I read that part as the approval process required X changes that the OpenSSL team had to implement themselves. I don't believe the approving party was asking the OpenSSL team to commit code they were supplying.