Whether gated tool calls should skip the human-approval interrupt.
Sourced from the client session (not graph state) so the model cannot
self-approve by writing state. The interrupt_on when predicate reads
this to suppress interrupts at the source when "approve always" is on,
avoiding the interrupt-then-auto-resolve round-trip.