Sealed module brief · GC AI × Hive · A2A Billing

Both sides hold the same receipt. Disputes shrink from weeks to seconds.

Agent-to-agent billing as a GC AI module. The firm's billing agent sends out signed line items. The client's review agent checks, approves, or disputes them, and every step gets locked in with a signature. No more 90-day invoice fights. No more "we never agreed to that rate." No more piecing a matter back together six months after the fact. The envelope is the system of record.

Sealed brief for Cecilia Ziniti Drop-in module · same GC AI UX Bidirectional · law firm ↔ client Built on the same four primitives
One module · two directions

Either side can run the agent. Both sides hold the same envelope. Neither side can rewrite what the other signed.

Same protocol, two roles. Law firms use it to bill with proof. Clients use it to push back with proof. Most engagements end up running both, and once that happens, the whole industry's invoice-dispute costs start to shrink.

Law firm → Client · Outbound

Wachtell sends Acme the May invoice.

Friday 5:00 PM. $487K in fees across 23 matters. The billing partner clicks Send. What Acme gets is not a PDF. It's an envelope.

  1. 5:00 PM: the firm's Billing agent builds the invoice from the firm's time-and-expense system. The SHOD gate confirms every line ties to a matter, a budget envelope, an engagement letter, and a UTBMS task code.
  2. 5:01 PM: each line item gets signed on its own: timekeeper ID, hours, rate, narrative hash, matter ID, date. Privileged narrative content sits behind a ViewKey, so opposing counsel never sees it, even if the envelope is later produced.
  3. 5:02 PM: the engagement letter's terms are locked into the envelope by hash. Rate card, write-off policy, billing schedule, capped expenses, all enforceable right in a browser.
  4. 5:03 PM: the envelope ships to Acme. Both firms hold identical copies. Anyone with the envelope can check that it hasn't been changed since it was sent.
  5. Monday 9:00 AM: Acme's Review agent (below) picks it up. The firm sees the read receipt, the approval receipt, or the dispute receipt come back signed within hours, not weeks.

What got proven: the invoice is mathematically tied to the engagement letter, the rate card, and the matter scope. If Acme disputes a rate, the firm points to the signed engagement-letter clause. If the firm disputes a write-off, the client points to the signed approval. No piecing things back together. No "I don't recall agreeing to that." Ready for an audit by tax, a regulator, a malpractice carrier, or the firm's own partner-comp committee.

Client → Law firm · Inbound

Acme's in-house team challenges line 14.

Monday 9:00 AM. Acme's Review agent reads the envelope and flags three problems before a human ever sees the bill.

  1. 9:01 AM: the Review agent takes in the envelope. It checks every signature. It confirms the timekeepers are on the engagement letter's rate sheet. Three problems turn up: a timekeeper not on the approved list, two narratives that look block billed under the engagement's UTBMS policy, and one line that pushes Matter 17 ten percent over its signed budget cap.
  2. 9:03 AM: the agent drafts the response envelope. For each disputed line, it cites the engagement-letter clause it breaks, points to the specific signed receipt, and proposes the corrected amount. It approves the 21 lines that pass clean.
  3. 9:04 AM: it routes the response to the GC for review. The GC sees a one-page summary: $487K invoiced, $463K approved on the spot, $24K disputed with the reasons cited, and an expected resolution time under one hour since the firm holds the same envelope.
  4. 9:11 AM: the GC signs the response. The envelope ships back to the firm. The firm's Billing agent reads the disputed lines, sees the cited clauses, and either accepts the fix or sends it up to the relationship partner with the same envelope attached.
  5. 9:47 AM: the firm accepts two of three disputes and escalates one. Payment for the agreed $478K goes out automatically through Acme's AP. The remaining $9K sits in a sealed dispute envelope with both sides' positions cited and signed.

What got proven: the client read every line, applied the engagement letter exactly as written, paid what was owed, disputed what wasn't, and got through the whole exchange in under an hour. The dispute carries its own paper trail. If it ever goes to fee arbitration, the arbitrator opens both envelopes in a browser. What used to take six weeks of emails now happens once, signed, and done.

What is in the envelope

One envelope, three layers. An auditor can read it in a browser, a regulator can accept it in a filing, and a court can admit it under FRE 901 / 902.

Every line is an object signed with a cryptographic key. Privileged narrative content sits behind a ViewKey. The client sees the work, but opposing counsel never does, even if the envelope is later produced under subpoena.

