[pelikhan]

Summary

Ubuntu 26.04 exposes the system id command through a symlink, which AWF v0.29.0 rejects during its trusted host-tool preflight. This prevented the agent from starting in Daily AWF Spec Compiler Surfacing Review run 40593497628.

Append /usr/lib/cargo/bin/coreutils to the privileged Cloud Hypervisor AWF process's PATH so it can resolve the physical id applet. This follows the physical applet handling in the upstream AWF fix, which is not yet in the published v0.29.0 release.

• Covers Cloud Hypervisor primary agents and enclaves; other runtime command prefixes remain unchanged.
• Preserves existing PATH precedence, the absolute AWF executable, sudo environment/identity handling, and all host-tool ownership, mode, regular-file, and ancestor trust checks. No tool copying, ownership changes, or trust-check bypass.
• Regenerates seven affected workflow locks, adds regression coverage, and documents the compatibility behavior.

Validation

• Targeted primary/enclave compilation and privileged environment-preservation regression tests passed.
• make agent-report-progress passed build, formatting, Go/custom lint, impacted tests, schema freshness, and workflow drift checks.
• All 349 workflows compiled successfully; the full compilation retained 194 existing fleet warnings.
• The affected workflow's separate dry-run lock passed strict validation, schema/AST checks, model inventory, and ShellCheck with no warnings. The diagnostic lock is not committed as a production replacement.
• Read-only security review passed for source, tests, production lock deltas, and the diagnostic lock; no confirmed vulnerabilities.

No workflow was dispatched or rerun, so hosted Ubuntu 26.04 recovery remains unverified. Optional Docker-based scanners were not run because the local Docker daemon was unavailable.