- The course
- Session 04
Build Your Own Research Assistant — Projects, Notebooks and RAG
Retrieval as a mechanism, then a working tool: a grounded workspace over real judgments, built in ten minutes on a free account.
- 90 min
- 60 taught + 30 lab
- Engineer the context
- Build-along
- Your laptop · free tier
The lab · 30 min · The grounded workspace
The Ten-Minute Research Assistant. A grounded workspace built on screen in ten minutes: bundle, instruction set, pinpointed answers, a declined trap, the staleness catch.
The full lab planOn this page
The hook
“Everything you did yesterday dies with the chat: the judgment you pasted, the instructions you wrote, the style you taught it. A workspace is where that work stops evaporating: files that persist, instructions that persist, answers that point into your own sources. You can build one over your moot bundle in ten minutes, free, tonight. This hour, you will.”
What you'll be able to do
- Explain retrieval-augmented generation as a mechanism (retrieve from stored sources → put the passages in the window → answer with a pointer) and predict its failure modes: the retrieval miss, the wrong passage, and the model answering from prior knowledge anyway.
- Build a grounded workspace on a free tier (a NotebookLM notebook or a ChatGPT/Claude Project) over a real bundle of authorities, with an instruction set that requires paragraph citations and 'not in the sources' answers.
- Interrogate it like a lawyer: trace a doctrine through the bundle with pinpoints, test it with a trap question its sources cannot answer, and verify a sample of its citations against the documents.
- State the limits and the law: retrieval is not verification, a workspace is only as current as its bundle, grounded tools still err, and what may never go into a consumer workspace, with the statutory and professional reasons why.
On the syllabus
- What did you just paste? The opening vote
- RAG drawn: retrieve, window, answer with a pointer
- The harness zoo, and the instruction set as office policy
- The live build: interrogated, trapped, caught out of date
- Limits: retrieval is not verification; staleness; what never goes in
The session
How to build a research assistant over a real set of documents. The session explains retrieval (the tool fetches passages from the files and answers from them, with citations), then builds one live over a bundle of judgments on a free tool: an instruction set, a trap question it should refuse, and the problem of stale bundles. Also: what should never be uploaded.
Why it matters
You leave owning a research assistant scoped to your actual work (your moot bundle, your seminar sources, your internship's statutes) that cites paragraphs, admits ignorance, and costs nothing. From tonight, 'let me check my notebook' replaces 'let me ask ChatGPT', and the difference between those sentences is the difference between grounded and guessing.
What you can do on Monday
Tonight, build one: your moot problem and its authorities, or your seminar paper's sources, in a NotebookLM notebook or a free Project with the lab's instruction set. Ask it your three hardest questions and check one pinpoint per answer.
What you leave with
The skill
Build the grounded workspace: a real bundle, an instruction set that forces paragraph citations and 'not in the sources', a trap question to test it, and a bundle-currency check before you rely on it.
The insight
A workspace is a snapshot of the law, not a subscription to it. Grounding buys you pointers instead of guesses, and in exchange you inherit a new duty: keeping the bundle as current as the matter.
The moment you'll remember
The staleness catch. The room's own workspace answers the expert-certificate question confidently and, as of May 2026, incompletely, its newest source predating the Supreme Court's clarification. The order goes into the bundle live, the question is re-asked, and the answer changes, new pinpoint and all. The workspace was never wrong; it was faithful to a stale bundle. The room sees, in one beat, why grounding works and why it never replaces keeping current.
In this session
- 01
The opening mirror: a junior's prompt about a live matter goes up (names, amounts, a diagnosis-shaped fact) and the room votes on whether it is safe to send. The identifiers are highlighted and the abstraction move performed live: the same question about 'a licensee' and 'a sum' gets the same quality of answer with nobody's client in it. Behind the rule: consumer free tiers log conversations and most, by default, train on them. The opt-out switches exist and the lab flips them. A workspace makes the stakes permanent, because what you upload persists.
- 02
RAG, drawn once and properly: your documents are stored and indexed; at each question a retriever fetches the passages that look most relevant; those go into the window; the model answers from them, ideally with a pointer to where. Every strength follows: the corpus can be far bigger than any window, answers come with addresses, and the model is reshaping rather than recalling.
