How it works, in depth

Two subscriptions. Two small servers. Five layers that know when to run.

The same story as the homepage, with the detail a tech lead wants: what your developers actually see, how it all connects, and exactly what it costs. Plain enough for a CEO, precise enough for engineering.

What you actually see

Not slides. The real moments.

Layer 1 While you write

Your assistant already knows the rules

Conventions and canonical examples surface as you type, pulled from your studio’s shared knowledge, not guessed.

DoTAbility.cpp AI assistant · connected to studio brain
1#include "DoTAbility.h"23// New damage-over-time ability4void ADoTAbility::Apply(AActor* Target)5{6  ApplyDamage(Target, TickDamage);7}
Convention from studio brain · gameplay/abilities

Abilities in this module extend UStudioGameplayAbility, not UGameplayAbility. Use the studio base class so buff-stacking and replication work out of the box.

Layer 3 When you submit

The paperwork writes itself

A clear description, the right ticket link, the right reviewers, drafted for you. You confirm; nothing submits without you.

$ p4 submit Submit-time preparation · Layer 3

Proposed changelist description

Implements JIRA-1234: damage-over-time ability for wizard class.
 
- Adds DoTAbility with configurable tick interval and duration
- Integrates with existing buff system for effect stacking
- Includes network replication following studio conventions
- Tests cover single-target, area effect, and dispel scenarios
  • Description drafted from diff + ticket
  • JIRA-1234 linked · In Progress → In Review
  • Reviewers assigned by ownership @lead-gameplay · @lead-networking
  • Scope coherent · no unrelated changes
Confirm & submit Edit description AI never submits without your confirmation
Layer 4 After you submit

A first-pass review is waiting

The basics are already handled, so the review your tech lead opens is about the decisions that actually need judgment.

Swarm · Review #48291 Post-submit deep review · Layer 4
AI
Automated review · prepared in 52s

Analysis ready for review. Convention and formatting already handled upstream, here is what needs a human eye:

  • No architectural drift. Follows the ability framework correctly.
  • Similar pattern shipped in the buff system last month (CL 48213). Worth cross-referencing for consistency.
  • Suggest test coverage for the interaction with existing damage sources (stacking order).

The tech lead spends five minutes on the architecture, not forty on the basics.

Telemetry For your managers

Costs and usage, in the open

Per-team spend, budgets, and cache efficiency in one place, so the AI budget is never a surprise.

Cost & telemetry per-team spend · budget alerts

API spend · this month

€612

of €800 budget

Reviews run

1,847

auto post-submit

Cache hit rate

91%

prompt caching

Weekly API spend

MonSun

Spend by team

  • Gameplay €248
  • Networking €171
  • Tools €114
  • UI €79

The flow

What happens the moment you hit submit.

Two seconds of preparation on your machine, then a deeper review runs on a server without holding you up. The dashed step is the only moment AI is involved.

Developer Runs submit p4 submit / git push
Pre-submit hook Prepares metadata description, ticket, reviewers
AI Drafts & checks via seat or API
Developer Confirms edits if needed
Repository Change lands submit accepted
Worker Deep review posted in ~60s
Review tool Ready for lead Swarm / GitHub

The five layers

Each layer: where it runs, what triggers it, what it costs.

Layers reinforce each other rather than repeat each other. Hover any layer for the full deployment detail.

L01 Prevention

Write-Time Assistance

Convention adherence and canonical examples surfaced while code is being written.

Prevention. The developer’s AI assistant knows your studio’s conventions, canonical examples, and architectural constraints while code is being written. Convention violations are avoided at write-time, not caught at review-time.

Where it runs
Developer workstation, in the AI coding assistant
Audience
Developer
Trigger
IDE session
Paid via
Developer seat
Time to result
Real-time
Cost
Covered by seats
L02 Deterministic

Save-Time Validation

Deterministic linter runs on save. Fast, focused, zero AI.

