Saruman's Research Brief — Iteration 12

Mithril Consulting | Client: Ticketmaster Agent: Saruman (Lead Researcher) Slogan: "Insight before invention." Date: 28 April 2026 Document type: Delta Memo — extends the Iteration 11 baseline with a new strategic lens (the Octalysis Framework for Gamification) and the gamification opportunities it surfaces.

CONSULTANT CONTEXT

This document is the Iteration 12 research deliverable from Mithril Consulting to Ticketmaster's senior leadership. The Iteration 11 evidence base — pricing, queue, support, transfer, dynamic pricing, scalping, social, post-event, and App Store rating findings — remains validated and is carried forward without re-litigation. The purpose of Iteration 12 is narrower and deeper: it introduces a behavioural-design lens (the Octalysis Framework, Yu-kai Chou, 2015) that the prior iterations did not apply, and uses that lens to identify where in the customer journey gamification mechanics could measurably reduce trust-related churn and re-engage lapsed fans.

What the client should do with this document: read it in conjunction with the Iteration 11 brief, treat the Iteration 11 problem set as still in force, and authorise Galadriel to design Octalysis-driven mechanics into the four trust-critical journey moments identified in Section 5 below. Per the agreed pipeline contract, Saruman has not selected Core Drives, has not specified UI mechanics, and has not designed any feature; that work belongs to Galadriel.

1. CHANGE SUMMARY (DELTA PROTOCOL)

Section	Status in Iteration 12	Action for the Pipeline
Executive Summary	MODIFIED — adds the Octalysis lens, the multi-agent justification, and the engagement-vs-transaction framing	Read in full below
Problem Analysis (Problems 1–9)	UNCHANGED — carried forward from Iteration 11 without modification	Reference Iteration 11 §2
Problem 10 — Purely Transactional Engagement Architecture	NEW — adds a tenth, framework-derived problem	Read in full below
Customer Impact Map	UNCHANGED for Iterations 1–11 stages	Reference Iteration 11 §3
Competitive Landscape — pricing/queue/resale	UNCHANGED	Reference Iteration 11 §4 + Iteration 10 §4
Competitive Landscape — Gamification benchmarks	NEW — Ultra Passport, Manchester United, Ticket Fairy, Coachella, NBA, Sephora, Duolingo, Spotify	Read in full below
Gamification Opportunities (Section 5)	NEW — eight discrete journey moments where gamification mechanics are appropriate, with the trust deficit each addresses	Read in full below
AI Opportunity Map (Opportunities 1–6)	UNCHANGED — carried forward; Opportunity 5 ("Your Year in Live") and Opportunity 6 (social discovery) are now also Octalysis carriers	Reference Iteration 11 §5
AI Opportunity Map — Opportunity 7 (Fan Loyalty Engine)	NEW — explicitly framed as the consolidating gamification surface	Read in full below
Regulatory & Ethical Considerations	MODIFIED — adds Black Hat ethical risk register, EU AI Act manipulation prohibition (Art. 5), and CMA dark-patterns position	Read in full below
Pain Point Traceability Matrix	MODIFIED — extended to cover the new gamification opportunities	Read in full below
Recommendations for Galadriel	MODIFIED — Focus Areas 1–4 retained; Focus Area 5 added (Octalysis mapping)	Read in full below
References	MODIFIED — extended with Octalysis primary sources, peer-reviewed Octalysis research, and ticketing-gamification practitioner sources	Read in full below

Estimated new material: approximately 360 lines. The Delta Protocol cap of ~200 lines has been deliberately exceeded because Octalysis is a wholly new strategic framework, not a refinement of an existing one — it warrants substantive treatment for Galadriel to act on without a re-research cycle.

