---
title: "oz0 changes approve"
description: "Approve a job's changeset, bound to its patch's digest, so it is applied."
canonical_url: "https://docs.oz0.ai/reference/cli/oz0/changes/approve"
---
# oz0 changes approve

> Approve a job's changeset, bound to its patch's digest, so it is applied.

For: Operators and developers looking up a command.

Approve a job's changeset, bound to its patch's digest, so it is applied.

It decides the job's waiting changes approval with the digest of the apply call's arguments, which name the patch by
its digest, so a decision is bound to those arguments: the job refuses the decision for any other patch. With --patch (the digest oz0 changes
show prints), it decides only when the waiting approval is for that patch, the one you reviewed; without it, it says
which patch it decided.

A changeset that touches a plugin's tests or rules then waits for its second approval, which
this command decides too: only a person signed in with governance.write who neither started the job nor approved its
changes may approve it.

## Usage

```bash
oz0 changes approve <job> [flags]
```

## Flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --comment
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      
    </td>
    
    <td>
      why; the job's agent and history keep it
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --patch
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      
    </td>
    
    <td>
      sha256:&lt;hex> of the patch you reviewed (oz0 changes show prints it); refuse any other
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --tenant
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        default
      </code>
    </td>
    
    <td>
      tenant
    </td>
  </tr>
</tbody>
</table>

## Inherited flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --context
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        $OZ0_CONTEXT or &lt;config dir>/orchestrator-zero/context.json
      </code>
    </td>
    
    <td>
      CLI context file written by server init
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --log-level
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        info
      </code>
    </td>
    
    <td>
      log level: debug, info, warn or error
    </td>
  </tr>
</tbody>
</table>

See [all `oz0` commands](https://docs.oz0.ai/reference/cli/oz0) and the [global flags](https://docs.oz0.ai/reference/cli/oz0#global-flags).


## Sitemap

See the full [sitemap](https://docs.oz0.ai/sitemap.md) for all pages.