Change governance

Ship program changes without surprises: preview, conflict detection, second-admin approval, rollback and control groups.

Draft → preview → publish → rollback

Every rule starts as a draft. Preview replays it against your last 12 months of orders and shows expected cost month by month, how many orders it would have matched, and how many distinct customers it would have rewarded. Publishing retires the previously-live version of the same rule; any completed version can be rolled back to active in one click — the newer version retires, the audit log records it.

Conflict detection

Publishing is blocked while any of these stand (an explicit "Publish anyway" overrides):

· Double reward — another live rule would pay on the same orders.
· Budget overrun — the 12-month replay issues more than the rule's budget.
· Margin guardrail — issued value would exceed your configured share of gross margin (default 50%, tunable in Settings → governance).

Second-admin approval

With Require a second admin's approval on (Settings → governance), high-risk publishes — raising an earn rate, extending expiry, raising referral incentives — go to an approvals queue instead of publishing. The requester cannot approve their own change; a different admin approves (which publishes) or rejects. Everything is audited.

Holdouts: prove the program pays

Enable enrollment holdouts to keep a random slice (default 10%) of new members out of the program: their orders record revenue but they never earn. The analytics holdout report compares net revenue per member across the two groups and estimates the program's incremental gross profit — the number that justifies the budget line.

Next: Tiers & benefits →