A policy says it happens.
Evidence proves it did.
The Governance Layer (GL) sits above whatever AI tools your practice already uses. It converts an undetectable fact — whether AI touched a piece of work, and whether anyone verified it — into an attestable record that stands up to a court, a regulator, or a client.
Nobody can detect AI use. That is the problem.
No court, regulator or client can look at a filed document and know which tool touched it, or whether any tool did. The only party that can ever prove it is the firm — at the moment it happens, before anyone asks.
Singapore courts have not punished lawyers for using AI. They punished them for being unable to show verification. Three costs orders in five months, against three separate matters:
In March 2026 the Ministry of Law published its Guide for using Generative AI in the legal sector. The gap it addresses is not tools. It is proof.
Personal costs order against a lawyer who filed AI-assisted work. [2025] SGHCR 33
Costs against counsel for filings containing material no one could show was verified. [2026] SGHC 16
Costs against two lawyers in the same matter, AI-assisted filings filed without recorded verification. [2026] SGHC 49
Worldwide, a public database of court decisions involving AI-invented or misstated authority passed 2,000 cases in September 2026 — roughly ten times the year before, across more than 25 countries. The record is open to anyone.
How it works
One registry. One evidence chain. Every verdict citing the authority behind the rule that produced it.
Declare
Before a consequential action — filing to court, uploading to a tool, exporting client data — the staffer declares the intent: who is acting, which tool, how sensitive the material, whether verification happened, which matter and document.
Gate
The declared action is evaluated against the firm’s rule pack. Every matching rule fires and the most restrictive verdict wins: allow, hold for a named approver, or block — with the authority behind each rule on screen.
Seal
Every decision, approval and rejection is sealed into a tamper-evident chain. Documents are linked by SHA-256 fingerprint computed on your own device — the file itself never enters the layer.
Two tiers of rules. Most restrictive wins.
The regulatory floor
Encoded from primary Singapore authorities — court guides, the MinLaw Guide, PDPA — and non-negotiable. A firm cannot weaken the floor. We decline in writing if asked.
The house rules
The firm’s own policies, set with its counsel — what is confidential here, which tools are approved, who signs off on what. Counsel’s interpretation governs. When both tiers speak, the most restrictive verdict wins.
What it is not
- Not an AI tool — it contains no AI and judges no output
- Does not check accuracy or citations — verification is the professional’s act; the layer proves it happened
- Never reads or stores your documents
- Not surveillance of drafting — ordinary work passes untouched
- Not a hosted SaaS — it runs on your own infrastructure
The honest boundary
The attestation certifies what was governed. It never claims nothing else occurred. A record that admits its limits is the only kind a court will trust.
Built for practices an authority can question
Talk to us.
A live demonstration on real decision data: a filing blocked for missing verification, confidential material blocked from a consumer chatbot, the same material held for one approver in an approved tool, and the fingerprint that ties a decision to the exact document it governed.
The Governance Layer is built and operated by CXO Consulting, and taught alongside the AI governance curriculum at CXO Academy.