Ring 0: Internal users, 2 weeks - Ring 1: 5% of external users (lowest balances), 1 week - Ring 2: 25%, 2 weeks - Ring 3: 50%, 2 weeks (with comparison logging) - Rollback triggers defined and tested