How does BYO-LLM Guided Build actually work, step by step?
Guided Build is a deterministic, versioned recipe of steps. Each step gives the creator exact instructions to paste into their own LLM, then SaSame validates the returned artifacts against fixed, auditable rules.
- Collection
- documentation
- Updated
- 2026-07-29
- min read
- 8
- Version
- v1
The creator's own LLM does the building from fixed instructions SaSame serves; SaSame runs zero LLM calls and deterministically verifies the artifacts the creator submits back — string/regex/length checks, never a fuzzy AI judgment.
What BYO-LLM actually means
SaSame's normal customer flow performs no LLM calls and never modifies creator code — this is a machine-enforced invariant (mcp_network.mcp_builds.llm_calls = 0), not a marketing description. Concretely: at each build step, SaSame hands the creator a block of exact instructions; the creator pastes that block into their own LLM (Claude, ChatGPT, or whatever they already use under their own subscription); the LLM produces artifacts; the creator submits those artifacts back to SaSame; SaSame checks them with fixed rules — never a second LLM grading the first one's work.
The step sequence (idea-to-shipped-build path)
A from-scratch build runs 7 fixed steps. Shorter entry points (existing repo, near-finished build) skip the earlier ones.
| Step | Objective |
|---|---|
| BLUEPRINT-01 | Write the product definition and tool inventory |
| BLUEPRINT-02 | Author the full blueprint (13 required sections) |
| BLUEPRINT-03 | Creator reviews and accepts the blueprint |
| BUILD-01 | Scaffold the repo, run a local MCP initialize handshake |
| BUILD-02 | Implement tools so tools/list matches the blueprint |
| BUILD-03 | Run the local test suite (creator-reported, not yet independently verified) |
| BUILD-04 | Creator confirms build readiness with a deploy-readiness manifest |
Each step is validated against a fixed JSON Schema (step_id pattern, a closed set of check kinds: min_length, max_length, regex_every_line, min_lines, contains_all, const_true, digit_min) — the recipe itself is versioned, so the exact rules a creator is held to at any moment are pinned and auditable, not ad hoc.
What a step actually looks like
Real instructions text from step BLUEPRINT-01 — this is verbatim what a creator receives and pastes into their own LLM:
"Write a clear product definition for a Model Context Protocol (MCP) server. State the specific problem it solves, name the human or agent users, and describe the value in plain language... Then list every tool (verb) the server will expose, one per line, using lower_snake_case identifiers such as search_orders, create_invoice, get_status... Never include API keys, tokens, or any credential in either field."
The creator's LLM returns two artifacts (product_definition, tool_inventory); SaSame checks them deterministically — length bounds, one tool name per line matching ^[a-z][a-z0-9_]*$ — and either advances to the next step or returns a plain-English failure_repair with what to fix.
Secrets are never accepted, anywhere
Every single step in the schema carries no_secrets: const true. BUILD-04's deploy-readiness manifest is environment-variable names only, never values — every submitted string is scanned for secret-shaped values and rejected if one is found. This is enforced at the schema level, not left to reviewer judgment.
The blueprint: 13 required sections
BLUEPRINT-02 must cover all of: purpose, target_user_or_agent, data_api_source_and_rights, minimal_tool_set, non_goals, tools, auth_and_effects, rate_limits, errors, hosting_choice, responsibility, distribution_metadata, observability_metadata. Every tool entry needs a name, description, input_schema, output_schema and example. The responsibility section explicitly assigns versioning, support and repair to the creator — SaSame's inspection and observation stations measure the result, they do not take over ownership of it.
"SaSame/Market/Census may suggest overlaps and categories; the creator decides the product. A blueprint reaches BLUEPRINT_READY only via a creator acceptance receipt." — an AI draft is never trusted until the creator, not an AI, explicitly accepts it (BLUEPRINT-03).
Local test results vs. independent verification
BUILD-03's test run is explicitly self-reported: the creator runs their own suite locally and submits a SHA-256 of the output plus a pass count. These are the creator's own results — independent, external verification only happens later, at the Inspection station, which requires a real external tool call (not a local/self-test) before a build can ship. See Repair & reverification for how that later, stronger check works.
Where Guided Build sits by plan
Concurrent guided-build slots are plan-bounded, not registration-bounded: Free Listing has zero (list/claim/observe only, no build capability), Factory gets 1 concurrent build, Factory Pro gets 3, Factory Team gets 10. See Pricing for the full capability table.
Examples
2- 01
A creator entering at "I have an idea" starts at BLUEPRINT-01; a creator entering at "I have a finished MCP" skips straight to BUILD-03 (test suite) and BUILD-04 (readiness).
- 02
A submitted deploy-readiness manifest containing a string that looks like an API key is rejected outright, even if the field name suggests it was meant to be a placeholder.