# What reviewers see

The approval report
([Reviewing a change](reviewing-a-change.md))
lists, for each change:

- operations newly called, and the domains calling them;
- data newly sent to a provider, with personal fields flagged
  ([Marking personal fields](marking-personal-fields.md));
- package installs and upgrades, as the surface diff of what the app
  uses, hosts and credential schemes included
  ([Package upgrades](package-upgrades.md) says
  which need a person);
- services: a new or changed image, which needs an acceptance before it
  runs, and new `outbound:` grants;
- third-party packages from git, marked unverified, which need an
  acceptance to install;
- connections that receive personal data but can't erase it, with their
  acceptance;
- written operations not yet confirmed.