Layer defences
- Verified-fan — filter humans before codes go out
- Staggered windows — tier on-sale times by code group
- Virtual queue — rate-limit checkout concurrency
- hCaptcha — block automated registration
Planning
Test flow on staging with small caps before a stadium on-sale.
Communication
Tell fans which step they are in (registered → selected → queue → shopping) to reduce support load.