Linters excel at formatting, naming, and pattern rules that do not require judgment. We do not ask AI to do what a linter does better and cheaper. Millisecond feedback, zero tokens, always local.

Where it runs
Developer workstation, in the linter (not the AI assistant)
Audience
Developer
Trigger
File save
Paid via
Free (open-source linters)
Time to result
Milliseconds
Cost
Zero (local)
L03 Submit-readiness

Submit-Time Preparation

Pre-submit hook validates and drafts the metadata around the submit, description, ticket linkage, reviewers.

Not the code itself, the metadata around it. Correct CL description (often generated from the diff and ticket), correct ticket linkage, correct reviewers assigned automatically based on file ownership. Path safety and scope coherence checked. Developer stays in control.

Where it runs
Developer workstation, triggered by the VCS (p4 submit / git push)
Audience
Developer
Trigger
p4 submit / git push
Paid via
Developer seat OR studio API key (Setup choice)
Time to result
2-5 seconds
Cost
€0 (via seat) or ~€0.02-0.05 / submit (via API)
L04 Decision support

Post-Submit Deep Review

Cross-file impact, architectural drift, similar patterns, structured for the tech lead.

Runs asynchronously on a server-side worker after a changelist lands. Tech leads do not need AI to tell them the code compiles. They need structured analysis of impact, drift, and pattern consistency so their review time focuses on architectural judgment. Posted to Swarm, GitHub, or your review tool.

Where it runs
Server-side automation worker (small VM in your network)
Audience
Tech Lead
Trigger
Post-submit trigger (webhook)
Paid via
Studio API key
Time to result
30-90 seconds
Cost
~€0.10-0.40 / CL
L05 Self-improvement

Continuous Evolution

Pattern recognition surfaces knowledge-layer updates. Documentation drift detected and repaired.

The layer where the system improves itself. Weekly cron jobs plus build-failure events. Patterns that appear repeatedly become knowledge updates. Documentation drift gets flagged. Build failures generate hypothesis-driven fix proposals, never applied automatically.

Where it runs
Server-side automation worker (same or separate VM as Layer 4)
Audience
Tech Lead
Trigger
Cron (weekly / monthly) + build-failure events
Paid via
Studio API key
Time to result
Minutes to hours (batch)
Cost
~€5-30 / week

Human in the loop, always

No layer autonomously modifies code. AI proposes, engineers decide. This is not a philosophical preference. It is operational necessity. Game development produces edge cases where obvious fixes create subtle regressions. Tech leads approve every code change originating from automation.

Two kinds of AI access

Seats for people. API for machines.

Your studio uses AI two ways, and they are billed differently. This holds at every major vendor.

Seats

for developers

Interactive use

Each developer has a commercial AI seat and runs a coding assistant on their workstation. When they want help writing code, they get it through this seat. Fixed monthly cost per developer, unlimited use within reasonable rate limits, human always in the loop.

Examples
Claude for Work · ChatGPT Enterprise · Gemini for Google Workspace
Billing
~€30-40 per developer per month, paid directly to the vendor
Used in
Layer 1 (write-time) · Layer 3 (submit-time, if seat-based)

API

for automation

Programmatic use

A server-side worker calls the vendor’s API directly when events happen, a submit lands, a build fails, a scheduled analysis runs. Uses an API key, not a seat. Per-token pricing, predictable, designed for 24/7 machine access and structured output.

Examples
Anthropic API · OpenAI API · Google AI API (or via Bedrock / Vertex / Azure OpenAI)
Billing
Per-token, typically with a Zero Data Retention addendum for IP protection
Used in
Layer 3 (if API-based) · Layer 4 (post-submit review) · Layer 5 (continuous evolution)

Why the split exists

Seats and API keys are different products designed for different uses. Seats assume a human at a keyboard: session-based auth, rate limits sized for interactive use, conversational streaming output. API keys assume server-side automation: long-lived credentials, volume rate limits, structured output guaranteed by schema, terms of service that explicitly permit programmatic access. Using seats for server-side automation would work briefly, then fail at scale and potentially violate terms of service. Using API for interactive developer work would work but cost significantly more than seats for the same volume. Each mode is used where it fits.

