What reviewers see

The approval report (Reviewing a change) lists, for each change:

• operations newly called, and the domains calling them;
• data newly sent to a provider, with personal fields flagged (Marking personal fields);
• package installs and upgrades, as the surface diff of what the app uses, hosts and credential schemes included (Package upgrades says which need a person);
• services: a new or changed image, which needs an acceptance before it runs, and new outbound: grants, which need one too;
• new outside hosts, each needing an acceptance;
• third-party packages from git, marked unverified, which need an acceptance to install;
• connections that receive personal data but can't erase it, with their acceptance;
• written operations not yet confirmed.