Product desk

LegalLens system

Ten intents, twelve APIs, eighteen services, ten operations, twelve security domains, one production diagram, eight incident phases, ten attorney-review stages, twelve threat categories, ten UX stages, ten audit layers, twelve business-logic domains, ten schema domains, fourteen API wiring rows, twelve event streams, twelve performance domains, ten recovery layers, twelve cost domains, ten deploy layers, twenty V–Z governance layers, four live desks. LegalLens picks the engine. Worksheets are not a filing. Not legal advice.

Reason

DeepSeek-R1 + record neighbours

Appeals, case law, and eligibility questions. Cites stored LegalLens records only.

Draft

Calme LegalKit

Motions, letters, contract review, and legal summaries via Calme LegalKit.

Forms

Form Filler worksheets

USCIS and DOS worksheets with official instructions, jurisdiction checks, and human review. Questions can show in your language; filing answers stay English.

Translate

Argos + standing rules

Official-document translation with standing rules. Argos first, never the parse box.

Routing matrix

System architecture

1. Data ingestion. Court, USCIS, DOS, and Federal Register crawls. Each page is hashed and timestamped.
2. NLP processing. Heading NLP segments sections and maps them to form fields on Diff the Law snapshots.
3. Change detection. Line and section diffs for instructions, regulations, and case-law pages.
4. Learning. Training JSON and extracted rules store on each change. News embeddings refresh from those summaries.
5. Knowledge. Frozen form catalog, jurisdiction profiles, and rule JSON. Catalog is never auto-written from a crawl.
6. RAG. Gemini 1024-d embeddings in Supabase pgvector. Chat and Like cases retrieve current records.
7. Reasoning. DeepSeek-R1, then Saul, then Vistral. Hard rule engine stays in front of the models.
8. Form filling. Instruction engine, skip logic, evidence rules, Argos display, finalization validator.
9. Risk flags. Criminal, immigration, relationship, and naturalization flags that stop auto-finalize.
10. Data reuse. Name, address, employment, travel, marriage, and immigration history from the signed-in record.
11. Multilingual. Argos plus standing rules. English instructions stay canonical for official answers.
12. Attorney review. Dashboard, audit trail, document hash, model version, and human approval before export.

Production architecture

Seven bands on the hosts that already run. Catalog stays frozen. Crawls do not retrain. User data is not training data.

User clients
  Attorneys • Paralegals • Clients     /profile
           |
API gateway
  Auth • Routing • Rate limit • Log    POST /api/system
           |
Core desks
  Auth                                 /profile
  Ingest • Version • NLP • Changes     /diff-the-law
  Rules • Schema • Forms • Risk        /form-filler
  Evidence • Reuse • Review            /form-filler
  RAG                                  /like-cases
  Reasoning                            /chat
  Translate                            Argos
  Scan                                 /document-scanner
           |
Model layer
  DeepSeek-R1 then Saul then Vistral   POST /api/chat
  Crawls do not retrain
           |
Storage
  Supabase Postgres + pgvector 1024-d
  Parse droplet extract-only
           |
Security
  Signed-in AI • BotID • TLS           GET /api/system/security
  Frozen catalog • no auto-file
           |
DevOps
  encoding + python-backend            GET /api/system/ops
  Vercel production legallens.news

System APIs

Twelve contracts on the desks that already run. Catalog stays frozen until a person reviews a Diff the Law change.

System services

Eighteen services on the same four desks. Each can be updated in place. Catalog stays frozen until a person reviews a Diff the Law change.

Operations

Ten operations on Vercel, GitHub Actions, and Supabase. Encoding and python-backend gate every merge. Catalog stays frozen. Crawls do not retrain models.

Security and compliance

Twelve controls on the hosts that already run. Chat is signed-in. User data is not training data. Catalog stays frozen. No auto-file.

Incident response

Eight phases on live controls. Classify on POST /api/system/incident. That call does not isolate hosts, rotate secrets, or file.

Attorney review

Ten stages on Form Filler, Document Scanner, and Argos. Three outcomes: approved, approved with conditions, rejected. POST /api/system/review classifies. It does not set humanReviewed, export, or file.

Threat model

Twelve attack surfaces on the hosts that already run. POST /api/system/threat classifies. It does not lock accounts, rotate secrets, crawl, retrain, isolate, or file.

User experience

Ten stages from welcome through filing guidance. POST /api/system/ux classifies. It does not create profiles, set humanReviewed, export, or file.

Audit trail

Ten layers on the job log, Diff the Law hashes, Form Filler findings, and attorney review. POST /api/system/audit classifies. It does not insert a job, seal a hash chain, export, or file.

Business logic

Twelve domains from intent through audit. Schema mismatch never rewrites the catalog. POST /api/system/logic classifies. It does not write answers, set humanReviewed, export, or file.

