OpenCode only. The build pauses each time OpenCode requests a tool call and waits for manual approval or denial through the Jenkins UI before continuing. Other built-in agents and command overrides reject this setting before launch.