// Billing envelope · legal.billing.v1 { "envelope_id": "hive:env:01HXY...billing", "protocol": "hive.billing.v1", "issuer": "did:firm:wachtell", "counterparty": "did:client:acme-corp", "engagement_letter_hash": "sha256:9f12...ab8c", "billing_period": "2026-05", "matters": [ { "matter_id": "M-417-Project-Helios", "budget_cap_envelope": "hive:env:01HVW...budget", "line_items": [ { "line_id": "L-001", "timekeeper": "did:atty:ggoldberg", "rate_per_hour": "USD 1,485", "rate_source": "engagement_letter §3.2", "hours": "2.4", "utbms_task": "L210", "narrative_hash": "sha256:c34a...77f1", "narrative_viewkey": "vk:acme-only:..." // privileged } ] } ], "signatures": { "firm": "mldsa65:...", "hive_attestation": "hivetrust:..." }, "fre_attestation": "FRE 902(13)(14) compliant", "anchored_at": "2026-05-31T17:00:00Z" }
What this collapses

Almost every line item in the corporate legal billing dispute economy can shrink down to this.

Legal billing today runs on PDFs, LEDES files, e-billing portals, and a months-long appeals process. The agent-to-agent module replaces how it works underneath. The output looks the same. What's holding it up is completely different.

What happens todayWhat collapsesWhat happens with the module
Firm sends PDF invoice. Client's AP enters it manually or via LEDES. Manual entry · transcription error · format incompatibility Signed envelope ships once. Both sides hold the same record. Zero re-entry.
Client questions a rate or a narrative six weeks later. Email chain · partner call · billing-committee escalation · soft write-off to keep relationship Review agent surfaces the deviation in minutes, cites the engagement-letter clause, ships a signed dispute envelope back same day.
Firm and client disagree on whether a clause was agreed to at engagement. "Let me check with the partner" · digging through old emails · sometimes outside counsel arbitration Engagement-letter hash is in the envelope. Either side opens it in a browser. The clause is the clause.
Matter goes over budget. Client did not know until invoice arrived. Surprise overage · uncomfortable partner call · soft commitment to "watch it next time" Budget-cap envelope is referenced by every line. SHOD gate would have prevented the line from being added without an explicit, signed budget-increase envelope.
Subpoena lands. Firm must produce invoices and narratives. Privileged narratives accidentally produced · over-redaction · privilege log fights Narrative content sits behind a ViewKey. Subpoenaed party produces the envelope; the privileged narrative remains mathematically inaccessible.
CFO asks "what did we actually spend on outside counsel last quarter, by matter?" Two weeks of legal-ops aggregation · reconciliation with AP · inconsistent matter taxonomies Every envelope is queryable. Real-time CFO dashboard. The number is signed, not estimated.
Fee dispute escalates to arbitration or fee-dispute board. Months of discovery · reconstructed time entries · "best recollection" testimony Both envelopes are evidence. The arbitrator opens them in a browser. The hearing is about interpretation, not facts.
How GC AI ships this

A drop-in module. Same look and feel. Several places it plugs in.

GC AI doesn't change. The module runs underneath the existing screens plus one new one. Customers can turn it on per matter, per vendor, or across the whole platform. What's running underneath stays the same either way.

INTEGRATION 01

E-billing inbound

GC AI today already receives invoices from outside counsel. Add envelope ingestion alongside LEDES. The Review agent runs automatically; the GC sees only the exceptions.

INTEGRATION 02

Engagement letter as envelope

When a new matter spins up in GC AI, the engagement letter is hashed and anchored. Every future invoice from that firm carries the hash. Rate disputes become a checksum, not a memory.

INTEGRATION 03

Budget cap as envelope

Matter budgets in GC AI become signed envelopes. The firm's billing agent (if running the module on its side) cannot add a line that would push the matter over without a signed budget-increase envelope from the client.

INTEGRATION 04

Dashboard for the CFO

Every signed line item can be looked up. Spend by matter, by firm, by timekeeper, by UTBMS code, by jurisdiction, all in real time, all signed, never pieced together after the fact. It's the finance team's window into what the GC sees.

INTEGRATION 05

Two-sided marketplace

When the firm also runs the module, both sides settle through envelopes. GC AI gets a per-envelope fee on both sides, the customer gets faster resolution, the firm gets faster payment.

INTEGRATION 06

Sealed dispute layer

Disputed lines do not block payment of the agreed portion. They sit in their own sealed envelope with both positions cited. Payable balance releases automatically; disputed balance stays in a structured holding pattern.

The invoice-dispute economy is a real product opportunity. A2A billing turns it into a GC AI module.

Same envelope on both sides. It drops right into the platform 1,700 teams already trust. Every quarter a customer runs it, they get harder to move off GC AI, because the firm now holds the envelope on the other side too. It takes twenty minutes once you're set up.

Walk through the module →   Back to the main brief →