User input
→ Intent
→ Form schema
→ Skip logic
→ Rule engine
→ Validation
→ Evidence
→ Multilingual
→ RAG
→ Reasoning
→ Risk flags
→ Attorney review
→ Audit
→ Worksheet (not a filing)

Database schema

Ten domains mapped onto Diff the Law, frozen form_instructions, article_embeddings, profiles, and Form Filler. POST /api/system/schema classifies. It does not create a table, migrate, reindex, export, or file.

API wiring

Fourteen dump endpoints mapped onto live desks, business logic, and stores. POST /api/system/wiring classifies. It does not crawl, retrain, write answers, set humanReviewed, export, or file.

API Gateway
→ API Endpoint
→ Business Logic Layer
→ Live desks
→ Frozen catalog / RAG / DeepSeek-R1
→ Postgres + pgvector
→ Audit catalog

Event streams

Twelve dump streams mapped onto Diff the Law hashes, frozen form_instructions, Form Filler findings, and attorney review. POST /api/system/events classifies. It does not emit a bus event, crawl, retrain, rewrite the catalog, export, or file.

Official page hash
→ DocumentIngested
→ heading-nlp-v1 + snapshot
→ ChangeDetected (person reviews)
→ Catalog stays frozen / modelRetrain stays false
→ User answers
→ Form Filler findings
→ Risk flags until a person reviews
→ Attorney review classifies
→ Worksheet (not a filing)

Performance

Twelve dump domains mapped onto Vercel, Supabase, Upstash, and frozen form_instructions. POST /api/system/performance classifies. It does not retune indexes, autoscale, reindex, crawl, retrain, export, or file.

Caching → frozen catalog + Vercel
Batching → like-cases neighbours
Scaling → Vercel serverless
Rate limits → Upstash
Inference → DeepSeek-R1 then Saul then Vistral
RAG → 1024-d pgvector
Rules → Form Filler
Updates → Diff the Law hashes
Attorney review → classify only
Audit → catalog
Postgres → Supabase
Global → production aliases

Disaster recovery

Ten dump layers mapped onto Vercel aliases, Supabase point-in-time recovery, frozen form_instructions, and Diff the Law hashes. POST /api/system/recovery classifies. It does not fail over a region, promote a replica, reindex, crawl, retrain, export, or file.

Vercel production aliases
→ Supabase Postgres + point-in-time recovery
→ pgvector 1024-d
→ Document Scanner + parse extract
→ DeepSeek-R1 then Saul then Vistral
→ Frozen form_instructions
→ Diff the Law hashes
→ Vercel serverless
→ Incident playbook
→ Audit catalog (not a filing)

Cost

Twelve dump domains mapped onto Vercel serverless, Hugging Face chat, Supabase, Upstash, and frozen form_instructions. POST /api/system/cost classifies. It does not autoscale, reindex, crawl, retrain, export, or file.

Compute → Vercel serverless
Inference → DeepSeek-R1 then Saul then Vistral
RAG → 1024-d pgvector
Database → Supabase
Evidence → Document Scanner
Updates → Diff the Law hashes
Audit → catalog
Network → Upstash + BotID
DevOps → encoding + python-backend
Lifecycle → frozen catalog
Global → production aliases

Deployment automation

Ten dump layers mapped onto GitHub Actions, Vercel preview then production, Hugging Face chat, and frozen form_instructions. POST /api/system/deploy classifies. It does not apply a plan, sync a cluster, reindex, crawl, retrain, export, or file.

Infrastructure → Vercel + Supabase
Source of truth → GitHub
Packaging → Next.js routes
Release → preview then production READY
GitOps → encoding + python-backend
Regions → legallens.news aliases
Models → DeepSeek-R1 then Saul then Vistral
RAG → 1024-d pgvector
Recovery → catalog

V–Z governance

Twenty dump layers from monitoring, security, compliance, reliability, and AI safety, mapped onto /api/metrics, Supabase Auth, BotID, frozen form_instructions, and attorney review. POST /api/system/governance classifies. It does not scrape, page, inject a fault, rotate a secret, reindex, crawl, retrain, export, or file.

V monitoring → GET /api/metrics
W security → GET /api/system/security
X compliance → POST /api/system/audit
Y reliability → GET /api/system/recovery
Z safety → POST /api/system/review
Chat → DeepSeek-R1 then Saul then Vistral
RAG → 1024-d pgvector
Rules → frozen form_instructions
NLP → heading-nlp-v1
Merge → encoding + python-backend

Job log

Routed work will appear here after you sign in. Apply the system jobs SQL if the log stays empty.

LegalLens routes work across desks. Worksheets and drafts are not a filing and not legal advice.

Reading comfort

Roomier line spacingFocus mode

Hide sidebars and newsletter prompts while reading.