Submit-time, in depth

The metadata that makes a submit worth reviewing.

Layer 3 is not another code review, Layer 1 handles quality as you write, Layer 4 handles depth after. This layer handles everything around the code.

What it verifies

Changelist description quality

  • Description follows the studio’s template
  • Description accurately reflects what changed in the diff
  • No placeholder descriptions ("wip", "fix", "misc changes") without follow-up
  • Intent is captured, not just mechanics

Ticket linkage integrity

  • Referenced ticket exists in Jira, Linear, or your tracker
  • Ticket is in an appropriate state (not closed, assigned to submitter)
  • Ticket description aligns with what the code actually does
  • Missing ticket linkage flagged when required by studio policy

Reviewer assignment

  • Reviewers assigned automatically based on file ownership from the knowledge layer
  • Required approvers for touched modules present
  • Cross-team reviews requested when appropriate
  • No self-approval situations that violate studio policy

Path safety

  • Engine code modifications flagged if unauthorized
  • Third-party code changes require legal or licensing review flags
  • Protected paths (console SDK, restricted modules) require explicit justification
  • Cross-cutting changes that touch multiple owned modules trigger acknowledgment

Scope coherence

  • Changes align with the stated intent
  • Unrelated changes not mixed into a single changelist (a "fix bug X" that also refactors module Y triggers a split suggestion)
  • CL size within reasonable bounds for meaningful review

Description generation

Three ways to run it. You pick at Setup.

Approach A

AI generates, developer confirms

AI writes the description from the diff and the ticket. Developer confirms or edits before submit proceeds. Minimum friction, highest consistency.

When: Teams with less senior developers, or where description quality is a persistent problem.

Approach B

Developer writes, AI validates

Developer writes description as usual. AI checks alignment with diff, template adherence, and completeness. AI warns only; developer authorship preserved.

When: Teams where every submit deserves author-written prose.

Approach C Most chosen

Hybrid, based on developer effort

If developer wrote substantial description, AI validates. If developer wrote minimal placeholder, AI proposes a full description. Respects developer autonomy while catching lazy submissions.

When: Most studios pick this one after seeing the trade-offs.

Seat-based or API-based

Both options produce equivalent quality of analysis. The choice is about operational preference, not capability. Most studios choose Option A initially and migrate to Option B if compliance or observability needs grow.

Option A €0 incremental / submit

Via developer’s AI seat

The pre-submit hook invokes the developer’s AI coding assistant locally. The developer’s seat handles the AI call. No additional cost per submit. Simpler to configure. Uses whatever seat quota the developer has.

Best for: Studios with generous seat allocations, teams preferring simplicity, straightforward workflows.

Option B ~€0.02-0.05 / submit

Via studio’s AI API key

The pre-submit hook makes a direct API call using the studio’s API key. Structured output guaranteed by schema. Independent of seat state. Better observability for compliance auditing.

Best for: Studios with strict compliance requirements, high submit volumes, or preference for centralized cost tracking.

What it is not

  • Not another code quality review

    Layer 1 handles quality at write time; Layer 4 handles deep analysis post-submit. Layer 3 is about submit-readiness, not code correctness.

  • Not a gate that developers battle

    Well-configured, Layer 3 saves developers time by handling metadata construction automatically. If developers experience it as bureaucratic friction, configuration is wrong.

  • Not autonomous

    Even auto-generated descriptions require developer confirmation before the submit proceeds. AI never submits code without human decision.

  • Not required for every changelist

    Trivial changes (typo fixes, comment updates) can be exempted from full Layer 3 processing. Configurable during Setup.

The shared brain

Your studio’s knowledge, structured and protected.

Everyone can read it; only tech leads can change it, and only through review. That is what keeps AI consistent instead of inventing its own conventions.

