Architecture
Every request is routed to the right customer, domain, and database.
The public site, licensing services, hosted platform, and tenant data are separated so each layer can do one job well without turning WordPress into the application server.
1
WordPress site
Public campaign page, connector, license activation, protected admin doorway
License + domain
2
License API
Validates entitlement, domain limits, activations, plan, and plugin update access
Validated route
3
Hosted platform
Resolves the tenant and runs the giveaway, raffle, administration, and community application
Tenant connection
4
Customer tenant database
Stores that customer's campaigns, entries, referrals, users, chat, payments, email state, and settings
A
Administrator access
A logged-in WordPress administrator enters through a signed, short-lived gateway route that resolves the correct tenant before the console is loaded.
D
Domain isolation
The licensed public domain is matched to its tenant route, preventing one customer site from selecting another customer's database.
U
Independent updates
WordPress connector releases, hosted platform deployments, and tenant schema migrations are versioned separately.
WordPress connector
Your website stays the front door.
The TG Giveaway connector links a licensed WordPress site to Tactical Guardian without moving the campaign application into WordPress itself.
01
License and domain activation The connector validates the saved license against the website domain and reflects the assigned Lite or Pro entitlement.
02
Public campaign page It creates or repairs the configured WordPress campaign page and loads the hosted campaign experience inside that page.
03
Protected administrator gateway It creates the WordPress-only admin doorway used to request a signed tenant session for the hosted console.
04
Licensed plugin updates Pro installations receive eligible connector releases through the normal WordPress update experience.
Tenant database
Campaign data stays isolated by customer and domain.
Tactical Guardian runs the application centrally while each licensed domain connects to its own MySQL tenant database. The platform registry stores the route; the operational data stays in that tenant database.
1
Create a dedicated database
Create a blank MySQL database and a database user through the hosting provider. Existing Tactical Guardian databases can be attached without rebuilding their schema.
2
Connect it in the customer portal
Enter the host, port, database name, username, password, licensed domain, and public site URL. The portal tests the connection before saving it.
3
Initialize once, reconnect safely
A new blank database receives the tenant schema once. Reconnecting an existing tenant only re-establishes the route and does not rewrite its data.
One tenant route per licensed domain
Giveaways · Raffles · Entries · Referrals · Chat · Payments · Email · Settings
Platform console
The operating center behind every campaign.
The hosted console brings campaign creation, entries, moderation, analytics, communications, administration, and system controls into one tenant-aware workspace.
Campaign builder
Task management
Entry registry
Referral analytics
Winner workflows
Admin permissions
Audit logs
Campaign operations
Build, run, protect, and measure every campaign.
The platform supports the full operational workflow for free-entry giveaways and paid raffles, including participant activity before, during, and after the campaign.
Create campaigns, configure entry tasks, question-entry experiences, task values, timers, completion rules, and campaign-specific content.
Run paid raffle flows with tenant-level payment settings, payment confirmation, donation records, raffle entries, and winner verification.
Generate referral links, award referral entries, trace referred participants, review referral analytics, and identify inconsistent entry records.
Operate campaign chat with replies, mentions, reactions, pins, reports, moderator roles, timeouts, bans, trust scoring, and admin actions.
Review fraud logs, banned access attempts, CIDR suggestions, bot scans, inconsistent entries, deleted records, and cleanup workflows.
Manage email templates, automation, newsletters, suppression lists, send jobs, delivery logs, campaign analytics, and winner communications.
Payments
Paid raffle transactions route into the correct tenant.
Payment configuration belongs to the tenant operating the raffle. Tactical Guardian keeps provider credentials, raffle records, payment events, and campaign data tied to that tenant instead of mixing customer transactions together.
S
Stripe
Tenant-level keys and webhook settings support payment confirmation and raffle transaction processing.
P
PayPal
Tenant-level PayPal credentials and webhook configuration support the corresponding raffle payment path.
Transaction path
ParticipantStarts a paid raffle entry
↓
Payment providerProcesses the transaction
↓
Tenant routeResolves the correct campaign database
↓
Raffle recordUpdates payment and entry state
Payment webhooks are server-to-server endpoints. The platform verifies and routes the event before updating tenant raffle records.
Updates
Three release paths, each controlled independently.
Tactical Guardian separates connector releases, hosted platform deployments, and tenant database migrations so each layer can be updated and recovered without treating the entire product as one package.
WordPress connector
Versioned plugin packages are built by the Updates service and offered to eligible Pro installations through WordPress update checks.
SourceVersioned plugin package
DeliveryWordPress update flow
EntitlementPro license
Hosted application
Platform builds are validated, packaged, deployed through the Updates Command Center, and can retain a rollback target for the previous deployment.
SourceHosted platform release
DeliveryDeployment agent
RecoveryControlled rollback
Tenant schema
Schema migrations advance tenant databases separately from platform files and can record version state as changes are applied.