- 03
The three ways the clerk fails: the retrieval miss (the right passage never fetched, so the answer rests on the wrong ones), the wrong pointer (a citation to a passage that says something adjacent), and the override (the model answering from its training anyway, especially when the sources contradict what it 'remembers'). Grounded is better; grounded is not true: the Stanford benchmark of professional legal-research tools found even citator-backed systems hallucinating on roughly one query in six.
- 04
The harness zoo, demystified with one question for all four artefacts: what persists? Custom instructions: a standing preamble to every chat (free on the major tiers; small; the right home for 'always cite paragraph numbers; flag anything unverified'). A Project (ChatGPT: free tier, five files per project; Claude: free tier, five projects): instructions plus files plus chats in one container, a small RAG over your bundle. A Gem (Gemini, free): a saved instruction set with optional knowledge files. NotebookLM (free; 50 sources per notebook, each up to half a million words): the purest: source-grounded by design, every answer carrying inline citations that click through, and, unusually for a free tool, not training on uploads.
- 05
Two doors. One closed: building a custom GPT is no longer a free-tier exercise (at the time of checking, the vendor's own pages disagreed about which paid plans still allow it); the free-tier route is Projects, Gems and notebooks, and it is enough. One opened: ChatGPT Projects can now be shared, even on free accounts, so a moot team can work one workspace together, with the caveat that a shared project trains on members' data unless every member has turned training off.
- 06
The instruction set is standing orders written like office policy, where a law student's training shows: answer only from the sources in this workspace; cite document and paragraph for every proposition; where the sources do not address the question, say 'not in the sources' rather than supplement from general knowledge; where sources conflict, say which is later and which is higher; keep the research log when asked. Each line answers something Session 2 taught. This is harness engineering, policy rather than code: instructions for a junior who is brilliant, literal, and never says 'I don't know' unless ordered to.
- 07
The live build, on the bundle the course has been assembling: State v. Navjot Sandhu, Anvar P.V. v. P.K. Basheer, Shafhi Mohammad, Arjun Panditrao Khotkar and s.63 of the Bharatiya Sakshya Adhiniyam: the electronic-evidence line, at once a doctrine-tracing exercise (watch the certificate requirement fall, rise, waver and settle across four cases, with pinpoints) and the law Session 7 will need. Then the trap question the bundle cannot answer, and the workspace, under its instruction set, says 'not in the sources', the most professionally reassuring sentence a machine can produce.
- 08
The staleness catch, the moment the session is for. The workspace is asked who may sign the s.63(4) expert certificate, and answers from its newest source as if the law stopped there, because for this workspace it did. Then Pune Bar Association v. Union of India (SC, 22 May 2026), which upheld the certificate regime and read 'expert' beyond the notified s.79A examiners, is added to the bundle live; the question is re-asked; the answer changes, with a new pinpoint. A workspace is a snapshot, not a subscription: it knows nothing it was not given, including last month's law. Updating the bundle is now part of updating the matter; 'is my bundle current?' joins 'is it still good law?' on the standing checklist.
- 09
What never goes in, now as doctrine rather than caution: a consumer workspace is a standing disclosure to a third party, so client documents, instructions and identifying facts stay out, full stop. The legal frame, previewed here and completed in Session 7: privilege under s.132 BSA belongs to the client and is not yours to waive into a training corpus; the professional rules make the client's confidence your standing duty.
- 10
The statutory frame arriving on top: the DPDP Act (substantive obligations commencing May 2027) will make the advocate a data fiduciary engaging an unbriefed processor the moment client data is pasted; and In Re: Summoning Advocates (2025 INSC 1275) has already shown the Supreme Court thinking hard about what a shared repository of a lawyer's files exposes. The working rule the course will not soften: published law in, clients never. Enterprise-grade exceptions are something firms buy; free tiers do not give them.
- 11
When not to build one: a workspace earns its keep on recurring work over a stable bundle: a moot, a seminar paper, an internship's running matter, exam revision. For a one-off question, Session 3's paste-and-ask beats it. The diagnostic vocabulary grows one word: alongside the prompt ceiling and the model ceiling there is a tool ceiling. Last session's two-hundred-page judgment, which defeated the free chat window, fits inside one free NotebookLM source. Sometimes the answer is a better-shaped tool rather than a better model, and it is free.
