Lets the assistant propose starting or repeating a build when someone asks for one. The model never starts anything itself: the person sees a confirmation card showing the job and its parameters, and the build only starts when they click Run it.

When they confirm, everything is checked again: their Build permission on the job, that the job is listed below, that it can be built, and the parameter values. Proposals expire after ten minutes, belong to one person and work once. Password parameters can never be set by the assistant, and repeated builds never copy sensitive values.