Bound publicly writable billable rollouts with local ceilings and state cache limits
A remotely writable rollout percentage should not be the sole authority for starting a billable feature. Put a strict, feature-specific ceiling in deployment configuration, then select a deterministic cohort under min(remote allocation, local ceiling). Keep eligibility, provider …