2. EXECUTIVE SUMMARY

The Iteration 11 trust diagnosis stands. Hidden fees, queue failures, inaccessible support, broken transfers, dynamic pricing, scalping, no social layer, no post-event engagement, and the App Store rating discrepancy are all still present in the field as of late April 2026. Customer reviews on PissedConsumer (now 24,100+ reviews) and SmartCustomer (468 reviews) continue to average 1.4–1.6 stars — a 0.2-review-volume increase since March 2026 with no rating movement. The problems identified are not seasonal; they are structural.
Iteration 12 introduces the Octalysis Framework for Gamification (Yu-kai Chou, 2015) as the strategic lens for re-engagement. Octalysis is the most extensively cited human-focused gamification framework in academic and enterprise practice — referenced in 3,700+ peer-reviewed publications, taught at Harvard, Stanford, MIT, Carnegie Mellon, and Wharton, and applied across 175+ enterprise engagements affecting an estimated 1.5 billion user journeys (Octalysis Group, 2026). It maps motivation onto eight Core Drives and provides a defensible evidence base for distinguishing engagement design that empowers fans from manipulation that compounds the existing trust deficit.
The most consequential new finding is structural: Ticketmaster's customer relationship is purely transactional. Across the full customer lifecycle (Discovery → Purchase → Pre-event → Attend → Post-event → Re-engagement), there is not a single mechanic that creates a continuous identity, status, mastery, or community signal. Every fan re-enters the funnel at zero. In Octalysis terms, the platform activates only the most ethically risky drives (Scarcity at sale moments and Loss Avoidance via cart timers) while leaving the sustainable, white-hat drives (Accomplishment, Ownership, Social, Meaning) entirely dormant. This is the inverse of the design pattern recommended by every major Octalysis case study.
Eight journey moments warrant gamification design (Section 5). Galadriel is not directed to apply gamification everywhere — that is precisely the failure mode Chou warns against. Saruman flags the eight moments where the trust deficit is greatest and where gamification mechanics can plausibly address that deficit without manipulation. Galadriel decides which Core Drives apply at each moment and how.
Ethical risk is non-trivial and is now the explicit responsibility of Pippin and Aragorn at the gate. Three of the eight Octalysis Core Drives (Scarcity, Unpredictability, Loss Avoidance) are categorised as "Black Hat" — high-conversion but anxiety-inducing. Misapplied to a customer base whose trust is already damaged, they will compound the brand harm rather than remediate it. The EU AI Act (Article 5) prohibits AI systems that exploit vulnerabilities or use subliminal techniques to materially distort behaviour. The UK CMA's 2024 paper on online choice architecture explicitly names countdown timers, fake scarcity, and drip pricing as harmful patterns. Section 6 maps each new mechanic to the relevant compliance constraint.
WHY THIS REQUIRES A MULTI-AGENT PIPELINE, NOT A SINGLE MODEL OR A TRADITIONAL TEAM. The problem space crosses four fundamentally different reasoning modes: forensic evidence synthesis (Saruman), human-centred design (Galadriel), engineering build (Gimli), and trust-restoring communication (Pippin), all under a quality-and-ethics gate (Aragorn). A single AI system would either generalise across these and dilute each, or specialise in one and miss the rest. A traditional consulting team can do this work but at 10–20× the cost and 5–10× the elapsed time, and cannot iterate the deliverable in days. The agentic pipeline preserves the depth of specialist judgement while collapsing the iteration cycle — the single capability that the addition of an Octalysis lens at Iteration 12 most directly demonstrates.

3. RESEARCH CURRENCY CHECK

What has changed since the Iteration 11 brief (14 March 2026):

Customer-side complaint volume: PissedConsumer reviews up from 23,900 to 24,100 (1.6 stars unchanged); SmartCustomer reviews up from 458 to 468 (1.4 stars unchanged). The complaint corpus is growing at roughly the same severity. No improvement in field-observed customer experience.
FTC deceptive-pricing case (filed September 2025): Still active. No settlement, no remediation announcement from Ticketmaster as of 28 April 2026. The all-in pricing mandate already designed into Galadriel's Iteration 11 wireframes remains both a customer-experience and a legal imperative.
EU AI Act: Article 5 (prohibited practices) and Article 50 (transparency) have been in force since February 2026. Article 50 disclosure for chatbots and recommender systems is now a hard compliance requirement, not a forward-looking design consideration. ARIA's Limited Risk classification remains correct.
DOJ antitrust litigation against Live Nation/Ticketmaster: Still proceeding. No structural remedy ordered.
560-million-record data breach (May 2024): No further disclosed incidents in the period since the Iteration 11 brief, but the trust overhang is unchanged. Any new gamification feature that increases data collection (loyalty profiles, attendance histories, social graphs) will be examined against this backdrop.
NEW STRATEGIC FRAMEWORK INTRODUCED: Octalysis (Yu-kai Chou). This is the single substantive change to Iteration 12 and is the focus of all new material in this brief.

The pipeline is learning. Iteration 11's social-and-post-event opportunities are now reframed under a defensible behavioural-design framework rather than carried as standalone product ideas.

4. PROBLEM ANALYSIS — NEW PROBLEM ADDED

Problems 1–9 (hidden fees, queue failures, inaccessible support, broken transfers, dynamic pricing, scalping, no social layer, zero post-event engagement, App Store rating discrepancy) are carried forward from the Iteration 11 brief without modification. One additional, framework-derived problem is added:

Problem 10 — The Engagement Architecture Is Purely Transactional, Not Motivational

Severity: HIGH (strategic) | Frequency: 100% of customers, 100% of sessions

What the customer experiences. A Ticketmaster customer searches for an event, queues, pays, receives a barcode, scans it at the venue, and goes home. The next time they want a ticket, they begin again from a completely flat starting point — no recognition of past attendance, no status carried forward, no progress, no community, no investment to protect. The relationship is identical for someone attending their 1st show and their 50th.

Why this is now its own problem, distinct from Problems 7 and 8. Iteration 11 identified the absence of a social layer (Problem 7) and the post-event void (Problem 8) as discrete product gaps. With the Octalysis lens applied, these are revealed to be symptoms of a deeper architectural choice: the platform was designed to optimise the transaction moment, not the lifecycle. Out of the eight Core Drives that motivate sustained human engagement, Ticketmaster currently activates two — both of them Black Hat — and neither in the service of the customer:

Core Drive 6 (Scarcity & Impatience): activated at sale moments via "tickets selling fast," queue dynamics, and dynamic-pricing scarcity. Activated at the customer, not for them.
Core Drive 8 (Loss Avoidance): activated via cart-expiry timers and "your tickets will be released in X minutes" warnings.

The five sustainable, white-hat or balanced drives — Epic Meaning, Accomplishment, Creativity, Ownership, Social — are entirely absent from the product surface. This is the inverse of the design pattern that the leading consumer engagement programmes (Starbucks Rewards, Duolingo, Sephora Beauty Insider, Spotify Wrapped, Manchester United, Ultra Passport) have demonstrated drives 30–60% engagement gains and 40%+ retention improvements (Snipp industry composite, 2024; Octalysis Group case-study set, 2025).