SourceVersioned migration
DeliveryTenant DB update path
ScopePer tenant
Security & access
✓
✓
✓
✓
✓
Tenant routing is validated before application data is opened.
Tactical Guardian uses layered checks around licensing, domains, tenant resolution, administrator access, database credentials, and platform routes.
License and domain checks
Connector requests are matched to the license and permitted domain before tenant access is granted.
Signed administrator gateway
Administrator access uses short-lived signed gateway tickets rather than exposing a raw tenant-selection URL.
Encrypted tenant credentials
Customer database credentials are stored in the platform registry in encrypted form and resolved server-side.
Tenant isolation
The platform opens the database assigned to the resolved tenant and does not fall back to another customer's route.
Operational controls
Maintenance mode, administrator permissions, audit logs, banned-user tools, fraud logs, bot scanning, and moderation controls protect ongoing campaigns.
Support
Account, licensing, tenant connection, billing, and platform support in one portal.
The Tactical Guardian customer portal is the central place to manage licenses, licensed domains, hosted tenant connections, account details, upgrades, and support requests.
Review plan status, domain allowance, WordPress activations, and the tenant attached to each licensed domain.
Connect a new tenant database, test connection details, or reconnect an existing tenant without rebuilding its schema.
Review plan access and move from Lite to Pro when additional platform entitlements are required.
Open and track support requests for platform behavior, tenant connections, billing, licensing, updates, or account access.
11 · Features
Everything included in Tactical Guardian.
A comprehensive inventory of campaign, raffle, winner, analytics, security, administration, and infrastructure capabilities available across the Tactical Guardian platform.
Campaign Management
Giveaway campaignsRaffle campaignsDraft / Active / Ended campaign statesCampaign schedulingStart and end date controlsCampaign imagesCampaign rules and termsComprehensive Rules BuilderRules version historyRules Version BindingCampaign authenticity sealCampaign cloning workflowsCampaign selectorBoard ViewTask Operations ViewCampaign cockpitWorkspace healthLive campaign countdownsManual and automatic winner modesWinner verification-days configurationAward PolicyPhysical prize policyEmail / Digital prize policyWinner phone requirement policy
Tasks & Entry Earning
Link tasksVideo-watch tasksQuestion tasksPoll tasksReferral tasksShare-link referralsFixed Donation raffle tasksVariable Donation raffle tasksRaffle Product catalogsPhysical product catalogsEmail / Digital product catalogsMultiple products per catalogProduct imagesProduct SKUProduct descriptionsIndependent product priceIndependent base entriesProduct entry multiplierProduct active / retired stateProduct sort orderRepeat product purchasesMulti-item product cartTask status controlsTask orderingTask integrity fingerprintsTask completion evidenceReferral entry configuration
Entries & Participants
Entries RegistryParticipant searchTask filteringEntry paginationEntry ResetTrusted entry weightRaw entry weightEntry quarantineQuarantine releaseDeleted-entry historyParticipant profilesVerified email participantsParticipant device evidenceUser-device trustParticipant JourneyReferral attributionReferral analyticsCross-campaign participant correlationCookie-first visitor identityVisitor IP historyVPN/IP rotation correlationAdmin analytics exclusion
Raffle Commerce
Stripe checkoutPayPal checkoutProvider-configuration-aware payment buttonsFixed donation checkoutVariable donation checkoutProduct cart checkoutServer-authoritative product price calculationServer-authoritative product entry calculationPayment item snapshotsPayment-kind discriminationCompletion-kind discriminationPayment-confirmed entry awardsPayment-level idempotencyStripe webhook processingPayPal webhook processingStripe metadata mismatch rejectionPayPal metadata mismatch rejectionPartial refund handlingFull refund handlingPayment failure cleanupPhysical product shipping collectionEncrypted saved shippingProduct Fulfillment workspaceReady to Ship workflowEmail product deliveryEmail product retry after failureTerminal email-delivery idempotencyDemo-mode Tactical Guardian payment testing exception
Winner Selection & Integrity
Canonical winner engineWeighted cryptographic random selectionDraw Integrity ChainFrozen eligibility poolDraw IDDraw snapshotEligibility MatrixProduction admin-email exclusionDemo normal-profile eligibilityReserved admin-profile exclusionQuarantine exclusionTrusted-device eligibilityTask-evidence eligibilityPayment-evidence eligibilityDraw certificateAdmin certificate verificationVoid-preserved draw historyManual winner selectionPro Auto WinnerCron-driven Auto WinnerAutomatic expired-winner replacementLite manual reselectionWinner-selection audit historyEnd-date winner lock
Winner Verification & Fulfillment
