Client sign-off
Your client reads the document, not your tools.
One address lands them on the document, with what changed marked and the state beside it. They comment; you are emailed. They sign off or decline, and the decision is recorded with who and when. Nothing merges until they do.
Our own specification, in the product