# Review and sign-off

Some changes need a person to accept them before they ship: a change that
can break an API client ([Breaking changes](the-public-api-record.md#breaking-changes)),
dropping something from the database ([Data](data.md)), a weaker policy
([Policy](policy.md)), and a new or renamed domain ([Project layout and
modules](01-project-layout-and-modules.md)). They all use one form of
acceptance, a file a person writes saying they accept the change
([Acceptances](acceptances.md)).

`jadpo check` fails until each such change has its acceptance. Acceptances
are files in one folder that your git host protects, with GitHub's code
owners and branch protection or the equivalent, and CI runs `jadpo check`,
which fails without them. So review happens where it already does, on the
git host: Jadpo has no signing or user accounts of its own.

`jadpo approval --before <ref>` writes the report a reviewer reads: what
changed in routes, policy, failures and data.

Not built yet: `jadpo approval`, which comes with [Records and
manifest](18-records-and-manifest.md).