The Two-Rulebook Test is the first check every regulated campaign has to pass: clear your state's law, then clear the platform's policy. Two rulebooks, written by different authorities, enforced in different ways. The state decides what's legal. The platform decides what's allowed. And the platform's rulebook is always the stricter one.
I've spent 16+ years in brand and marketing, the last stretch of it in cannabis - first at Curaleaf, where the work spanned 150+ launches and 100+ dispensary openings, and now running marketing for a five-location cannabis retailer in Connecticut. Every useful thing I know about compliant marketing reduces to that one test, applied every time, to every asset.
The state said yes. Meta said no.
Here's the situation that produces the test, and it happens weekly. Connecticut licenses my stores. The state publishes a real, written set of rules for what a cannabis retailer can say, where, and to whom. Follow them and you're a legal business running legal marketing.
Then you post that legal marketing to Instagram. Meta's policy prohibits cannabis promotion entirely - it doesn't matter that your state licensed you, that your copy tracks the statute, or that your audience is age-gated. Meta's enforcement is automated, it's built around federal prohibition, and it doesn't read Connecticut law. The state said yes. The platform said no. And the platform's answer is the one that decides whether your account exists tomorrow.
SMS is the same story with a quieter failure mode. A campaign can be legal under state rules and clean on consent, and the mobile carriers will still silently filter it if the wording trips their promo detectors. You get billed. Nobody receives the message. No error tells you.
Legal is the state's call. Allowed is the platform's. The platform's call is the one that takes your account.
Why the second rulebook always wins
- The state's rulebook is public and appealable. You can read the regulation, quote it, and if there's a dispute, a human reviews it.
- The platform's rulebook is broader than the law and enforced by filters. A wrong call from a regulator gets you a correction letter. A wrong call from a filter gets you a deleted account and a form response.
- The penalties aren't symmetrical. The state can fine you. The platform can erase an audience you spent years building, overnight, with no path back.
So the Two-Rulebook Test has an order of operations: check the state first, because breaking the law is never on the table - then plan around the platform, because that's the rulebook that actually gets enforced on you, at machine speed, without a hearing.
The method: nothing ships without a flag
Knowing the test isn't the system. The system is what the Two-Rulebook Test becomes in daily use: a flag standard I run on every asset, every channel, every time.
- Green - ship it. Clears the state rule and the platform policy for that specific channel.
- Yellow - tweak first. Legal, but likely to trip a filter or a policy: risky wording, pricing on the wrong channel, an image that reads as product.
- Red - blocked. The move can't run on that channel as asked, with the reason in plain English, naming the state rule or the platform policy.
Two operating rules make the standard hold. First, the flag is per channel, never per campaign. The same sentence can be green in an email, yellow in a text, and red on Instagram. Second, nothing yellow or red goes out alone - the safer version ships alongside, already written. A flag without an alternative is a marketer saying no, and marketers who only say no get routed around.
That second rule matters more than the colors. The person asking for the campaign - an owner, a GM, a promo calendar - has a commercial job to do. The flag protects the account; the safer version protects the sale. You need both, or the standard collapses into recklessness on one side or paralysis on the other.
Use it tomorrow
- Take the next campaign on your calendar and write two columns: the state rule that touches it, and the policy of every platform it will run on. If you can't name the rule, that's your first gap.
- Assign a flag per channel, not per campaign.
- For every yellow or red, write the safer version now - before someone needs it at 4pm on a Friday.
- Keep the flags visible to the whole team. A shared doc is fine. The point is that nobody, including you, ships an unflagged asset again.
The Two-Rulebook Test won't make the rules friendlier, and it won't make Meta care that your state said yes. What it ends is the guessing. Legal and allowed are two different questions - ask both, every time, and you keep the account, the license, and the sale. If you want the test running as software instead of willpower, that's what I built Asterisk to do.