# What is built

Everything on this page is built except the features below. Each is
`toolchain.not_built_yet` where you write it.

| Feature | Status |
|---|---|
| Grants, user fields, membership roles, roles that need a way in (`requires:`), `Access.authenticated`, `Access.public` and `Access.system`, tenancy, `actions:` with listed queries and `policy.call_ungranted`, field restrictions, the permissions report, and the refusals under "When policy says no" | Built. |
| `scopes:`, with the tokens issued to other applications (`oauth_token`, `external_token`) | Not built yet. Browser sessions and service keys work without them. |
| An acceptance for a change that widens access, with `access.jadpo_record` ([Acceptances](/docs/acceptances.md)) | Built. |
| The approval report that shows the report's changes in plain terms ([Reviewing a change](/docs/reviewing-a-change.md)) | Built. |