diff --git a/.github/workflows/ai-issue-implementation.yml b/.github/workflows/ai-issue-implementation.yml
index f607dff03a..bd545a3c82 100644
--- a/.github/workflows/ai-issue-implementation.yml
+++ b/.github/workflows/ai-issue-implementation.yml
@@ -12,6 +12,8 @@ on:
 
 permissions: {}
 
+# Stays on GitHub-hosted runners: the reusable workflow's codex-issue-worker job
+# allows 140 minutes and the CodeBuild project's job limit is 60.
 jobs:
   implement:
     permissions:
@@ -19,7 +21,7 @@ jobs:
       id-token: write
       issues: write
       pull-requests: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/ai-issue-implementation.yml@d6b017da14385908951d23e26c790b28a4e5f9f0
+    uses: aws/aws-durable-execution-ci/.github/workflows/ai-issue-implementation.yml@d901b2f1a50731f46bb791b7cae6cbe7f56ae917
     with:
       issue-number: ${{ inputs['issue-number'] || '' }}
     secrets: inherit
diff --git a/.github/workflows/ai-pr-review-address-continuation.yml b/.github/workflows/ai-pr-review-address-continuation.yml
index 1ef7917de3..d711c12bd9 100644
--- a/.github/workflows/ai-pr-review-address-continuation.yml
+++ b/.github/workflows/ai-pr-review-address-continuation.yml
@@ -8,6 +8,8 @@ on:
 
 permissions: {}
 
+# Stays on GitHub-hosted runners: the reusable workflow's codex-issue-worker job
+# allows 140 minutes and the CodeBuild project's job limit is 60.
 jobs:
   address:
     if: >-
@@ -20,7 +22,7 @@ jobs:
       id-token: write
       issues: write
       pull-requests: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review-address.yml@d6b017da14385908951d23e26c790b28a4e5f9f0
+    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review-address.yml@d901b2f1a50731f46bb791b7cae6cbe7f56ae917
     with:
       source-run-id: >-
         ${{ format('{0}', github.event.workflow_run.id || '') }}
diff --git a/.github/workflows/ai-pr-review-address.yml b/.github/workflows/ai-pr-review-address.yml
index 5bd13defbf..e6f8a7a927 100644
--- a/.github/workflows/ai-pr-review-address.yml
+++ b/.github/workflows/ai-pr-review-address.yml
@@ -16,6 +16,8 @@ on:
 
 permissions: {}
 
+# Stays on GitHub-hosted runners: the reusable workflow's codex-issue-worker job
+# allows 140 minutes and the CodeBuild project's job limit is 60.
 jobs:
   intake:
     if: github.event_name == 'pull_request_review_comment'
@@ -23,7 +25,7 @@ jobs:
       contents: read
       issues: read
       pull-requests: read
-    uses: aws/aws-durable-execution-ci/.github/workflows/ai-work-item-resolver.yml@d6b017da14385908951d23e26c790b28a4e5f9f0
+    uses: aws/aws-durable-execution-ci/.github/workflows/ai-work-item-resolver.yml@d901b2f1a50731f46bb791b7cae6cbe7f56ae917
     with:
       work-scope: review
       upload-work-items: true
@@ -38,7 +40,7 @@ jobs:
       id-token: write
       issues: write
       pull-requests: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review-address.yml@d6b017da14385908951d23e26c790b28a4e5f9f0
+    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review-address.yml@d901b2f1a50731f46bb791b7cae6cbe7f56ae917
     with:
       pull-request-number: ${{ inputs['pull-request-number'] || '' }}
     secrets: inherit
diff --git a/.github/workflows/ai-pr-review.yml b/.github/workflows/ai-pr-review.yml
index 94ff842c71..3a9e3e767c 100644
--- a/.github/workflows/ai-pr-review.yml
+++ b/.github/workflows/ai-pr-review.yml
@@ -18,8 +18,11 @@ jobs:
       contents: write
       id-token: write
       pull-requests: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review.yml@d6b017da14385908951d23e26c790b28a4e5f9f0
+    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review.yml@d901b2f1a50731f46bb791b7cae6cbe7f56ae917
     with:
+      # CodeBuild-hosted runner in the Java testing account; the label must
+      # match the CodeBuild project name.
+      runs-on: codebuild-github-actions-runner-${{ github.run_id }}-${{ github.run_attempt }}
       prompt-path: .github/prompts/ai-pr-review.md
       run-claude: false
     secrets: inherit
diff --git a/.github/workflows/issue-triage.yml b/.github/workflows/issue-triage.yml
index 0a07ad1c2f..5c7c0b5e1c 100644
--- a/.github/workflows/issue-triage.yml
+++ b/.github/workflows/issue-triage.yml
@@ -12,5 +12,9 @@ jobs:
       contents: read
       id-token: write
       issues: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/issue-triage.yml@d6b017da14385908951d23e26c790b28a4e5f9f0
+    uses: aws/aws-durable-execution-ci/.github/workflows/issue-triage.yml@d901b2f1a50731f46bb791b7cae6cbe7f56ae917
+    with:
+      # CodeBuild-hosted runner in the Java testing account; the label must
+      # match the CodeBuild project name.
+      runs-on: codebuild-github-actions-runner-${{ github.run_id }}-${{ github.run_attempt }}
     secrets: inherit
diff --git a/.github/workflows/notify.yml b/.github/workflows/notify.yml
index eaf1b44074..bbd6f52f36 100644
--- a/.github/workflows/notify.yml
+++ b/.github/workflows/notify.yml
@@ -17,7 +17,11 @@ jobs:
     permissions:
       contents: read
       id-token: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/notify.yml@d6b017da14385908951d23e26c790b28a4e5f9f0
+    uses: aws/aws-durable-execution-ci/.github/workflows/notify.yml@d901b2f1a50731f46bb791b7cae6cbe7f56ae917
+    with:
+      # CodeBuild-hosted runner in the Java testing account; the label must
+      # match the CodeBuild project name.
+      runs-on: codebuild-github-actions-runner-${{ github.run_id }}-${{ github.run_attempt }}
     secrets:
       BEDROCK_ROLE_ARN: ${{ secrets.BEDROCK_ROLE_ARN }}
       SLACK_WEBHOOK_URL_PR: ${{ secrets.SLACK_WEBHOOK_URL_PR }}
diff --git a/.github/workflows/stale-issue-closer.yml b/.github/workflows/stale-issue-closer.yml
index 9fb2b64dcc..523c854990 100644
--- a/.github/workflows/stale-issue-closer.yml
+++ b/.github/workflows/stale-issue-closer.yml
@@ -14,4 +14,8 @@ jobs:
     permissions:
       contents: read
       issues: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml@d6b017da14385908951d23e26c790b28a4e5f9f0
+    uses: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml@d901b2f1a50731f46bb791b7cae6cbe7f56ae917
+    with:
+      # CodeBuild-hosted runner in the Java testing account; the label must
+      # match the CodeBuild project name.
+      runs-on: codebuild-github-actions-runner-${{ github.run_id }}-${{ github.run_attempt }}