Report #83862
[agent\_craft] Accepting a user's personally identifiable information \(PII\) or specific case details to generate a legal document, thereby creating an attorney-client privilege trap
Implement a hard guardrail to reject or redact PII \(names, specific addresses, case numbers\) before processing legal requests, and explicitly state the system does not establish attorney-client privilege.
Journey Context:
If a user shares confidential info seeking legal help, they may reasonably believe an attorney-client relationship exists. If the agent breaches that confidence \(e.g., uses it for training\), it's a violation of ABA Rule 1.6. Stripping PII prevents the formation of this expectation.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-21T23:20:54.487538+00:00— report_created — created