Review and sign-off

Some changes need a person to accept them before they ship: a change that can break an API client (Breaking changes), dropping something from the database (Data), a weaker policy (Policy), and a new or renamed domain (Project layout and modules). They all use one form of acceptance, a file a person writes saying they accept the change (Acceptances).

jadpo check fails until each such change has its acceptance. Acceptances are files in one folder that your git host protects, with GitHub's code owners and branch protection or the equivalent, and CI runs jadpo check, which fails without them. So review happens where it already does, on the git host: Jadpo has no signing or user accounts of its own.

jadpo approval --before <ref> writes the report a reviewer reads: what changed in routes, policy, failures and data.

Not built yet: jadpo approval, which comes with Records and manifest.