The build-along
The room builds it and keeps it.
The class builds the thing with the presenter, the mechanism is explained as it is built, and a named skill closes the hour.
What did you just paste?
Experiment on the classOn the class
A realistic junior's prompt about a live matter goes on screen (party names, an amount, one fact that identifies the client to anyone in the sector) and the room votes: safe to send to a free chatbot?
In the model
A consumer model is a third party with a memory: conversations are logged, most free tiers train on them by default, and a workspace keeps what it is given. A paste is a disclosure; a workspace makes it standing.
Live on the model
The identifiers are highlighted, the prompt is rewritten live as an abstracted fact pattern, and both versions run. The answers are equally useful, and only one of them contains a client.
The skill
Abstract before you prompt, always. If it cannot be abstracted, you need a tool with a contract, not a consumer app on a free tier.
The ten-minute research assistant
Build-alongThe task
The room dictates the build: the five documents and, line by line, argued and voted, the instruction set: cite paragraphs; answer only from the sources; say 'not in the sources'; prefer the later and higher authority; keep the log.
Why it works
A workspace is retrieval with your name on it: persistent files, persistent instructions, answers with addresses. The instruction set is what turns a clever toy into something with office discipline.
Built live
The electronic-evidence bundle goes into a fresh notebook; the doctrine is traced through it with clickable pinpoints; the trap question comes back 'not in the sources', and the room hears a machine decline to guess for the first time.
The skill
Bundle, instructions, trap test. Ten minutes, free, and yours: the most reusable thing this course builds.
The staleness catch
DemonstrationThe room predicts
The room is asked: our workspace was built from sources ending in 2023, so who may sign the s.63(4) expert certificate? Commit to whether the workspace's confident answer is the current law.
What is going on
A grounded workspace is faithful to its bundle, including the bundle's cut-off date. It does not know the law moved, because for it, the law is the bundle.
Shown live
Pune Bar Association (SC, 22 May 2026) is added to the notebook live; the identical question re-asked; the answer changes on screen, new pinpoint attached.
The skill
Date your bundle and check its currency like you check a citator. 'Is my bundle current?' is now part of 'is it still good law?'
The legal thread
A workspace persists; what enters it is a disclosure that persists: under s.132 BSA the privilege is the client's, not yours; the professional rules make the confidence a standing duty; the DPDP Act's fiduciary-and-processor structure (substantive obligations from May 2027) arrives on top. Published law in, clients never. Session 7 completes the frame, with In Re: Summoning Advocates on in-house counsel and shared repositories.
The lab · 30 minutes · demonstrated in class, repeated on your own
The Ten-Minute Research Assistant
A grounded workspace built on screen in ten minutes: bundle, instruction set, pinpointed answers, a declined trap, the staleness catch. Afterwards, students build their own over a second bundle or their moot problem.
1 · The demonstration
In class, on one realistic task.
On
Google NotebookLM (free; sign in with a Google account), or a ChatGPT free-tier Project for anyone without one
The exact prompt
Instruction set for the notebook (paste as the standing prompt / first message): You are a research assistant for an Indian law student. Answer only from the sources in this notebook. Cite the source and paragraph for every proposition. If the sources do not address the question, reply 'Not in the sources' — do not answer from general knowledge. Where sources conflict, state which is later and which is the higher court, and prefer it. First question: trace how the certificate requirement for electronic evidence developed across these sources, in date order, citing the paragraph where each case states its rule.
Point at
Click one inline citation live and let the room watch it land on the actual passage; that click is the difference between grounded and guessing. Then point at the doctrine trace's date order, and at the first 'Not in the sources' when the trap question runs.
What comes back
A date-ordered trace with clickable pinpoints, mostly accurate; occasionally a pointer lands on an adjacent passage; open it, show the mismatch, and log it as the 'wrong pointer' failure mode. The trap question ('What does this bundle say about call-recording consent?') should return a refusal to answer from outside the sources.
