turns out this was overwritten in .bazelrc from a long time ago.
@@ -3,7 +3,6 @@ test --test_output=errors
build --verbose_failures
build --worker_sandboxing
build --compilation_mode=opt
build --incompatible_enable_cc_toolchain_resolution
build --action_env BAZEL_DO_NOT_DETECT_CPP_TOOLCHAIN=1
The note is not visible to the blocked user.