diff --git a/src/assets/container/python/Dockerfile b/src/assets/container/python/Dockerfile
index 63089990..eb959c63 100644
--- a/src/assets/container/python/Dockerfile
+++ b/src/assets/container/python/Dockerfile
@@ -8,17 +8,21 @@ ENV UV_SYSTEM_PYTHON=1 \
     PYTHONUNBUFFERED=1 \
     DOCKER_CONTAINER=1
 
-COPY pyproject.toml uv.lock* ./
-RUN uv pip install -r pyproject.toml
-
 RUN useradd -m -u 1000 bedrock_agentcore
-USER bedrock_agentcore
+
+COPY pyproject.toml uv.lock ./
+RUN uv sync --frozen --no-dev --no-install-project
 
 COPY --chown=bedrock_agentcore:bedrock_agentcore . .
+RUN uv sync --frozen --no-dev
+
+USER bedrock_agentcore
 
-# 8080: AgentCore runtime endpoint
-# 8000: Local dev server (uvicorn)
-# 9000: OpenTelemetry collector
+# AgentCore Runtime service contract ports
+# https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-service-contract.html
+# 8080: HTTP Mode
+# 8000: MCP Mode
+# 9000: A2A Mode
 EXPOSE 8080 8000 9000
 
 CMD ["opentelemetry-instrument", "python", "-m", "{{entrypoint}}"]