[awf] codex engine: context-rebuild circuit breaker trips under AWF sandbox, aborting task as incomplete #8015

Problem
A codex-engine workflow running under AWF terminated with report_incomplete: "context-rebuild circuit breaker tripped: rebuild_factor=26.00 cumulative_input_tokens=1329358 thresholds=25/1000000". The agent also failed to cd into the expected workspace path (/home/runner/work/gh-aw/gh-aw: No such file or directory).

Context
Reported in github/gh-aw#57936 ("[aw] PureLock reported incomplete result").

Root Cause
Likely a workspace path mismatch between the host and the AWF agent container's chroot/bind-mount layout — the codex engine expected the workspace at its original host path, but selective bind mounts under /host/ may present it elsewhere, causing repeated re-discovery/re-listing (excessive context rebuilds) until the circuit breaker tripped.

Proposed Solution

• Audit agent workspace bind-mount path translation (src/services/agent-volumes.ts) for the codex/copilot engine's expected CWD.
• Ensure the workspace path inside the container matches what the engine assumes, avoiding repeated ls/cd retries.
• Add an integration test exercising codex engine startup CWD resolution under AWF.

Generated by Firewall Issue Dispatcher · copilot · auto · 28.7 AIC · ⊞ 9.4K · ◷