An AI match-intelligence control room for live sports broadcast, on Azure
Recordai-match-intelligence-control-room
What it does
Puts AI-written match insight on air for many broadcast partners at once, in English, Spanish and German, each under its own editorial policy. Models on Microsoft Foundry write the words; code computes every number and checks every claim; corrections reach everything already published; every item on air carries a signature from Azure Key Vault. Built for the Microsoft × Premier League developer hackathon.
Dates
Oct 2026
What the dates prove
First and last commit. A hackathon build on synthetic data: the league, clubs, players and partners are fictional, and nothing here has run against a real broadcast.
Built with
Microsoft Foundry, Azure OpenAI, Microsoft Agent Framework, Azure Container Apps, Bicep
Dates are the engagement window, not a duration claim.
What it is built on
AI
Microsoft Foundry
One account and project, keyless: callers present an Entra ID token, and no API key exists.
Azure OpenAI gpt-5-mini
The fast model. Drafts each insight and localises it per partner, behind an alias so a swap is a one-line change.
Azure OpenAI gpt-4.1-mini
The fallback, from a different model family, so a failure in one is unlikely to repeat in the other.
Microsoft Agent Framework
The Analyst and Localizer agents, with every model call and tool call traced.
Model Context Protocol
A private match-data server the agent reads facts through, so it explains from data rather than memory.
Evaluation gate in CI
A pull request that touches the pipeline replays seeded matches through the models, base branch against candidate. One planted lie let through blocks the merge.
Azure
Azure Container Apps
Web, API and MCP server on the serverless Consumption plan. Scales to zero; the API and MCP server are internal only.
Azure Key Vault
An EC P-256 key that signs a provenance record for every item on air. The private key never leaves the vault.
Azure Blob Storage
The spend ledger, claimed atomically with ETag writes; the versioned partner policy book; the signed records.
Microsoft Entra ID
A managed identity per job, each holding one role on one resource. No keys, secrets or SAS tokens anywhere.
Application Insights
OpenTelemetry traces through the Azure Monitor distro, with no prompts or model output recorded.
Log Analytics
Container logs, with a hard daily ingestion cap.
Azure Container Registry
Images pushed and pulled by managed identity only.
Azure Cost Management
Budget alerts, on top of per-model rate limits and a cap on matchday runs per day.
Bicep and Azure Developer CLI
The whole estate as code, with policy tests. One azd up provisions and deploys it.
GitHub Actions
Every merge to main deploys through workload identity federation, with no stored credentials.
What we delivered
Agentic AI
Architecture and strategy
Cloud cost and performance
Cloud infrastructure and migration
Custom software engineering
Generative AI
MLOps and AIOps
Security, identity and compliance
If this sounds like your system, the next step is one call, about ninety minutes.