If it misbehaves
A pre-built duplicate notebook, already loaded and tested that morning (share-screen from it if the live build hits an upload error).
2 · Afterwards, on your own
The same technique on a task of your own; the deliverable goes to the platform.
Afterwards, on your own: build the workspace over the supplied second bundle (the liquidated-damages line with ss.73–74 Contract Act) or your own moot problem's authorities as text PDFs, paste the instruction set, ask three real questions and one trap, and open two citations to verify the pointers. The workspace record is the platform submission.
Step by step
- 01Create a NotebookLM notebook (or a free ChatGPT Project) and upload your bundle: the supplied liquidated-damages line, or your own moot problem plus authorities as text PDFs.
- 02Paste the class instruction set: answer only from the sources; cite document and paragraph for every proposition; say 'not in the sources' rather than supplement; prefer the later and higher authority; keep the research log.
- 03Ask three real questions with pinpoints demanded, and one trap question the bundle cannot answer.
- 04Open two cited passages and verify the pointers support the propositions; log any wrong pointer or outside-the-bundle answer.
- 05Date your bundle: note its newest source, and what you would have to add before relying on it next term.
Tools · free tier
- Google NotebookLM (free; Google account; no training on uploads by default), or a ChatGPT free-tier Project (5 files)
- The two supplied bundles as text-layer PDFs (electronic evidence; liquidated damages)
- The class instruction set (copyable text)
Free tier
NotebookLM's free tier (50 queries/day, 50 sources/notebook) holds this lab, needs no phone number, admits under-18s and does not train on uploads; ChatGPT's free Project (5 files) fits the five-document bundle. If uploads jam, work in pairs; the craft is what is assessed.
If the free tier locks you out
If an upload fails, retry on another connection; the assessed craft is the instruction set and the verification, and both survive a slow network.
3 · The reveal
The room predicts the trap: will the workspace admit the bundle cannot answer, or improvise? The reveal is the answer itself, and the staleness catch that follows when a missing 2026 order changes the law.
Deliverable
A working grounded workspace (bundle, instruction set, Q&A log with two verified pinpoints and the trap result): a lab deliverable for the platform, extended with a Session 5 critic pass and a limits note.
Feeds the Lab deliverablesRun of show · 30 minutes
- 0–20 min — The demonstration: bundle in, instruction set pasted, the doctrine traced with pinpoints, the room predicting the trap before it runs.
- 20–26 min — The limits: a pointer verified against the document, the staleness catch, and what never goes in a workspace.
- 26–30 min — The assignment: your own workspace over the second bundle or your moot bundle, due before Session 5; questions.
Verification checklist
- The instruction set requires paragraph citations, 'not in the sources', and later-and-higher preference.
- The trap question was outside the bundle, and its result is recorded as it fell.
- Two cited passages were opened and the pointer-to-proposition match verified.
- No client, confidential or personal material entered the workspace; published law only.
- The bundle carries a date and a currency note.
For the instructor · before the session
Why this shape
A build-along wearing one short mirror as its opening: the 'what did you just paste?' vote has to sting before the confidentiality rule feels earned, and it frames what a workspace is: a place where documents persist, which is why what goes into one is a legal decision. Everything else is construction: the class builds the workspace alongside the presenter and leaves owning one.
- Pre-build the demo notebook and a duplicate; test both accounts that morning; screenshot the doctrine trace and the trap refusal as fallbacks.
- Have the Pune Bar Association order PDF staged for the staleness catch; the demonstration fails if it is already in the bundle.
- Post both bundles (electronic-evidence; liquidated-damages) as text-layer PDFs with direct links, plus the instruction set as copyable text.
- Pre-test the demo bundle's upload that morning; a pre-built duplicate notebook is the fallback if the live upload fails.
- Verify the liquidated-damages bundle's citations to source before class; Fateh Chand, Maula Bux, ONGC v. Saw Pipes and Kailash Nath enter the codebook with this session.
- Launch the Session 4 poll deck; the paste vote opens the hour and the trap/pointer tallies close the lab.
