Legal Arcana is a rank-1 ecosystem service designed to manage the full lifecycle of legal documents across Arcanada — Privacy Policy, Terms of Service, Cookie Policy, DPA, EULA, employment contracts — with linear versioning and effective dates. Multi-country compliance overlays are planned to cover GDPR (EU), CCPA (US-CA), LGPD (BR), 152-FZ (Russia), and Kazakhstan Law 94-V.
The append-only user-consent registry is designed to cross-link with Auth Arcana via auth_user.id, providing one source of truth for consent attestation across the entire ecosystem. Legal Consul is a planned hybrid AI agent — read-only site audits (AAL L4) plus text-mutation suggestions (AAL L2 ceiling, mandatory human approval). The service is in active development — Phase 0 bootstrap is complete; the backend and the standalone legal.arcanada.ai landing site are next on the roadmap.
- Status
- In development
- Autonomy (AAL)
- L1 → L3
- Stack
- NestJS, Postgres, Prisma
- Jurisdictions
- EU, US-CA, BR, RU, KZ (planned)
01
One source of truth for consent
The append-only consent registry is designed to be cross-linked with Auth Arcana through auth_user.id, so that consent attestation lives in one place for the whole ecosystem.
Legal Consul: two modes, two ceilings
Legal Consul is a hybrid AAL agent. Its read-only site audits would run at L4 autonomy; its text-mutation suggestions for policy refresh stop at an L2 ceiling and always need human approval.
It is designed to watch regulator feeds, update the legal corpus and emit Datarim backlog tasks when policies drift on consumer sites. The agent is not built yet.
Capabilities
Planned
- Multi-country compliance overlays — GDPR, CCPA, LGPD, 152-FZ (Russia), Law 94-V (Kazakhstan)
- Legal Consul AI agent — read-only site audits across ecosystem properties (AAL L4)
- Legal Consul AI agent — text-mutation suggestions for policy refresh (AAL L2 ceiling, human approval mandatory)
Status not stated
- Versioned legal documents (Privacy / ToS / Cookie / DPA / EULA / employment contracts) with effective dates
- Append-only user-consent registry, cross-linked with Auth Arcana via auth_user.id
- LLM-assisted translation pipeline via Model Connector (operator-edited drafts, no auto-publish)
- Ecosystem-native — identity via Auth Arcana, LLM routing via Model Connector, retrieval via Scrutator, episodic memory via LTM
Current autonomy level
Weakest link
Live prod API at legal-api.arcanada.ai (health 200, classified 400/404/422, pino logs) shipped in LEGAL-0059 — no longer Phase 0. Held at L1 by the missing Ops-Bot post-run integration (deploy job disabled, key unprovisioned) and the still-unbuilt Legal Consul agent, admin UI, and consent gates.
Roadmap to L3
- Phase 0 → Phase 1 — finish backend NestJS skeleton on Postgres + Prisma + admin UI for policy authoring; bring legal.arcanada.ai landing site online.
- Phase 1 → Phase 2 — wire consent integration into Auth Arcana signup/login flow + embeddable consent snippets for ecosystem sites.
- Phase 2 → Phase 3 — deploy Legal Consul agent (regulator-feed watcher + site-audit + Datarim backlog emit).
- Phase 3 → Phase 4 — multi-country compliance overlays + jurisdiction-aware split-storage migration (RU/KZ data residency per 152-FZ + Law 94-V).
Next step
Review the current build and its development plan
BUILDING means active development, not a promise of public availability. Use the current capabilities and roadmap above as the reference.
Review the path to the target level