diff --git a/docker/core.Dockerfile b/docker/core.Dockerfile
index 4406cbb7..f61811c2 100644
--- a/docker/core.Dockerfile
+++ b/docker/core.Dockerfile
@@ -31,6 +31,8 @@ RUN ln -s /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm \
 RUN useradd --create-home --uid 10001 --shell /bin/bash thoth
 
 COPY harness/ /app/harness/
+# Pi scrive lock/settings in .pi: ownership thoth per sopravvivere al rebuild
+RUN chown -R thoth:thoth /app/harness/.pi
 
 # Harness: venv nativo (python 3.12) + tht installato (non-editable).
 # tht carica workflow.yaml module-relative (Path(__file__).parent.parent); con il package