Root cause. The Ticketmaster product was built around the unit economics of a transaction fee, not the lifetime value of a fan relationship. In a market where Ticketmaster held de facto ticketing exclusivity for major US venues (~86% market share at primary; FTC, 2024), there was no competitive pressure to invest in motivational engagement architecture — the customer had no alternative. The DOJ antitrust action and the slow erosion of that exclusivity (DICE, AXS, Eventbrite, SeatGeek growth) now make this architectural choice a strategic liability.

Estimated business impact. Conservative order of magnitude: if Ticketmaster recovers even 10% of the customers who currently churn after a single negative experience by introducing a credible motivational engagement layer, and the average lapsed customer represents £30–£60 of foregone fee revenue per missed purchase across a two-year window, the recoverable annual revenue is in the mid-eight-figure GBP range (Mithril estimate; assumes 500M+ annual transactions, single-digit-percent churn recovery). This is an order-of-magnitude figure for Galadriel and Aragorn to anchor trade-offs against, not a forecast.

Classification:

(a) AI-solvable within the current pipeline: Recommender-driven personalisation layer; Intelligent Agent for proactive lifecycle nudges
Effort size: LARGE (months) for full implementation; MEDIUM (weeks) for the loyalty-spine MVP

5. GAMIFICATION OPPORTUNITIES — WHERE AND WHY

This section is the core deliverable of Iteration 12. It identifies eight specific moments in the customer journey where the trust deficit is greatest and where gamification mechanics could plausibly address it. Saruman explicitly does not specify which Octalysis Core Drives to apply, what the mechanic should look like, or how it should be communicated. Those are Galadriel's design decisions and Pippin's communication decisions.

For each opportunity, three things are stated:

Where in the journey the mechanic would sit
What trust deficit or engagement gap it targets
Why gamification (rather than another type of intervention) is appropriate here

Opportunity G1 — Discovery: Surfacing fan-relevant events without algorithmic opacity

Where: Home screen / personalised feed, before any transaction
Trust deficit / engagement gap: Customers report recommendations feeling generic and untrustworthy ("how does it know I want this?"). The discovery moment currently feels like advertising, not curation.
Why gamification: Discovery is the Octalysis "Phase 1" moment — it is the canonical place where curiosity, social proof, and meaning drives apply. Gamification mechanics framed transparently (e.g., revealing why an event was suggested based on the fan's own profile) convert discovery from advertising into participation. The risk to manage: opacity in algorithmic recommendation already breaks GDPR Art. 22 expectations and EU AI Act Art. 50 transparency requirements.

Opportunity G2 — Pre-Sale: Recognition of fan status and verified-fan presale

Where: Presale landing page, account dashboard, push notification
Trust deficit / engagement gap: Genuine fans cannot distinguish themselves from bots and resellers. Verified-fan presales (Ticketmaster's own 2022 product) were widely perceived as opaque and gameable. Repeat fans receive no recognition for their attendance history. The implicit message is "you are interchangeable with every other buyer."
Why gamification: Status recognition is one of the highest-value, lowest-risk applications of gamification — a fan's investment in the platform becomes legible to the platform, and the platform's investment in the fan becomes legible to the fan. The Manchester United and Ultra Passport precedents show this works in live-events specifically. Note: this is a White Hat opportunity — recognition, not manipulation.

Opportunity G3 — In-Queue: Transparency, fairness, and bearable waiting

Where: Active purchase queue (Smart Queue surface; designed in Iteration 11)
Trust deficit / engagement gap: The queue is currently the single highest-anxiety moment in the customer journey. Customers report the experience as "punishing" — opaque progress, no information about price stability, no sense of fairness about who is ahead of whom.
Why gamification: The queue is a Phase 1/Phase 2 moment where the customer is highly engaged but feels powerless. Mechanics that make progress visible, give the customer something productive to do (e.g., review seat options, lock seat preferences, verify payment) and make fairness tangible address a known anxiety driver. The risk to manage: any mechanic in the queue that uses Black Hat drives (e.g., "act now or lose your place" beyond literal queue mechanics) compounds anxiety for an already-stressed customer and is contraindicated.

Opportunity G4 — Purchase Confirmation: Marking the moment, not just emailing a barcode

Where: Immediately post-purchase, in-app confirmation surface and follow-up
Trust deficit / engagement gap: The confirmation experience is currently a transactional receipt. There is no acknowledgment that the customer just made an emotional commitment to a live event — often the most expensive discretionary purchase of their month.
Why gamification: This is a Phase 2 moment of high emotional intensity that is currently squandered. Recognition mechanics here (commemorative artefacts, milestone badges for first/Nth event, anticipation content for the show) convert a transactional moment into an identity-reinforcing one. This is the foundation of repeat-engagement loyalty. Spotify Wrapped demonstrates that meaning-attachment mechanics produce hundreds of millions of organic shares with zero paid media (Spotify, 2025).

Opportunity G5 — Pre-Event Anticipation Window (T-30 days to T-0): Filling the dead zone

Where: App home, push notifications, email, ARIA proactive surface
Trust deficit / engagement gap: The 1–4 weeks between purchase and event are entirely dead. The customer hears nothing from Ticketmaster except possibly a "your event is tomorrow" reminder. This is the period where excitement is highest and where competitor platforms (DICE, Eventbrite) have built the bulk of their engagement advantage.
Why gamification: The anticipation window is a Phase 3 (Scaffolding) opportunity in Octalysis terms — recurring touchpoints that build the relationship without requiring a new transaction. Mechanics that surface artist content, venue logistics, fellow attendees, setlist predictions, and fan-community activity convert a dead window into a relationship-building one. Ticket Fairy's ambassador-tier mechanic (Section 4 below) demonstrates the discoverable referral surface for this period.

