oz0 changes reject

Reject a job's changeset; nothing is applied.

For: Operators and developers looking up a command.

Reject a job's changeset; nothing is applied.

It decides the job's waiting changes approval with the digest of the apply call's arguments, which name the patch by its digest, so a decision is bound to those arguments: the job refuses the decision for any other patch. With --patch (the digest oz0 changes show prints), it decides only when the waiting approval is for that patch, the one you reviewed; without it, it says which patch it decided.

A changeset that touches a plugin's tests or rules then waits for its second approval, which this command decides too: only a person signed in with governance.write who neither started the job nor approved its changes may approve it.

Usage

oz0 changes reject <job> [flags]

Flags

FlagTypeDefaultDescription
--commentstringwhy; the job's agent and history keep it
--patchstringsha256:<hex> of the patch you reviewed (oz0 changes show prints it); refuse any other
--tenantstringdefaulttenant

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026