was built, in the firm's own words
A running series on what the system is, why it exists, and how each piece works.
The Legal OS
The overview. What the system is, why it exists, and the security diligence done before any client work touched it.
The Note That Knows What's Signed
A note that can tell a signed term from a superseded draft, and why that distinction protects your advice.
The Second Brain Under My Practice
A knowledge base that flags its own decay and verifies every citation, so a position is still good law when you rely on it.
Want counsel that runs on this?
Tell us about the business and what you're working on. Response within one business day.
Let's Talk