Key sources & cases
Google NotebookLM / Gemini Notebook (free tier, checked 2026-08-27)
The lab's primary tool: 100 notebooks, 50 sources per notebook, each up to 500,000 words or 200 MB; 50 queries a day; inline citations that click through to the source passage; uploads not used for training by default. Limits from vendor help pages; RE-CHECK EACH COHORT. The product was being renamed 'Gemini Notebook' at checking.
ChatGPT Projects and Claude Projects (free tiers, checked 2026-08-27)
ChatGPT Projects, free tier: unlimited projects, five files each, project-level instructions, and 'project-only memory' that walls a matter off from other chats (choose it at creation; default memory leaks between matters); shareable with up to five collaborators since Oct 2025. Claude free tier: five projects, 18+ and phone-verified, so a 17-year-old first-year cannot lawfully hold an account and the lab defaults to NotebookLM/Gemini. Custom-GPT creation is not free-tier. Vendor pages read 2026-08-27 (partly via archives); re-check each cohort.
Magesh, Surani, Dahl, Suzgun, Manning & Ho, 'Hallucination-Free? Assessing the Reliability of Leading AI Legal Research Tools', J. Empirical Legal Studies (2025)
The Stanford evaluation: professional grounded legal-research tools hallucinated on roughly one query in six (Lexis+ AI ≈17%) to one in three (Westlaw AI-AR ≈33%), against ≈43% for a bare generalist model, and against a vendor claim of '100% hallucination-free'. Teach the numbers with the vendor contestation. Verified 2026-08-26; the White Paper cites it at p.56.
The electronic-evidence bundle: State v. Navjot Sandhu (2005); Anvar P.V. v. P.K. Basheer (2014) 10 SCC 473; Shafhi Mohammad (2018) 2 SCC 801; Arjun Panditrao Khotkar (2020) 7 SCC 1; Bharatiya Sakshya Adhiniyam 2023, s.63
The build's corpus, chosen because tracing the certificate requirement through it is a genuine doctrine exercise and because Session 7 stands on the same law. Anvar, Arjun Panditrao and s.63 verified 2026-08-26 (codebook); Navjot Sandhu and Shafhi enter the codebook with this session; VERIFY TO SOURCE before teaching from them.
Pune Bar Association v. Union of India, W.P. (C) No. 599/2026 (SC, 22 May 2026)
The staleness catch's payload: a three-judge order upholding s.63(4) and the Schedule (the hash-value requirement has a rational nexus with integrity; Part B's 'expert' is not confined to s.79A-notified examiners), noting that authenticity challenges are 'accentuated with the advent of artificial intelligence and deepfake technology'. An order disposing of the petition without notice, not a judgment after contest. Verified 2026-08-27 (signed order, LiveLaw copy).
In Re: Summoning Advocates, 2025 INSC 1275 (SC, 31 Oct 2025); Digital Personal Data Protection Act, 2023 (+ Rules, 2025)
The legal thread's anchors, completed in Session 7: privilege under s.132 BSA is the client's; in-house counsel sit outside s.132 with only s.134's narrower cover; the DPDP Act's fiduciary/processor structure and penalties are the statutory reason client data never enters a consumer tool. Verified per the codebook; DPDP obligations were phasing in as of Aug 2026; re-check each cohort.
Readings
- Magesh et al., 'Hallucination-Free?' (JELS 2025) — the abstract and Table 1; the numbers behind 'grounded is not true'
- Anvar P.V. v. P.K. Basheer (2014) 10 SCC 473 — re-read the certificate paragraphs; your workspace will be quizzed on them
- Pune Bar Association v. Union of India (SC, 22 May 2026) — the order; five pages, and the reason your bundle needs a date
- In Re: Summoning Advocates, 2025 INSC 1275 — paragraphs on s.132 and in-house counsel (the legal thread's preview; Session 7 completes it)
- NotebookLM help: 'About your notebook sources' — the current limits page, read the week of the session
- Two 2026 follow-ups, abstracts only: Das et al., 'How Much Do Legal RAG Systems Still Hallucinate?' (still pervasive: under 10% for the best, near half for the worst); Schwarcz et al., the first randomised trial on law students (quality up, productivity up 50–130%; the honest positive case)
Sixteen hours, one professional discipline.
Craft, competence and verification, practised until they are habits you could defend in court.