What it contains

Conventions

Coding standards, naming rules, and formatting requirements per language and subsystem.

Architecture

Module boundaries, ownership, dependencies, allowed and forbidden interactions.

Decisions

Architecture decision records with rationale for significant choices.

Examples

Canonical implementations of common patterns, curated and versioned.

Anti-patterns

Explicit "never do this" catalog derived from historical bugs and reviews.

Workflows

Standard procedures for common tasks: new feature, bug fix, refactor.

Platform notes

Console SDK guidance, certification requirements, mobile constraints.

Skills

Task-specific patterns your AI assistant uses to accomplish structured workflows.

How it is consulted

  • Selective context delivery, only requested sections load, not the full knowledge layer
  • Structured responses, typed data, not raw markdown
  • Access logging, which agent queried what, when
  • Version awareness, agents can pin to specific versions
  • Access control, role-based restrictions where applicable

How it is protected

  • Branch protection on main (PR + reviews required)
  • CODEOWNERS requires approval from designated tech leads for any change
  • CI validation runs on every proposed change: markdown lint, schema validation, cross-reference integrity, breaking-change detection
  • Direct pushes to main blocked at repository level
  • Force pushes disabled
  • Deployment to production MCP server only from tagged releases

How it is updated

Three paths in. One gate they all pass through.

01 Standard

Human-authored PR

Tech lead identifies need for update, creates PR with proposed change, CI validation runs, required reviewers approve, change merges to main, tagged release triggers deployment.

02 Layer 5

Automation-proposed PR

Weekly worker identifies patterns worth capturing, generates a PR with proposed updates including rationale and examples. Tech lead reviews with the same rigor as human-authored PRs.

03 Rare

Emergency hotfix

Critical issue in content (e.g. outdated security guidance). Designated senior tech lead fast-tracks with single approval. Post-hoc review required within 48 hours. Audit log captures rationale.

  1. Gate

    CI validation + reviewer approval

    Every path passes through the same automated + human check.

  2. Release

    Tagged release

    Immutable version. Semantic versioning applies.

  3. Deploy

    MCP server deployment

    Sessions and workers pick up the new version on next query.

Versioning & rollback

Major (X.0.0)
Structural changes that require MCP server updates.
Minor (1.X.0)
New content, new conventions, new examples.
Patch (1.0.X)
Corrections, clarifications, small updates.

Telemetry

  • Query frequency per section
  • Query patterns that returned unhelpful results
  • Sections never queried (candidates for consolidation)
  • Sections queried but immediately followed by manual overrides (candidates for improvement)

Skills & integrations

Adapted to your tools and your framework.

Two things make the AI feel like it belongs to your studio rather than a generic assistant: the tools it can safely reach, and the skills it knows how to run.

Connected via MCP

We integrate with the tools you already run, with audit logs and path controls on every operation. No rip-and-replace.

PerforcePlastic SCMGitSwarmGitHubGitLabJiraLinearSlackTeamsNotionConfluenceMiroCI / CD

Illustrative, not exhaustive. If a tool has an API or an MCP server, it can be connected.

Studio-adapted skills

Skills are named workflows the AI knows how to run, each following your conventions. We ship a ready-made library and build custom ones for your project. A representative set:

Gameplay development

new-abilitynew-characternew-game-modeadd-buff-effect

Systems

new-managernew-servicerefactor-to-component

Content pipeline

new-asset-typenew-editor-tooladd-content-validation

Multiplayer & networking

add-replicated-propertynew-rpcadd-prediction

Testing

unit-test-scaffoldintegration-test-scaffoldtest-for-bug

Debugging

investigate-crashinvestigate-performanceinvestigate-network

Documentation

document-moduledocument-apiwrite-adr

Onboarding

onboard-to-moduleexplain-subsystemfind-owner

Compliance

check-platform-compliancecheck-licensingcheck-security-patterns

Plus any custom skill your workflows call for. New skills are versioned in the knowledge layer and reviewed like any other change.