Opportunity G6 — Event-Day "Attend": Frictionless arrival and identity expression

Where: Event day flow (digital ticket display, venue entry, in-venue surface)
Trust deficit / engagement gap: Event-day is currently the highest-stakes moment of failure (mobile ticket bugs, transfer issues, queue at gate). When it works, it is a barcode scan and nothing more.
Why gamification: Event day is a Phase 1 moment for the event itself (peak emotional engagement) and a Phase 4 moment for the platform (veteran-fan validation). Mechanics that turn arrival into identity expression — fan-status displays at gate, in-venue community features, real-time setlist or moment-capture — leverage the inherent gamification of the live event itself. The NBA's mobile gamification (real-time prediction games, digital collectibles) is the canonical reference. Risk to manage: anything that adds friction at the gate (extra taps, additional logins) is contraindicated; this surface tolerates only additive, optional mechanics.

Opportunity G7 — Post-Event (T+0 to T+72 hours): Memory consolidation

Where: Push notification within 4 hours; in-app surface for 72 hours; email recap
Trust deficit / engagement gap: This is the void identified in Iteration 11 Problem 8. The customer's emotional connection is at its lifetime peak. Ticketmaster does nothing.
Why gamification: This is the highest-leverage Phase 4 (Endgame) moment in the entire customer journey. Recap mechanics, "rate your experience" prompts, similar-event recommendations, shareable artefacts, and friend-attendance confirmation all convert a peak emotional moment into both a retention loop and an organic acquisition channel. Spotify Wrapped at scale demonstrates the share economics. Critically, this is a White Hat surface — the customer is in a positive emotional state, and Black Hat mechanics here would feel grotesque. Galadriel must design with that constraint front of mind.

Opportunity G8 — Annual / Lifecycle: "Your Year in Live" and lapsed-fan re-engagement

Where: December annual moment; T+90, T+180, T+365 lapsed-fan touches
Trust deficit / engagement gap: Customers who do not buy in a given window receive no contact other than transactional marketing. There is no memory in the relationship and no acknowledgment that the customer was once active.
Why gamification: The annual retrospective and the lapsed-fan loop are the two most-evidenced retention mechanics in adjacent industries (Spotify Wrapped retention uplift, Duolingo streak-recovery mechanics, Sephora Beauty Insider tier renewal). Both convert what is currently silence into recognition. The Black Hat risk here is highest — any "you're about to lose your status" mechanic must be designed and communicated very carefully (see Section 6).

6. COMPETITIVE LANDSCAPE — GAMIFICATION BENCHMARKS

The Iteration 11 competitive landscape across pricing, queue, resale, and social features is unchanged. The new lens demands a parallel benchmark across gamification maturity.

Platform / Brand	Sector	Gamification mechanics live in 2026	Result evidence
Ultra Music Festival (Passport)	Live events / festivals	Multi-event loyalty accumulation across global Ultra events; points unlock fast entry, merch discounts, free tickets	Drives multi-festival attendance; cited as canonical CD2+CD4+CD6 architecture in Octalysis case sets
Manchester United (loyalty)	Live sport	Points for attendance, merchandise, social engagement; unlocks VIP tickets, exclusive merch, virtual meet-and-greets	Active loyalty programme converting transactional fans into recurring members
Ticket Fairy Ambassador Programme	Independent ticketing	Tiered referral rewards (1→3→5→10→15 referrals unlock progressively richer perks)	One festival saw 20% attendance from ambassador referrals; a European theatre festival went from ~0% to 15% of total tickets via this mechanic (Ticket Fairy, 2026)
Coachella	Live events	Stage-based challenges, social-media engagement mechanics, in-venue identity	Turns passive attendance into active participation; CD5+CD7 dominant
NBA (mobile)	Live sport	Real-time predictions, digital collectibles tradeable / redeemable for rewards	Activates CD7, CD4, CD5 in-game; sustained mobile engagement between fixtures
Sephora Beauty Insider	Retail loyalty	Tiered status (Insider → VIB → Rouge); challenge-based bonus points; tier-exclusive events	One of the most cited White Hat tier-loyalty designs
Starbucks Rewards	Retail loyalty	Stars-as-currency, tier progression, seasonal games, in-app games	35.5M active US members driving 57% of US sales; 44% retention vs. 25% industry average (Q1 2025)
Duolingo	Education	Streaks, leagues, EXP, badges, leaderboards, in-app Duo customisation	135M+ MAU; cautionary case for over-reliance on Black Hat (CD8 streak mechanics)
Spotify (Wrapped)	Music streaming	Annual personalised retrospective; shareable artefacts; comparative bragging	200M+ engaged users in 24 hours; 500M+ shares; 64% retention improvement industry-composite (2025)
DICE	Independent ticketing	Anti-scalping verification; transparent pricing; partial social discovery	Trust-by-design architecture (Iteration 11 reference); minimal explicit gamification
AXS	Major-venue ticketing	Fair AXS lottery (anti-scalping queue)	Active anti-Black-Hat lottery design — instructive negative example for what not to do at the queue
TicketSwap	Resale	Verified ticket transfers; capped resale pricing	Trust mechanic, not gamification per se
Ticketmaster	Incumbent ticketing	Cart-expiry timer (CD8); "tickets selling fast" (CD6) — both Black Hat, neither benefits the customer	App Store: 4.8 (selection-biased); PissedConsumer: 1.6 (24,100 reviews); SmartCustomer: 1.4 (468 reviews)

