1. Unified Family Passport & Transparent RBAC Permission Inspector
On legacy EntryEeze, permissions are hidden inside per-club/per-competition SQL bitflags and `ASP.NET_SessionId` memory—so when a parent or skater lacks a permission bit, the UI silently hides the button while support insists "it works on our end." In EntryEeze NextGen, every permission grant is transparent, auditable, and self-healing.
Live Effective Permission Matrix (Skater #1 — Youth Competitive)
Zero-Argument Support Diagnostic Log (Visible to Both Parent & Admin)
Instead of spending an hour on the phone arguing whether a button exists on your screen, both you and the administrator see the exact same cryptographic permission trace:
[2026-11-06 20:20:01 UTC] TRACE_ID: ee-nx-99412a USER_CONTEXT: FamilyGuardian (USFS #8492014) TARGET_ACTION: RegisterTestSession(cid=47, level="Pre-Silver Solo Free Dance") CHECK 1 [PASS]: GuardianSessionToken == VALID (Multi-Tab Stateless JWT) CHECK 2 [PASS]: USFS_Membership_2026_2027 == ACTIVE CHECK 3 [FAIL]: ClubPermissionBit[cid=39].ReciprocalTestRelease == FALSE (0) -> ROOT CAUSE: Server-side role bit was never enabled by Club Admin. -> USER IMPACT: "Register for Test" button is disabled (HTTP 403). -> 1-CLICK REMEDIATION: Click "Simulate Instant Club Chair Permission Fix" above.
2. Atomic Practice-Ice Reservation Grid (5-Minute Cart Lock)
Eliminates the `__doPostBack` checkout rug-pull and the two-tab `ASP.NET_SessionId` crash. The millisecond you tap a Practice Ice slot, an atomic edge lock reserves your spot on the ice for 05:00 minutes while you complete Stripe / Apple Pay checkout.
Session #14 — Juvenile / Intermediate Free
Official Unofficial Practice Ice (UPI) • Max 16 Skaters • $22.00
Session #15 — Solo Dance & Showcase Warmup
Official Practice Ice (OPI) • Music Rotational Queue Included • $22.00
Session #28 — Compete USA / Basic Skills
Low-Anxiety Warmup Ice • Coach Pass Auto-Linked • $18.00
3. Instant Program Music (MP3) & IJS Planned Program Content (PPC) Validator
Verifies MP3 duration against USFS/ISI rulebook limits (`2:00 ± 10s`, `2:40 ± 10s`), checks stereo 44.1 kHz encoding, and validates IJS element codes in-browser before upload.
Pre-Flight Verification Receipt
Click "Run Instant Audio & IJS Rulebook Pre-Flight Check" to generate a cryptographic upload receipt that locks your music & PPC status as COMPLETE (eliminating silent deadline disqualifications).
4. All 394 Figure Skating Clubs & 105 Active Competitions (Live D1 Database + Instant Tenant Switcher)
Every single club from `FindClub.aspx` (`394` clubs) and every active competition from `FindCompetition.aspx` (`105` competitions) is pre-provisioned as an interactive NextGen tenant in our Cloudflare D1 SQL Database (`entryeeze-nextgen-db`). Click "Preview Club Portal" on any row to switch the entire platform into that club's live placeholder portal!
| Legacy ID | Type | Club / Competition Name | Host / Details / NextGen Route | Interactive Action |
|---|
5. Why Legacy EntryEeze (`entryeeze.com` / `comp.entryeeze.com`) Must Upgrade Immediately
Verified public forensic evidence showing where the 2008 architecture exposes minor skaters, families, and figure skating clubs to regulatory, legal, and operational risk.
| Regulation / Standard | Verified Finding on Legacy `entryeeze.com` / `comp.entryeeze.com` | How EntryEeze NextGen Resolves It |
|---|---|---|
| 1. FTC Act § 5 & Invalidated EU-U.S. Safe Harbor (`Schrems I`, 2015) | `Privacy.htm` explicitly claims compliance with the U.S.–E.U. Safe Harbor Framework and EU Directive `95/46/EC`—struck down by the European Court of Justice in October 2015 and repealed by GDPR in May 2018. | Updated to current EU-U.S. Data Privacy Framework (DPF), GDPR Articles 13/14, and Canada PIPEDA standards ([`privacy.html`](privacy.html)). |
| 2. Federal COPPA (`16 CFR Part 312`) — Minor Skater PII | Collects full names, birthdates, home addresses, USFS/LTS numbers, and competition schedules for thousands of children under 13, yet `Privacy.htm` mentions `"children"`, `"minor"`, or `"COPPA"` 0 times. | Enforces verifiable parental consent tokens (`16 CFR § 312.5`), strict minor PII minimization, and 1-click parental data deletion. |
| 3. Colorado Privacy Act (`C.R.S. § 6-1-1301`) & 2008 Legal Terms | `LegalNotices.htm` and `SpamPolicy.htm` carry ` |
Full 2026 Colorado Privacy Act (CPA), CCPA/CPRA, and NC Consumer Privacy disclosures with automated Data Subject Access Request (DSAR) routing. |
| 4. End-of-Life OS (`IIS 8.5`) & Plaintext HTTP Session Exposure | Runs on `Microsoft-IIS/8.5` (Windows Server 2012 R2 — Microsoft Extended EOL Oct 2023), emits `ASP.NET_SessionId` cookies without the `Secure` flag, lacks `HSTS`/`CSP`/`X-Frame-Options`, and hardcodes `1,183` plaintext `http://` links. | Stateless edge architecture with mandatory `Strict-Transport-Security`, `Content-Security-Policy`, `HttpOnly; Secure; SameSite=Strict` cookies, and zero legacy jQuery CVEs. |
| 5. ADA Title III / WCAG 2.1 AA Accessibility Barriers | `FindCompetition.aspx` has `106/106` images missing `alt` text (`100%` failure); `SkaterIntroNew.aspx` (`9` inputs) and `Welcome.aspx` (`10` inputs) have `0` `; `CoachAcctIntro.aspx` uses a visual-only CAPTCHA with zero audio fallback. | 100% semantic ` |
| 6. Opaque RBAC Permission Bitflags & 72-Hour Manual Provisioning | Permissions are fragmented across isolated `?cid=` tables and in-memory IIS sessions with zero user-facing diagnostic trace, causing 1-hour support arguments when a club or competition permission bit is out of sync. | Unified Family & Coach SSO with a live, user-visible RBAC Permission Inspector and 1-click role grant requests. |