Provisional winner notificationSeparate verification emailVerification buttonVerification code fallbackOn-page verification modalServer-enforced verification deadlineVerification resend without deadline extensionFailed-mail deadline rollbackForfeiture emailWinner claim/contact modalRead-only winner emailEditable winner nameWinner phone capturePhysical shipping address captureEncrypted Winner Fulfillment VaultForward-only fulfillment lifecycleAward Winner physical workspaceCarrier selectionTracking/reference captureUPS supportUSPS supportFedEx supportDHL Express supportAdditional carrier supportEasyPost automatic trackingManual tracking fallbackCron tracking refreshPublic shipment transparencyDigital prize automatic deliveryEncrypted digital prize messagesEncrypted digital prize filesTransactional Your Prize emailDelivered / Fulfilled lifecycle mailWinner testimonial follow-upPermanent winner-story tokenWinner image uploadWinner message submissionPast Winners / Legends modalGiveaways / Raffles / Both winner filtersThis Can Be You active-campaign card
Public Campaign Experience
Embedded WordPress campaign pageGiveaway/Raffle mode-aware labelsResponsive campaign heroTime remainingYour EntriesTotal EntriesWinner countRules modalTask ProgressReferral share linkRaffle ticket presentationRaffle Product catalog modalProduct galleryProduct cartResponsive shipping/payment flowCampaign Participation privacy choicePermanent participation after verified entryPrivacy & Essential Campaign Data noticeCompact Verified Campaign authenticityFour-stage ended workflowEntries ClosedSelection PendingWinner VerificationWinner AnnouncedLive DOM campaign-state refreshPrivate selected-winner workflow injectionPublic fulfillment statusPast Winners access when no active campaignMobile 2×2 ended-stage layoutCommunity chat
Email & Communications
Tenant SMTPSeparate SMTP usernameFrom address configurationReply-To configurationHTML email templatesWinner templatesVerification templatesForfeiture notificationsNon-winner result announcementsShipment noticesDigital prize messagesWinner-story follow-upCampaign ending emailNewsletter systemNewsletter subscribersAudience BuilderDemo-mode newsletter restrictionsCampaign lifecycle mail queueIdempotent lifecycle mail eventsCron mail workerNewsletter unsubscribe
Analytics & Intelligence
Campaign analyticsEntry activity chartsParticipant totalsEntry totalsTask completion analyticsReferral analyticsFraud analyticsGiveaway analyticsRaffle revenue analyticsPaid supporter metricsTotal raisedTrusted vs Raw IntelligenceTrust ratioEligibility countsTask observational liftTask Incrementality insightsCross-Campaign Return CohortsPredictive LabSEO recommendationsApply-to-SEO workflowGlobal IntelligenceAdmin exclusion from participant analyticsInactive campaign chart regions
Security & Investigation
Security CenterVisitors workspaceVisitor searchGiveaway/Raffle visitor filteringCampaign-specific visitor filteringSafety Score /100Server-side ban thresholdBan RegistryBlocked / Flagged count synchronizationIP evidenceCIDR/network evidenceUser-agent evidenceGateway/network scopeInspection-shortcut evidenceFraud signalsBlocked-access evidenceParticipant Journey forensic profileVisitor IP-history evidenceSecurity Case FilesAttach cases to visitorAttach cases to participant/userAttach cases to campaignAttach cases to ban eventAttach cases to quarantineAttach cases to fraud evidenceAutomatic case creation on system bansCase severityCase statusCase assignmentCase notesCase evidence snapshotsSuperadmin case deletionCase-deletion auditEntry quarantineFraud logsBot scannerManual bansCIDR bansCookie bansAdministrator gateway protectionDevice enrollmentThree-strike gateway blockStrict session handlingOpaque admin API aliasesOpaque public API aliasesDirect semantic endpoint protectionCSRF protectionPlatform browser error mirroringPublic browser error mirroringEncrypted private winner dataEncrypted API credentialsEncrypted prize files
Administration & Operations
Top-navigation admin consoleLight admin themeRole and permission guardsSuperadmin protectionsAdministrator managementTenant gateway sessionsSession-expiration countdownSession extensionSettings workspaceEmail templates workspaceSEO settingsPayments settingsDemo ModeLicense entitlement checksLite / Pro feature guardsSystem DiagnosticsAttack Surface checksReview Rules routingAudit LogsIncident logsAnytime logsMaintenance modeData Retention Policy EngineRetention previewProtected evidence scopesRetention executionSystem settingsCron maintenanceBackground campaign maintenanceAward Policy modalProduct Catalog modalProduct Fulfillment adminWinner fulfillment operations
Platform & Infrastructure
Multi-tenant architectureDedicated tenant database per clientComplete tenant_schema.sql provisioningSchema-only tenant migrationsPortal tenant routingWordPress connectorSigned administrator gatewayLicensed-domain routingHosted public applicationHosted administration consolePlatform deployment agentConnector updatesTenant DB push toolingPlugin push toolingRollback packagesRelease validation manifestsSHA-256 release manifestsLiteSpeed/Hostinger cache compatibilityOPcache-aware deployment guidanceCron all-tenant workerSigned internal cron service callsNo exec() requirement for tenant fan-outProduction error loggingPrivate implementation directories
01 / 11