RevenuePilotby Foxes Technology
Read-only firstCreate account
The decision system

Three decisions. Bounded by policy, not by opinion.

RevenuePilot's engine is deterministic. It reads reconciled source data, applies your explicit guardrails, and returns a short ranked queue of moves an operator can act on—each one carrying the arithmetic and the boundary that produced it.

  • Deterministic, not generative
  • Confidence-calibrated
  • Bounded movement
Guardrails on every recommendation
  • 01
    Confidence floorSignals below the calibrated confidence threshold never reach the queue.
  • 02
    Movement capA single change can only move price within your configured corridor.
  • 03
    CooldownA product cannot be changed again until the cooldown window elapses.
  • 04
    Floor and ceilingYour absolute price boundaries are enforced before anything is proposed.
From signal to decision

How a booking signal becomes a reviewable move

Every step is inspectable. If a step cannot be evidenced, the recommendation is withheld rather than downgraded to a guess.

  1. Reconcile the source

    Products, options, departures, bookings, cancellations, costs and commissions are reconciled from your connected system. Unreconciled or stale inputs are flagged, not silently filled in.

  2. Derive the operating state

    Booking pace and remaining capacity are derived from signed source data and compared against historical lead-time cohorts for the same product and departure window.

  3. Calibrate confidence

    The engine persists its own hindcast error and coverage, then calibrates a confidence score. Low-confidence signals are excluded from eligibility instead of being presented with false precision.

  4. Apply deterministic guardrails

    Floor, ceiling, maximum movement, minimum confidence and cooldown are applied as hard constraints. A proposal that violates any constraint is rejected, not clipped and shipped.

  5. Rank and bound the queue

    Surviving moves are ranked by contribution impact, urgency and operational pressure, and the workspace queue is deliberately bounded so a revenue review stays finishable.

  6. Attach the receipt

    The signal, economics, uncertainty, policy boundary and required operator action are recorded together, so the decision can be defended after the fact.

Deterministic guardrails

The constraints are configuration, not model behavior

Guardrails are evaluated in code before a recommendation is ever shown. They are the same constraints re-checked at execution time, so what you review is what could run.

Guardrail types applied to every recommendation
GuardrailWhat it constrainsWhen it is enforced
Minimum confidenceExcludes weakly-evidenced signals from eligibilityGeneration and execution
Maximum movementCaps how far a single decision may move a priceGeneration and execution
Cooldown windowPrevents repeated changes to the same productGeneration and execution
Price floor and ceilingHolds every proposal inside your commercial corridorGeneration and execution
Daily write limitBounds how many changes can occur in one dayExecution
Expected-version checkRefuses to overwrite a price that changed underneath usExecution
Engineering the decision

Why the engine is deterministic

Language models are excellent at explaining a decision and unreliable as the decision itself. RevenuePilot draws that line in the architecture.

Separation of duties

The model explains. The engine decides.

Revenue Copilot can describe why a recommendation exists, compare priorities and clarify a boundary. It cannot create an executable signal, alter a guardrail or trigger a write—those paths simply do not accept model output.

  • AI output is never an executable signal
  • Guardrails are unreachable from the AI surface
  • Explanations are generated from approved evidence
Contribution first

Ranked on margin, not on headline revenue

A move that lifts revenue while eroding contribution is not a win. Where verified variable cost and channel commission are available, the engine ranks on contribution impact and states plainly when cost coverage is incomplete.

  • Variable cost and commission included where verified
  • Incomplete cost coverage is flagged, not assumed
  • Impact is presented as an estimate, never a guarantee
Safe under retry

Idempotent by construction

Recommendation generation is keyed by organization, request key, request hash, source snapshot, policy and cycle. Replaying the same request returns the existing recommendation; reusing a key with different evidence fails loudly instead of quietly forking the truth.

  • Replays return the original recommendation
  • Mismatched evidence raises a conflict
  • Every generation cycle is recorded in the audit trail
Operating posture

What the engine will not do

A revenue system earns trust by being explicit about its limits. These are ours.

Advisory
Default execution mode for every new workspace
Withheld
Recommendation state when evidence is incomplete
Rejected
Outcome for any proposal that breaks a guardrail
Recorded
Every decision, actor and boundary in the audit trail
Common questions

Questions operators ask before trusting an engine

Does the engine change prices on its own?

No. Live price execution is disabled by default. Enabling it for a product requires a certified connector, a completed shadow qualification period, reviewed policy settings and explicit operator approval—and even then movement stays inside your configured caps.

What happens when my data is incomplete?

The engine distinguishes between 'empty' and 'unknown'. Missing variable cost, stale source data or unreconciled bookings produce a flagged gap and a withheld recommendation rather than a confident-looking guess built on a default value.

Can I see the arithmetic behind a recommendation?

Yes. Every recommendation carries a decision receipt containing the source snapshot, the economics used, the uncertainty, the policy boundary that applied and the operator action required.

Is the AI making the pricing decision?

No. The deterministic engine produces and bounds every recommendation. The AI surface explains, compares and investigates; it has no route to create a signal, change a guardrail or execute a write.

FOUNDING OPERATOR PROGRAM

Prove the decision quality before you automate.

Start with a scoped portfolio, agreed guardrails and a measurable review cadence. No live price writes are required to evaluate the engine.