[awf] codex engine: shell tools unavailable and model_not_supported in PureLock run

[lpcox]

Problem
The PureLock workflow (codex engine) failed with an invalid/unsupported model error and reported a missing "shell command execution environment" (ls missing, tool flagged "security").

Context
Original issue: github/gh-aw#64485
Failed run: https://github.com/github/gh-aw/actions/runs/36717148745

Root Cause
Not confirmed. Likely candidates: (1) the configured model is not supported by the codex engine/account (a configuration problem, not an AWF fault); (2) the agent saw no usable shell binaries, possibly because the chroot or selective bind mounts (/usr, /bin, /sbin) were missing or restricted in this runner topology; (3) the agent misread the model error as a missing shell.

Proposed Solution

1. Check the run's agent and AWF logs for the chroot and bind-mount setup, and whether /host/bin and /host/usr/bin were populated.
2. If the mounts were missing, add an entrypoint preflight in containers/agent/entrypoint.sh that fails clearly when no shell utilities are available in the chroot.
3. If the mounts were fine, close this as a gh-aw model configuration issue and propose a clearer model-validation message in the failure report.

Generated by Firewall Issue Dispatcher · copilot · auto · 19.3 AIC · ⊞ 9.1K · ◷