Unless this is already enforced by a db constraint, I think it would be good to have an assertion, somewhere, that users were actually removed from their previous cohorts when changed to a new cohort.