GBU Business Manager Resilience Plan

Three-Tier BM Architecture

Tier 1 — Asset Owner

MASTER BM — "The Vault"

Owns: Page, Instagram, Pixels, Domain, System Users
Never runs ads. Never has payment methods.

PARTNER ACCESS (shared assets, not ownership)

ADS BM 1

Ad Account + Unique Card
Separate device/IP

ADS BM 2

Ad Account + Unique Card
Separate device/IP

RESERVE BM

Warm standby — low-spend reputation building only

▼

PHASE 0: EMERGENCY AUDIT

CRITICAL This Week — Days 1-3

0/7

Verify who owns ad account act_240020348684391 (agency BM or GBU BM?) — Check Business Settings → Accounts → Ad Accounts Verify who owns pixel 619075413101782 — Check Business Settings → Data Sources → Pixels Verify who owns Facebook Page 115261861538905 — Check Business Settings → Pages Verify who owns Instagram account 17841458536474737 — Check Business Settings → Instagram Accounts Confirm Corey has personal admin access to the Facebook Page (not just through BM) Confirm Corey has owner/admin access to the Instagram business account Document findings in a status report — this determines the entire strategy

▼

PHASE 1: CREATE MASTER BM — "THE VAULT"

CRITICAL Days 1-7

0/11

The Master BM owns all crown jewels. It NEVER runs ads. If an Ads BM gets banned, the Master BM (and all its assets) survive.

▼

PHASE 2: DOMAIN VERIFICATION & PIXEL INFRASTRUCTURE

HIGH Days 7-14

0/6

Verify gelballundercover.com.au domain in Master BM via DNS TXT record Configure Aggregated Event Measurement (AEM) — set PURCHASE as priority event Create System User inside Master BM with admin role Generate non-expiring System User token for CAPI Store new token in vault: vault-set "META_GBU_MASTER_TOKEN=..." Consider registering a secondary domain (e.g., gbu-direct.com.au) for test BMs — reduces domain-ban contagion

▼

PHASE 3: DUAL-PIXEL IMPLEMENTATION

HIGH Days 14-21

0/7

This is the single most valuable preparation step.

Modify CAPI integration (~/scripts/api/meta_ads.py) to fire events to BOTH old pixel AND new Master BM pixel Use identical event_id values for deduplication across both pixels Add new pixel browser-side code to Shopify theme (alongside existing pixel) Verify events are flowing to new pixel in Events Manager Confirm PURCHASE events are being received by new pixel Monitor for 7 days — verify event counts match between old and new pixel (±5%) Begin sending CAPI events to additional Master BM pixels (3-4 total) — server-side only, no client impact

▼

PHASE 4: DATA PRESERVATION

HIGH Days 7-21

0/9

Can run in parallel with Phases 2-3.

Export full Shopify customer list as CSV (name, email, phone, total orders, total spend) Export Klaviyo subscriber lists as CSV Download ALL creative assets from current ad account (images, videos) Store creative archive in Google Drive (Agency of Agents/brands/gbu/creative-archive/) Document complete campaign architecture (campaign names, objectives, budgets, bid strategies) Document all ad set targeting parameters, optimisation goals, placements Screenshot all campaign settings from Ads Manager Export all custom audience definitions (names, rules, sizes) Set up weekly automated Shopify customer export (for ongoing audience rebuilds)

▼

PHASE 5: CREATE ADS BM 1

MEDIUM Days 21-30

0/13

First operational advertising BM. Requirements: Master BM must be verified. Page and pixels must be in Master BM.

▼

PHASE 6: CREATE ADS BM 2

MEDIUM Days 30-45

0/7

Second operational advertising BM.

Identify person to create Ads BM 2 (different person from Ads BM 1 creator — NOT Master BM admin) Create new Business Manager under their profile — name: "GBU Media 2" Complete Business Verification Share Page, Pixel #2, Instagram from Master BM (partner access) Create ad account — unique payment method (different card from Ads BM 1) Upload customer audiences, build lookalikes Ensure this BM is ONLY accessed from a separate device/browser profile from Ads BM 1

▼

PHASE 7: WARM RESERVE BM

LOW Days 45-60

0/6

Insurance for rapid failover.

Identify person to create Reserve BM (Employee C or D) Create BM, verify, share assets from Master BM Create one ad account with unique payment method Run a small ($10-15/day) engagement or traffic campaign to safe content (blog, brand story) Purpose: build account history and positive reputation only Use lifestyle creative only — no product imagery that could trigger weapon classification

▼

PHASE 8: ISOLATION PROTOCOL

HIGH Ongoing

0/8

Must be maintained permanently.

Confirm: Master BM admin profiles are NOT admins on any Ads BM Confirm: Each Ads BM has its own unique payment method (no shared cards) Confirm: Each Ads BM is accessed from a separate device or anti-detect browser profile Confirm: No shared IP between Ads BMs (use residential proxies if same office) Confirm: Page ownership remains in Master BM only (never Ads BMs) Confirm: All pixels owned by Master BM only Document the isolation matrix — which person, device, payment, IP for each BM Set calendar reminder: monthly isolation audit

▼

PHASE 9: AGENCY NEGOTIATION

MEDIUM Parallel — Start Week 2

0/7

Frame the conversation: "We want to protect your BM from our product category risk" Request transfer of ad account ownership from agency BM to GBU Master BM If ad account transfer is refused: request pixel sharing (partner access to current pixel) If pixel sharing is refused: dual-pixel strategy (Phase 3) is the fallback — no agency cooperation needed Request agency share all custom audiences to GBU Master BM Negotiate 90-day transition timeline with continued agency management during handover Get in writing: who owns what assets, what happens on contract termination

▼

PHASE 10: BACKUP PROFILE WARMING

LOW Start Now — 6 Month Investment

0/5

Long-term insurance.

Identify 2-3 real employees/associates willing to create Facebook profiles for future BM creation Each profile must be a real person (Meta real-name policy) with natural activity Profiles should post, like, comment naturally for 6+ months before creating any BM Do NOT connect these profiles to any existing BM These are held in reserve — ready to create BMs 4 and 5 when/if needed

Reference: Contagion Isolation Matrix

Link Type	Risk Level	Isolation Method
Shared admin profile	CRITICAL	Zero overlap between BMs
Shared payment method	HIGH	Unique card per BM (virtual cards OK)
Shared device/browser	HIGH	Anti-detect browser or separate devices
Shared IP address	HIGH	Residential proxies or separate networks
Page owned by banned BM	CRITICAL	Page lives in Master BM ONLY
Same domain	MEDIUM	Consider secondary domain for test BMs
Same business name	LOW	Can be same company
Same business address	LOW	Can be same address

Reference: Failover Timeline

Scenario	CPA Impact	Recovery Time
Cold start (no preparation)	2-3x target ($50-75)	8-12 weeks
Warm pixel (60 day dual-pixel)	1.5x target ($37-50)	4-6 weeks
Cooperative account transfer	Minimal	Days
Full bulletproof (this plan)	Near-zero interruption	Hours to days

Reference: What Cannot Be Transferred

Asset	Status
Pixel ownership between BMs	IMPOSSIBLE
Pixel event history to new pixel	IMPOSSIBLE
Lookalikes from shared seed audiences	IMPOSSIBLE
Campaign learning/algorithm data	IMPOSSIBLE
Merge two ad accounts	IMPOSSIBLE
System User tokens between BMs	IMPOSSIBLE