The policies every job starts with, and the controller's own settings. A job overrides the policies with flags of soma run (--landing same, --no-return, --rightsize off), with soma.yaml in its project, or with the policy object of the API.