PATRON 1.4.0

A local, GDPR-minded AI assistant for law firms. It runs on your computer and by default does not send case files to the cloud. In 1.4.0 a matter covered by professional secrecy works only with a local model until you decide otherwise for that one matter, and every change the assistant wants to make to your documents waits for your click.

YOUR MODEL, YOUR CHOICE: Claude, Gemini, GPT, Qwen, Mistral, or the Polish Bielik model running locally in Ollama. Pick it in settings or per conversation, with your own provider key or a single OpenRouter key. PATRON keeps your matters, documents, chat history and the assistant's memory on your computer, whichever model is working today.

DOWNLOAD: pick the installer for your edition (Assets). Polish = PATRON-Setup-Windows.exe; the others carry a suffix: -EN (English, EU set), -US, -GB, -BR (Brazilian Portuguese), -IT, -DE, -ES, -FR. The installer is still unsigned, so Windows shows SmartScreen: click "More info", then "Run anyway". SHA-256 checksums of all nine installers are in CHECKSUMS.txt; check yours with Get-FileHash .\PATRON-Setup-Windows-EN.exe -Algorithm SHA256.

UPDATING: PATRON 1.1 or later downloads the update by itself and asks whether to install now or when you close the app. Most 1.0 installers have no automatic updates. If yours does not offer 1.4.0, download the installer for your edition and install it over the old version. You do this once; later updates arrive on their own. Your matters, documents, chats, assistant memory and saved API keys stay where they are, in your Windows user profile, separate from the program. Before release we installed 1.4.0 over copies of 1.0, 1.2 and 1.3 (Polish edition) holding test data, and checked that everything was still there and the audit chain was intact.

WHAT CHANGES IN YOUR WORK:

• A matter covered by professional secrecy works only with a local model by default. To use a cloud model in one specific matter, the matter's owner ticks "Cloud model" on the matter's toolbar. The consent covers that matter only and is recorded in the audit log. Matters without secrecy and general chats work as before.
• Changes to your documents wait for your approval. When the assistant proposes an edit, a new document, comments, a copy or a memory entry, it lands as a card in "Approval cards" (account menu) and runs only after you click. This protects you from an instruction hidden in the other side's files that would steer the model into changing your document.
• A new connector from outside PATRON's set does not start until the Operator approves it: "Law connectors" in the account menu, then "Review and approve". If the connector later changes its tools or address, PATRON asks again.
• Claude Opus 5.5 and Sonnet 5.5 are in the model picker, cheaper than the models they replace. If you had Claude Opus 4.8 or Sonnet 4.6 selected, PATRON moves you to the newer model from the same provider.
• Polish edition only: "Repertorium in chat", an optional card in "Law connectors" that the Operator switches on. The assistant then searches Repertorium, MateMatic's Polish law corpus, with names, PESEL numbers, addresses and e-mails replaced by placeholders before the query leaves your computer.

FIXED:

• The text of documents the assistant reads is pseudonymised before it reaches a cloud model, including chat titles, tabular review and the draft panel. Before, document text in tool results went out unmasked.
• Images and links in model answers no longer load by themselves, so they cannot carry data out without your click.
• Deleting a matter (in the matter list: the row menu, "Delete") also removes data derived from the case files (tabular reviews, approval cards, general chats with attachments from that matter). If something fails, you see it.
• Editing a document keeps tabs, line breaks and footnote references, and no longer changes numbers elsewhere in the document.
• Search in the case files always stays inside the current matter. Before, with many matters holding similar documents, it could find nothing in the one you asked about.
• PATRON writes every audit log entry to disk before it moves on, so a sudden power loss no longer drops the latest entries.
• Connector settings survive updates.
• Deleting several documents, chats or tabular reviews at once no longer reports success when some deletions fail. Only what was actually deleted disappears from the list, and PATRON tells you how many items are still there.
• Some labels appeared in the wrong language in every edition: the "Cloud model" switch, the document table headers on the matter screen and the row menus (rename, delete, versions, hide). These now come from each edition's own dictionary.

