policy: Legal "Privileged Document Access" Gate

[akarlaraytu]

📘 Context

A legal AI assistant operating across attorney-client privileged documents must
enforce a strict access policy to prevent inadvertent disclosure of privileged
material to unauthorized internal or external parties.

This policy acts as a deterministic gate before any document retrieval, summary
generation, or external sharing operation involving documents in the privilege
register.

🎯 The Goal

Write a privileged document access policy for a legal AI assistant.

Variables you can use:

• document_privilege_status (Enum): "PUBLIC", "INTERNAL", "ATTORNEY_CLIENT", "WORK_PRODUCT", "JOINT_DEFENSE".
• requester_role (Enum): "PARTNER", "ASSOCIATE", "PARALEGAL", "CLIENT", "OPPOSING_COUNSEL", "EXTERNAL".
• matter_id_match (Boolean): Whether requester is on the document's matter team.
• litigation_hold_active (Boolean): Whether a legal hold applies to this document.
• redaction_required (Boolean): Whether the document needs redaction before sharing.
• partner_approved (Boolean): Whether a supervising partner approved the request.
• requested_action (Enum): "READ", "SUMMARIZE", "EXPORT", "EMAIL_EXTERNAL".

Requirements:

• BLOCK if document_privilege_status == "ATTORNEY_CLIENT" and requester_role == "OPPOSING_COUNSEL".
• BLOCK if matter_id_match is False and document_privilege_status != "PUBLIC".
• BLOCK if requested_action == "EMAIL_EXTERNAL" and redaction_required is True and partner_approved is False.
• BLOCK if litigation_hold_active is True and requested_action == "EXPORT".
• ESCALATE if requested_action == "EXPORT" and document_privilege_status == "WORK_PRODUCT".
• ESCALATE if requester_role == "EXTERNAL".

📚 Resources

• Start here: docs/getting-started.md
• Check syntax: quickstart/01_hello_world.csl
• See how examples are structured: examples/community/

✅ Definition of Done

Submit a PR with: examples/community/legal_privileged_document_access.csl