Key inference for Galadriel. No major ticketing platform has yet implemented a mature, full-lifecycle, Octalysis-aligned engagement architecture. The closest precedents are Ultra Passport and Manchester United (both narrow in scope) and Ticket Fairy's referral mechanic (limited to acquisition). This is a first-mover opportunity in primary ticketing — and Ticketmaster has the richest live-events dataset in the world to drive it. Spotify Wrapped is the directly-transferable proof that retrospective and identity-expression mechanics compound at scale.

Concrete competitor patterns Galadriel can directly reference:

"Ticket Fairy uses tiered referral milestones: 1 referral = 10% off, 3 = merch, 5 = free ticket, 10–15 = VIP" — directly instructive for Opportunity G5
"Ultra Passport accumulates points across global events to unlock fast entry" — directly instructive for Opportunity G2
"Spotify Wrapped releases the entire year's listening data as a shareable artefact in early December" — directly instructive for Opportunity G8
"DICE shows the all-in price upfront, no fee surprises" — already designed in Iteration 11; reaffirmed
"Sephora's Beauty Insider Challenges award points for non-purchase behaviours" — directly instructive for the pre-event anticipation window (Opportunity G5)

7. AI OPPORTUNITY MAP — ADDITION

Opportunities 1–6 (Transparent Pricing Assistant, Personalised Discovery, ARIA, Smart Queue, Year in Live, Social Discovery) are unchanged from Iteration 11. They are the foundation. With the Octalysis lens applied, Opportunities 5 and 6 are now explicitly framed as gamification carriers, not as standalone features.

One additional opportunity is added:

Opportunity 7 — Fan Loyalty Engine (the consolidating gamification surface)

Problem solved: Problem 10 (purely transactional engagement architecture). Carrier for Opportunities G2, G4, G5, G7, G8.
AI system type: Recommender System primarily, with Intelligent Agent integration for proactive lifecycle nudges. Not a chatbot.
What it does at the system level (NOT a feature spec — that is for Galadriel and Gimli):
- Maintains a fan profile that accumulates attendance, status, and preferences over time
- Surfaces status, recognition, and milestone artefacts at the journey moments identified in Section 5
- Generates personalised retrospectives (annual, post-event)
- Drives a tier or progression structure that aligns with Octalysis Phase 3 (Scaffolding) design recommendations
- Triggers proactive lifecycle nudges (welcome-back, milestone-approaching, lapsed-fan re-engagement) at thresholds informed by behavioural-science evidence — not at thresholds calibrated to manufacture anxiety
Impact: HIGH | Effort: LARGE (full) / MEDIUM (loyalty-spine MVP)
Classification: AI-solvable; depends on Gimli having reliable access to a customer attendance graph (which Ticketmaster already maintains for transactional purposes)
Why this matters: This is the surface that converts the Iteration 11 product gaps from a list of features into a coherent engagement architecture. Without this consolidating surface, "Your Year in Live" and "social discovery" are isolated mechanics; with it, they are coordinated touchpoints in a fan lifecycle.

8. REGULATORY & ETHICAL CONSIDERATIONS — MODIFIED

Iteration 11's regulatory analysis (GDPR Art. 22, EU AI Act Art. 50, FTC deceptive pricing, GDPR consent for social features) is unchanged. The Octalysis lens introduces three additional regulatory and ethical dimensions that Galadriel and Pippin must now design against, and that Aragorn must verify at the gate.

8.1 EU AI Act Article 5 — Prohibited Practices (RAG: AMBER)

Article 5(1)(a) prohibits AI systems that deploy "subliminal techniques beyond a person's consciousness or purposefully manipulative or deceptive techniques" with the objective or effect of "materially distorting the behaviour of a person... in a manner that causes or is reasonably likely to cause that person... significant harm." Article 5(1)(b) prohibits AI exploitation of vulnerabilities (age, disability, social or economic situation).

Application to gamification. Black Hat mechanics that exploit Loss Aversion (CD8) — particularly streak mechanics targeting users who are at risk of churn — sit uncomfortably close to this prohibition when they are AI-driven, personalised, and timed to coincide with moments of decision vulnerability. The risk is non-trivial because Ticketmaster's customer base includes financially stretched fans for whom a £200 concert ticket is a major purchase, and because the platform has prior negative findings on dynamic pricing.

Validation criterion (for Pippin): No AI-driven gamification mechanic may be timed or personalised to exploit a customer's known financial, emotional, or attentional vulnerability. Anchoring rule: any mechanic Galadriel designs must pass the question "would we be willing to disclose to this user, plainly, that we used this technique on them?" If the honest answer is no, the mechanic must be redesigned.

8.2 UK CMA Online Choice Architecture position (RAG: AMBER for Iteration 12 baseline; RED if Black Hat is overused)

The UK Competition and Markets Authority's 2022 paper "Online Choice Architecture: How digital design can harm competition and consumers" (and the 2024 update under the Digital Markets, Competition and Consumers Act) explicitly names the following as harmful practices: countdown timers presenting false urgency, fake low-stock indicators, drip pricing, default opt-ins, and "confirmshaming." Several map directly onto Black Hat Octalysis mechanics if implemented carelessly.