What lives where

Two small servers in your network. The AI in the vendor’s.

The cross-boundary arrows show exactly what leaves your network, and it is only what the AI needs to answer a request.

STUDIO INFRASTRUCTURE VENDOR INFRASTRUCTURE pull on tag MCP MCP VCS webhooks / posts seat auth API key Knowledge Repository Git · private · versioned MCP Context Server Small VM · 2 vCPU / 4GB serves knowledge · logs queries Developer Workstation AI assistant + MCP client linter · pre-submit hook Automation Worker Small VM · webhook + cron API caller · result poster Studio Systems Perforce · Swarm · Jira Slack · CI / CD your existing tools Interactive AI Seats Claude for Work · ChatGPT Enterprise Gemini for Google Workspace for developers · fixed monthly / seat Programmatic AI API Anthropic · OpenAI · Google AI or via Bedrock / Vertex / Azure OpenAI for automation · per-token Zero Data Retention addendum standard

Studio infrastructure

Knowledge Repository

Git, private

MCP Context Server

Small VM · 2 vCPU / 4GB

Developer Workstation

Any MCP-compatible client

Automation Worker

Small VM or serverless

Studio Systems

Perforce, Swarm, Jira, Slack, CI

Vendor infrastructure

Interactive AI Seats

Vendor-hosted

Programmatic AI API

Vendor-hosted · key-based

Inside your infrastructure

  • Knowledge repository Git, on the studio’s existing Git infrastructure
  • MCP Context Server One small VM · 2 vCPU / 4GB RAM
  • Automation Worker One small VM · 2 vCPU / 4GB RAM
  • Existing studio systems Perforce · Swarm · Jira · Slack · CI (unchanged)

Inside vendor infrastructure

  • Interactive AI seats Vendor-hosted (Claude for Work · ChatGPT Enterprise · Gemini)
  • Programmatic AI API Vendor-hosted or routed via AWS Bedrock / Google Vertex / Azure OpenAI

What we add

Two small VMs. That is the entire additional infrastructure footprint. Everything else uses infrastructure the studio already runs.

Who pays what

Transparent. Predictable. Nothing marked up.

Most vendors skip this. Here is exactly what money flows where, with real ranges for a 50-developer studio.

Fixed monthly (predictable)

AI seats (interactive use)

Studio → vendor

~€30-40 / developer / month

Paid directly, no markup. Number of seats matches the developers who need interactive AI assistance.

Infrastructure hosting

Studio → cloud or self

~€30-100 / month total

Two small VMs. Depends on your chosen hosting.

Optimization retainer (optional)

Studio → us

~€2,000-15,000 / month

Scales with studio size. Ongoing knowledge evolution, integration maintenance, system optimization.

Variable monthly (paid directly to your AI vendor)

Layer 3 API (if API-based)

€50-150 / month

For a 50-developer studio at ~2,000 submits / month. Zero if seat-based.

Layer 4 (post-submit review)

€300-800 / month

For a 50-developer studio. Scales roughly linearly with submit volume.

Layer 5 (continuous evolution)

€30-100 / month

Weekly / monthly batch jobs.

Total API charges typically €400-1,000 / month for a 50-developer studio; €1,500-4,000 for a 200-developer studio.

One-time (paid to us)

AI Readiness Audit

~€4,000-35,000

Fixed-fee, one-time. Written report you keep regardless of next steps.

Setup & Integration

~€10,000-130,000

Fixed-fee, one-time. Infrastructure deployment, integration, knowledge construction, skill library, training.

What we do not charge for

  • We do not mark up vendor pricing. Studio pays the AI vendor directly for seats and API charges.
  • We do not charge for open-source components (official Perforce MCP, community MCPs, standard linters). We configure and integrate; you do not pay for the software.

Deployment & operations

What we deploy. What you operate.

