When enabled, the build pauses each time the agent requests a tool call (shell command, file edit, etc.) and waits for manual approval or denial through the Jenkins UI before continuing.