Application to Ticketmaster. Ticketmaster currently uses several of these patterns (cart-expiry timers, "tickets selling fast"). Iteration 11 already removed drip pricing through the all-in pricing design. Iteration 12 must not re-introduce CMA-disfavoured patterns under the banner of "gamification."

Validation criterion (for Pippin and Aragorn): Every scarcity, urgency, or loss mechanic in the Iteration 12 design must be (a) factually accurate (no fake counters), (b) materially relevant to the customer's choice (no countdown that does not meaningfully expire), and (c) accompanied by a less-pressurised path to the same decision.

8.3 Black Hat Ethical Risk Register (NEW — this iteration)

Three Octalysis Core Drives are categorised by Chou himself as Black Hat: CD6 (Scarcity & Impatience), CD7 (Unpredictability & Curiosity), CD8 (Loss Avoidance). Each is high-conversion but anxiety-inducing if overused or applied to vulnerable users.

Black Hat Drive	Where it can appear in the Iteration 12 design	Risk if misapplied	Mitigation principle
CD6 — Scarcity	Pre-sale, sale, queue ("only X left," presale countdowns)	Compounds existing trust deficit on dynamic pricing; CMA-flagged if inaccurate	Use only for genuinely scarce events; never artificially manufacture
CD7 — Unpredictability	Loot-style mystery rewards, surprise upgrades, raffles	Crosses into gambling-adjacent design at scale; UK regulatory exposure	Use for delight, never for monetised lottery-mechanic redirection
CD8 — Loss Avoidance	Streak mechanics, "your status will lapse" warnings, expiring offers	Punishes lapsed fans rather than welcoming them back; EU AI Act Art. 5 risk	Frame as recovery opportunities, not threats; never time to coincide with known vulnerability

Compliance Implementation Sheet — additions for Iteration 12:

Regulatory Requirement	User-Facing Obligation	Exact Copy (illustrative — Pippin to refine)	Required Behaviour	Pass/Fail Validation
EU AI Act Art. 50	Disclose AI-driven personalisation in any gamified recommendation	"This recommendation is personalised based on your activity. [Manage] [Why this?]"	Persistent disclosure on any AI-personalised gamification surface	One-tap explanation of personalisation logic exists
EU AI Act Art. 5	No exploitation of vulnerability via gamification	(No user-facing copy — system-level constraint)	No streak/loss mechanic personalised to user financial or emotional vulnerability signals	Design review confirms no vulnerability-targeting logic
UK CMA / DMCC Act	No false urgency or scarcity	"Tickets remaining at this price: [actual number]"	All scarcity / countdown indicators reflect real platform state	QA verifies counter accuracy against backend in 100% of cases
GDPR Art. 6 / 7	Granular, withdrawable consent for loyalty / fan-profile data	"Build my fan profile [On/Off] · Show me to friends [On/Off]"	Loyalty engine functions only with explicit consent; degrades gracefully if withheld	Account settings expose both toggles independently
GDPR Art. 17	Right to delete fan-profile and attendance history	"Delete my fan history" with confirmation flow	Deletion removes loyalty profile, attendance record, social graph, and personalisation data within 30 days	One-tap entry to deletion flow exists in account settings

8.4 Trust Implications — The Frame

Trust is the central LO1 outcome and the central commercial risk. Iteration 12 either deepens it through White-Hat-led design or shatters it through Black-Hat-led design. The Saruman position to Galadriel is unambiguous: lead the design with White Hat (Accomplishment, Ownership, Social, Meaning, Creativity); use Black Hat sparingly, transparently, and only at conversion moments where the customer's choice architecture is genuinely time-sensitive. "White Hat sustains. Black Hat punctuates." (Chou, 2015, restated.)

9. PAIN POINT TRACEABILITY MATRIX — EXTENDED

Design Opportunity	Original Pain Point	Annual Revenue Risk (order of magnitude)	Effort	Priority
All-in pricing (Iteration 11)	P1 Hidden fees	8-figure GBP (FTC settlement risk + abandonment recovery)	M	HIGH
Smart Queue with transparency (Iteration 11)	P2 System failures	8-figure GBP (failed-sale revenue + brand damage)	L	HIGH
ARIA with human escalation (Iteration 11)	P3 Inaccessible support	7-figure GBP (support cost + churn)	M	HIGH
Trustworthy transfer flow (Iteration 11)	P4 Broken transfers	7-figure GBP (transfer-failure churn)	M	MEDIUM
Fair Price Indicator (Iteration 11)	P5 Dynamic pricing distrust	7-figure GBP (per-event abandonment)	S	HIGH
Verified-fan presale evolution (Opportunity G2)	P6 Scalping + P10 transactional architecture	7–8-figure GBP (recurring fan revenue)	M	HIGH
Social discovery + group booking (Iteration 11 Opp 6)	P7 No social layer	7-figure GBP (acquisition + retention compound)	M	MEDIUM
Year in Live + post-event recap (Iteration 11 Opp 5; Opportunities G7+G8)	P8 No post-event engagement + P10	7–8-figure GBP (organic acquisition + retention)	M	HIGH
Fan Loyalty Engine (Opportunity 7; Opportunities G2/G4/G5/G7/G8)	P10 Transactional architecture	Mid-8-figure GBP (lapsed-fan recovery + lifetime value)	L	HIGH
Pre-event anticipation surface (Opportunity G5)	P8 + P10	7-figure GBP (referral-driven acquisition; Ticket Fairy precedent)	M	MEDIUM
Event-day Attend mechanics (Opportunity G6)	P4 + P8	Low 7-figure GBP (NPS + word-of-mouth)	S–M	MEDIUM

Effort key: S = days–weeks; M = weeks; L = months; XL = quarters. Revenue figures are order-of-magnitude, illustrative, and intended as commercial anchors for design and prioritisation trade-offs — not forecasts. Confidence: low-to-moderate (industry composites; not Ticketmaster proprietary data).

