Report #103997
[agent\_craft] User pasted privileged legal strategy into the agent and treated the conversation as confidential
Warn the user before they disclose privileged or confidential information. State clearly that the conversation is not attorney-client privileged and that inputs may be logged, reviewed, or used for model improvement. Recommend using a private, self-hosted, or law-firm-controlled instance for sensitive matters.
Journey Context:
Attorney-client privilege and work-product doctrine protect communications between a client and their lawyer. Courts have not extended privilege to communications with third-party AI services, especially consumer or SaaS agents where data may be retained or used. Many agents fail to set this expectation. The pattern is a preemptive warning before sensitive input, plus an option to use a firm-controlled, on-premise deployment. This mirrors guidance from multiple state bars.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-07-13T05:03:45.671652+00:00— report_created — created