AIR-GAPPED CITADEL ARCHITECTURE SPECIFICATION

Multi-Entity Portfolio Isolation Blueprint

How enterprise performance agencies spend $500k+/month across Meta, Google, and TikTok without risking their brand domain, pixel data, or merchant payment credentials.

// ARCHITECTURAL TOPOLOGY MAP
LAYER 01

Root Asset Sanctuary

Cold Vault Entity

Holds verified domain DNS, master conversion pixel, custom audiences, and catalog feed. NEVER launches an active ad.

Read-Only Partner Asset Sharing Only
LAYER 02

Agency Execution Tier

Hot Spending Cluster

Tier-1 Authorized Enterprise Agency Ad Accounts. Pre-warmed credit lines ($100k+/day spend). Completely isolated corporate tax ID and platform rep channel.

Disposable Cluster: Ban-Shielded
LAYER 03

Proxy & Telemetry Wall

Anti-Detect Hygiene

Hardware spoofing (Canvas, WebGL, AudioContext, Screen Res). Dedicated static residential/mobile ISP proxies. Zero consumer browser contamination.

Zero Fingerprint Association
LAYER 04

Tracking & Domain Bridge

Conversion Continuity

First-party server CNAME cloaking, Cloudflare CAPI proxy, and redundant backup domain rotation to prevent landing page safety flags.

Preserves 100% Signal Fidelity
CRITICAL PRINCIPLE: If Layer 02 is hit by an automated algorithm sweep, Layers 01, 03, and 04 remain 100% uninfected. A backup Layer 02 node is attached in < 4 hours.
Consult Specialist →
// ADOPS RUNBOOK SPECIFICATIONS

Production SOPs for High-Spend Operators

Detailed protocols we deploy for high-velocity e-commerce and performance marketing organizations.

SOP-01

The 15-Minute Ban Disaster Recovery Protocol

When an account restriction notification arrives, standard media buyers panic and immediately click "Request Review" — triggering automated AI confirmation that locks the account permanently. Follow this exact sequence instead:

MINUTE 0 - 2
DO NOT CLICK APPEAL
Self-serve reviews are processed by automated bots with an 88% rejection rate. Touching this locks the appeal.
MINUTE 2 - 5
ISOLATE THE ASSET BRIDGE
Revoke asset sharing permissions from the affected ad account inside your Root Asset Sanctuary.
MINUTE 5 - 10
ESCALATE VIA TIER-1 REP
Submit account ticket through our internal direct partner portal for human enterprise review.
MINUTE 10 - 60
SWITCH TO HOT BACKUP
Point campaigns to the standby Tier-1 agency account and resume flight without downtime.
SOP-02

Safe Pixel Bridging & Permission Handshake

The single most common mistake in multi-account setups is creating the pixel in the spending account. If that account burns, months of conversion calibration and optimization data are incinerated.

01.

Create the pixel exclusively inside the Root Asset Sanctuary BM. This BM never runs campaigns, holds no payment methods, and has no media buyers.

02.

Assign the pixel via Partner Asset Sharing using the Agency Account's Partner ID. Grant "Manage Campaigns" permission only; never transfer ownership.

03.

Configure Server-Side Conversions API (CAPI) on a dedicated custom subdomain CNAME (e.g. metrics.yourbrand.com) to route events independently of browser ad blockers.

SOP-03

Anti-Detect Environment & Proxy Hygiene SOP

Meta and Google harvest over 150 hardware and network parameters every session. Logging into different accounts from the same consumer browser profile creates an instant identity graph connection.

1. Anti-Detect Profiles

Each agency account operates inside an isolated browser profile (AdsPower / Multilogin) with spoofed Canvas, WebGL, and OS telemetry.

2. Static Residential IPs

Never use data center VPNs. We bind each profile to dedicated static residential ISP proxies in matching corporate jurisdictions.

3. Dedicated 2FA Vault

Hardware 2FA or cloud OTP vaults isolated from individual personal cell phone numbers to prevent SIM-swap and 2FA lockouts.

Ready to Harden Your Ad Infrastructure?

Let Specialist review your current Business Manager setup, identify contamination vectors, and provision Tier-1 agency accounts for your media buyers.