What are subsequent changes subject to once a requirements document has been signed off?