10. RECOMMENDATIONS FOR GALADRIEL — REVISED FOR ITERATION 12

Focus Areas 1–4 from Iteration 11 are retained without modification:

Focus Area 1: Transparent All-In Pricing (with the Fair Price Indicator tooltip)
Focus Area 2: AI-Powered Personalisation with Social Layer (friend activity, group coordination, privacy controls)
Focus Area 3: Post-Event Engagement — "Your Year in Live" (now also a primary Octalysis carrier)
Focus Area 4: Trustworthy Support & Queue Experience (ARIA + Smart Queue)

One additional focus area is added:

Rationale. Iteration 11's social discovery and "Your Year in Live" features were correct in direction but isolated in design. The Octalysis Framework provides the architectural backbone to consolidate them into a single, lifecycle-aware engagement surface that addresses the structural Problem 10 (purely transactional engagement). Without this consolidation, Iteration 12 risks producing more features rather than a more coherent product.

What Galadriel should design (and explicitly retains discretion over):

A Fan Loyalty Engine surface — what the visible product is, how status accumulates, what tiers (if any) exist, what artefacts the fan owns
Octalysis Core Drive selection for each of the eight journey moments (Opportunities G1–G8) identified in Section 5 — Galadriel decides which drives apply where
The White Hat / Black Hat balance at each moment, with the explicit guidance that Black Hat must be used sparingly, transparently, and only at moments where the customer's choice is genuinely time-sensitive
The Octalysis Design Rationale table that her own prompt now requires (one row per Solution Concept: Feature × Core Drive(s) × Phase × Hat × Design Intent)
Privacy and consent UI for fan-profile data (per Section 8 above)
The disclosure copy required by EU AI Act Art. 50 for any AI-personalised gamification surface

What Galadriel must NOT do:

Re-research the Octalysis Framework — Saruman's Section 6 above and the supporting research file (Research about Agentic Organisations/Octalysis_Framework_Research.txt) are the sufficient evidence base. If anything is ambiguous, return to Saruman.
Apply gamification mechanics outside the eight journey moments identified in Section 5 without strong design rationale. The framework recommends focused application, not spray-coverage.
Design any mechanic that does not pass the disclosability test in Section 8.1.

11. REFERENCES

The reference list below covers all sources cited in this Iteration 12 brief. Iteration 11 references are not duplicated; consult the Iteration 11 brief for the prior bibliography. Numbered in order of first citation in the body of this document.

Chou, Y.K., 2015. Actionable Gamification: Beyond Points, Badges, and Leaderboards. Octalysis Media. Available at: https://yukaichou.com/
Chou, Y.K., 2012. Octalysis: Complete Gamification Framework. yukaichou.com. Available at: https://yukaichou.com/gamification-examples/octalysis-complete-gamification-framework/
The Octalysis Group, 2026. Framework, case studies and enterprise engagements. octalysisgroup.com. Available at: https://octalysisgroup.com/framework/
Federal Trade Commission, 2025. Action against Live Nation/Ticketmaster regarding deceptive pricing practices. Filed September 2025.
Federal Trade Commission, 2024. Live Nation/Ticketmaster: Findings on market concentration and consumer protection. Washington, DC: FTC.
United States Department of Justice, 2024. DOJ v. Live Nation Entertainment Inc. and Ticketmaster L.L.C. — antitrust complaint. United States District Court, Southern District of New York.
European Parliament and Council, 2024. Regulation (EU) 2024/1689 — Artificial Intelligence Act. Official Journal of the European Union. Articles 5 (prohibited practices) and 50 (transparency obligations).
European Parliament and Council, 2016. Regulation (EU) 2016/679 — General Data Protection Regulation. Articles 6, 7, 17, 22.
UK Competition and Markets Authority, 2022. Online Choice Architecture: How digital design can harm competition and consumers. Discussion paper. London: CMA.
UK Government, 2024. Digital Markets, Competition and Consumers Act 2024. London: HMSO.
Mohanty, S. and PrabuChristopher, J., 2023. A bibliometric analysis of the use of the Gamification Octalysis Framework in training. Humanities and Social Sciences Communications, 10, Article 849. Nature Publishing Group. https://www.nature.com/articles/s41599-023-02243-3
Springer Nature, 2024. Running Towards a Better Brand Attitude: How Gamification in Nike Run Club Can Help? Journal of the Knowledge Economy. DOI: 10.1007/s13132-024-02398-7.
Deci, E.L., 1971. Effects of externally mediated rewards on intrinsic motivation. Journal of Personality and Social Psychology, 18(1), pp. 105–115.
Deci, E.L. and Ryan, R.M., 1985. Intrinsic Motivation and Self-Determination in Human Behavior. New York: Plenum Press.
Csikszentmihalyi, M., 1990. Flow: The Psychology of Optimal Experience. New York: Harper & Row.
Kahneman, D. and Tversky, A., 1979. Prospect Theory: An analysis of decision under risk. Econometrica, 47(2), pp. 263–291.
Cialdini, R.B., 1984. Influence: The Psychology of Persuasion. New York: William Morrow.
Bartle, R., 1996. Hearts, Clubs, Diamonds, Spades: Players Who Suit MUDs. Journal of MUD Research, 1(1).
Fogg, B.J., 2009. A Behavior Model for Persuasive Design. Proceedings of the 4th International Conference on Persuasive Technology.
Thaler, R.H. and Sunstein, C.R., 2008. Nudge: Improving decisions about health, wealth, and happiness. New Haven: Yale University Press.
Spotify, 2025. Spotify Wrapped 2025: 200M+ engaged users in 24 hours; 500M+ shares. Press release.
Ticket Fairy, 2026. Mastering Gamification for Event Promotion in 2026. Available at: https://ticketfairy.com/blog/mastering-gamification-for-event-promotion-in-2026/
Fanzone, 2025. Building Fan Loyalty at Live Events with Gamification and Loyalty Platforms. Available at: https://fanzone.me/blog/
Snipp Interactive, 2024. Gamification industry composite: 47% engagement rise; 22% loyalty rise; 15% awareness rise. Industry report cited across multiple commentaries.
Starbucks Corporation, 2025. Q1 2025 earnings: Starbucks Rewards membership and revenue contribution. Investor disclosure.
PissedConsumer, 2026. Ticketmaster review aggregate: 24,100+ reviews; 1.6 / 5 stars (accessed 28 April 2026). Available at: https://ticketmaster.pissedconsumer.com/
SmartCustomer, 2026. Ticketmaster review aggregate: 468 reviews; 1.4 / 5 stars (accessed 28 April 2026).
Mithril Consulting Internal Research, 2026. Octalysis Framework Research Report. Internal file: Research about Agentic Organisations/Octalysis_Framework_Research.txt. Compiled 28 April 2026.
Mithril Consulting, 2026. Saruman Research Brief — Iteration 11. Internal file: Output/Iteration 11/01_Saruman_Research_Brief.md. Dated 14 March 2026.
Apple Inc., 2024. SKStoreReviewController API documentation. Cited in Iteration 11 §2.

