diff --git a/infrastructure/index.ts b/infrastructure/index.ts
index cc88c3966..183e9c046 100644
--- a/infrastructure/index.ts
+++ b/infrastructure/index.ts
@@ -47,6 +47,9 @@ const gatewayServiceAccount = new gcp.serviceaccount.Account("picoclaw-gateway-s
 // Persistent storage for /root/.picoclaw on Cloud Run.
 const picoclawStateBucket = new gcp.storage.Bucket("picoclaw-volume", {
     project,
+    labels: {
+        "do-not-delete": "true",
+    },
     location: region.toUpperCase(),
     uniformBucketLevelAccess: true,
     forceDestroy: false,
diff --git a/pipeline/pipeline.yaml b/pipeline/pipeline.yaml
index f82105323..523049cde 100644
--- a/pipeline/pipeline.yaml
+++ b/pipeline/pipeline.yaml
@@ -29,7 +29,7 @@ stages:
         gcloud auth configure-docker $(Registry) --quiet
       displayName: Configure Docker for GCR
     - script: |
-        docker build -t $(Registry)/$(DockerImageName):latest -f docker/Dockerfile.heavy --build-arg GO_BUILD_TAGS=goolm,stdjson,bedrock .
+        docker build -t $(Registry)/$(DockerImageName):latest -f docker/Dockerfile.launcher --build-arg GO_BUILD_TAGS=goolm,stdjson,bedrock .
       displayName: Build docker image
     - script: |
         docker push $(Registry)/$(DockerImageName):latest