Keep business rules outside code and evaluate them from your services at runtime.
Write your first ruleset, evaluate it from a service and change the rules without touching the code that uses them.