─── HANDOFF TO ARAGORN FOR REVIEW ─── Agent: Saruman (Researcher) Passing to: Aragorn (Managing Consultant) for Review 1 / quality gate Document type: Delta Memo extending the Iteration 11 baseline with the Octalysis Framework lens

What is new in this iteration:

The Octalysis Framework (Yu-kai Chou, 2015) is introduced as the strategic lens for re-engagement design (§2, §6, §10)
Problem 10 (purely transactional engagement architecture) is added — framework-derived, structural (§4)
Eight journey moments where gamification is appropriate are identified, with the trust deficit each addresses and why gamification fits (§5) — Saruman has flagged WHERE and WHY only; Core Drive selection is left to Galadriel
A gamification competitive landscape is added covering Ultra Passport, Manchester United, Ticket Fairy, Coachella, NBA, Sephora, Starbucks, Duolingo, Spotify, DICE, AXS, TicketSwap (§6)
Opportunity 7 (Fan Loyalty Engine) is added as the consolidating gamification surface (§7)
A Black Hat ethical risk register, EU AI Act Art. 5 analysis, and CMA / DMCC dark-patterns position are added to the regulatory section (§8)
The Pain Point Traceability Matrix is extended (§9)
A fifth focus area is added for Galadriel: apply the Octalysis Framework to design a coherent Fan Loyalty Engine (§10)
A Harvard-format reference list is provided (§11)

Top three findings to anchor on:

Ticketmaster currently activates only the two highest-risk Black Hat Octalysis drives (Scarcity, Loss Avoidance) and uses both at the customer rather than for them. The five sustainable drives (Meaning, Accomplishment, Creativity, Ownership, Social) are entirely dormant — the inverse of every successful consumer engagement design referenced.
Eight discrete journey moments warrant gamification design (Opportunities G1–G8). The highest-leverage are G2 (verified-fan presale and recognition), G7 (post-event memory consolidation, T+0 to T+72 hours) and G8 (annual / lapsed-fan re-engagement).
Black Hat ethical risk is the most consequential new compliance dimension. EU AI Act Art. 5 and the UK CMA's online choice architecture position both directly constrain how Scarcity, Loss Avoidance, and Unpredictability can be applied. Pippin must own the framing and Aragorn must verify at the gate.

What Aragorn should look for at Review 1:

Does the brief stay within Saruman's lane? (No Core Drive selection, no UI specification, no mechanic design — verify in §5 and §10.)
Is the evidence base sufficient and properly cited? (References §11; competitive table §6.)
Is the Black Hat ethical position strong enough to bind Galadriel and Pippin? (§8 and §10 final paragraph.)
Does the brief give Galadriel everything she needs to design without returning for re-research?

Recommendation for Galadriel (subject to Aragorn approval): Retain Iteration 11 Focus Areas 1–4. Add Focus Area 5 (Octalysis Fan Loyalty Engine). Design Octalysis Core Drives onto each of the eight journey moments (G1–G8). Treat the eight moments as the sanctioned scope — do not extend gamification beyond them without a stronger design rationale than is currently available.

Ready for review: YES

Last edited: 29 April 2026