MEASURED BEFORE RELEASE:

• Automated tests: backend 2195 in 178 files, frontend 301 in 42, all passing (one skipped, five written down as planned cases). Type checks are clean on both sides, and 21 attack scenarios against the audit chain pass.
• Installers: nine, all from one source commit, each checked on the package itself. The connector set matches the edition (Polish 20 connectors with 7 switched on, EN 20 with 14, each market edition 1 of 1), the OCR language pack of the edition is present, and the app starts on a clean profile. 9 of 9.
• Auto-update: each of the nine channels points to its own installer, and the sha512 in the channel matches that file. CHECKSUMS.txt lists exactly these nine installers.
• Update path: copies of 1.0, 1.2 and 1.3 holding test data, each upgraded to a 1.4.0 build from 8 October. The backend and database code have not changed since that build, and we repeated the 1.3 upgrade on the final Polish installer. Nothing was lost, and the audit chain verified "ok".
• Real model: from the source code, against a real cloud model and on made-up lease contracts, PATRON ran six kinds of work - uploading and indexing documents, tabular review, workflows, generating a document through an approval card, research with sources, and refining a draft. Each finished its task. The research run returned sources but quoted none of them, so it says nothing about citation accuracy.

LIMITS WE STATE PLAINLY:

Pseudonymisation lowers the risk of sending personal data to a cloud model, but it does not remove it: the detector does not recognise every person and every company. In this version it also does not mask bank account numbers or phone numbers written without the +48 prefix, and a PESEL number with a typo (for example from a scanned page) can pass unmasked. For matters under professional secrecy we recommend a local model. The installer still has no publisher certificate; code signing is planned for 2.0. Market editions (DE, FR, IT, ES, BR, GB, US) ship with one home-jurisdiction connector; EU law and other countries' sources come from the MateMatic Boutique.

Governance: PATRON Constitution 1.8.0 - Art. 5 (a cloud model only with consent for a specific matter) and Art. 6 (approval cards on by default). The product owner adopted it on 10 October 2026. Re-signature by the law firms is pending; until then the code enforces rules stricter than the signed version 1.7.2.

Shell AGPL-3.0, connectors MIT. Hard fork of willchen96/mike. Full list of changes: CHANGELOG.md. Installers built from commit f149cd9; the v1.4.0 tag sits on a later commit that adds only test scripts and documentation.

---

Po polsku

Lokalny asystent AI dla kancelarii, projektowany pod RODO. Działa na Twoim komputerze i domyślnie nie wysyła akt do chmury. W 1.4.0 sprawa objęta tajemnicą pracuje tylko z modelem lokalnym, dopóki dla tej jednej sprawy nie zdecydujesz inaczej, a każda zmiana, którą asystent chce wprowadzić w Twoich dokumentach, czeka na Twoje kliknięcie.

MODEL WYBIERASZ TY: Claude, Gemini, GPT, Qwen, Mistral albo polski Bielik uruchomiony lokalnie w Ollamie. Model zmienisz w ustawieniach lub osobno w każdej rozmowie, z własnym kluczem dostawcy albo jednym kluczem OpenRouter. Sprawy, dokumenty, historię czatów i pamięć asystenta Patron trzyma na Twoim komputerze, bez względu na to, który model dziś pracuje.

POBIERZ: wybierz instalator swojej edycji (Assets). PL = PATRON-Setup-Windows.exe. Instalator nadal nie jest podpisany - Windows pokaże SmartScreen: kliknij „Więcej informacji”, potem „Uruchom mimo to”. Sumy SHA-256 są w CHECKSUMS.txt.

AKTUALIZACJA: Patron od wersji 1.1 sam pobierze aktualizację i zapyta, czy zainstalować ją od razu, czy przy zamknięciu programu. Większość instalatorów 1.0 nie aktualizuje się sama. Jeśli Twój Patron nie zaproponuje wersji 1.4.0, pobierz instalator i zainstaluj go na obecną wersję - ręcznie robisz to tylko ten jeden raz. Sprawy, dokumenty, czaty, pamięć asystenta i zapisane klucze API zostają na miejscu.

Co się zmienia w pracy kancelarii, krok po kroku: nota wydania.