During Setup, we deploy

  • Knowledge repository created and populated
  • MCP context server deployed and configured
  • Automation worker deployed and configured
  • Perforce (or Plastic / Git) triggers installed
  • Review tool integrations configured
  • Developer workstations configured
  • Skill library installed and tested
  • Team training completed

During Support, we maintain

  • Knowledge evolution based on telemetry
  • New capabilities added as needed
  • Cost monitoring and optimization
  • Vendor-platform update integration
  • Quarterly ROI reports

You operate

The studio owns and operates the two VMs after handover (standard sysadmin work). We maintain the knowledge content, skill library, and configuration through the retainer. If the retainer ends, everything continues to work, studio owns all infrastructure, all code, all configuration. Zero vendor lock-in on us.

What we do not operate

We do not host anything on our infrastructure. Everything lives in the studio’s environment. This is deliberate: better for IP protection, better for compliance (your security team can audit exactly what runs where), better for your long-term autonomy.

Privacy tiers

Four levels of protection. You choose.

From vendor-hosted to fully self-hosted behind your firewall. Each with concrete vendor options.

Tier 1

SaaS with commercial terms

Vendor-hosted, no training

Standard commercial terms with a hosted AI provider. No training on your data (default in commercial plans). Short operational retention for safety and debugging.

When we recommend

Indie and small studios without strict IP requirements.

Vendor examples

Claude for Work · ChatGPT Enterprise · Gemini for Google Workspace

Tier 2

API with retention addendum

Zero data retention

API access with a contractual addendum removing retention beyond immediate processing. Requires separate negotiation with your chosen vendor. Prompts and responses processed and immediately discarded.

When we recommend

Studios with moderate IP sensitivity or publisher requirements.

Vendor examples

Anthropic API + ZDR · OpenAI API + ZDR · Google Vertex with logs disabled

Tier 3

Model hosted in your cloud

Runs inside your account

The model runs inside your cloud provider account. Your code never touches the vendor’s infrastructure directly. Data residency guaranteed by your cloud provider. Zero data retention automatic.

When we recommend

Studios with strict IP requirements, regulatory compliance, or existing cloud commitments.

Vendor examples

AWS Bedrock · Google Vertex AI · Azure OpenAI

Tier 4

Self-hosted open-weight models

Nothing leaves the perimeter

Open-weight models running entirely on your infrastructure, coordinated by MCP tunnels. Tool execution and data access stay inside your perimeter.

When we recommend

AAA studios with console SDKs, strict NDAs, or classified project requirements.

Vendor examples

Llama 3 / 4 · Mistral · DeepSeek · Qwen, behind your firewall

Important distinction

Retention is not the same as training.

Default everywhere

No training on your data

Default in every commercial AI plan across major vendors. You do not need special contracts for this. Consumer accounts (personal Claude, ChatGPT, Gemini) typically require explicit opt-out; commercial and enterprise accounts have it by default.

Requires an addendum

No retention of your data

Requires a Zero Data Retention addendum or a higher-tier deployment (in-cloud or self-hosted). This is a separate contractual layer. Commercial APIs typically retain data for 30 days operationally; ZDR eliminates that retention.

Honest limits

What we do not claim.

  • To eliminate the need for senior engineers
  • Autonomous code generation
  • Proprietary AI models
  • That the components we build are unique (many are open source; we use them where appropriate)
  • Instant transformation, real value takes months to compound

In plain terms

  1. 01

    Developers work as they always do, with a smarter AI assistant that knows your studio’s rules.

  2. 02

    A small server sits inside your network holding your studio’s collective knowledge and serving it up when needed.

  3. 03

    Another small server watches for events, submits, build failures, weekly schedules, and does the deeper analysis that would otherwise consume senior engineering time.

  4. 04

    The AI vendor hosts the model. You keep the code, the knowledge, and the infrastructure.

Two subscriptions. Two small servers. Five layers that know when to run and when to stay quiet.

Bring us your hardest question.

Your stack, your compliance constraints, your integration edge case. 30 minutes, free, engineer to engineer.