feat(compute): add Lambda MicroVM P3 approval lifecycle

.dockerignore

@@ -47,6 +47,10 @@ abca-worktrees/
 # Test/coverage output
 coverage/
 **/coverage/
+.jest-cache/
+**/.jest-cache/
+test-reports/
+**/test-reports/
 .pytest_cache/
 **/.pytest_cache/
 # Coverage data FILES, not just the directories above. pytest-cov writes

CONTRIBUTING.md

@@ -98,6 +98,19 @@ PRs labeled `auto-approve` are approved automatically by the `auto-approve` work
 
 If `prek install` fails with "refusing to install hooks with `core.hooksPath` set", another tool owns your hooks. Either unset it (`git config --unset-all core.hooksPath`) or integrate these checks into your hook manager.
 
+The build's transaction tests use DynamoDB Local through
+`ABCA_DDB_LOCAL_ENDPOINT` (a loopback HTTP endpoint). CI starts a Docker service
+pinned by image digest and supplies its mapped port to both CDK and Python tests;
+those tests fail if `CI=true` without an endpoint. To reproduce locally, start
+DynamoDB Local with `-inMemory -sharedDb`, bind port 8000 to loopback, and run
+`ABCA_DDB_LOCAL_ENDPOINT=http://127.0.0.1:8000 mise run build`.
+
+The pinned SDK continuation probe also runs in CI. Locally enable it with
+`ABCA_TEST_SDK_CONTINUATION=1` when running
+`agent/tests/test_continuation_sdk_probe.py`. It uses a local simulated Bedrock
+endpoint and synthetic credentials; it does not require an AWS account or model
+billing.
+
 ## Versioning
 
 The project uses semantic versioning based on [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/):

agent/.vulture_allowlist.py

@@ -21,3 +21,8 @@
 hook_context  # unused variable (src/hooks.py:132)
 hook_context  # unused variable (src/hooks.py:918)
 hook_context  # unused variable (src/hooks.py:1258)
+
+# urllib's HTTPRedirectHandler supplies this named parameter to redirect_request.
+# The bootstrap override intentionally rejects every redirect without inspecting
+# its destination; retain the standard-library callback signature.
+newurl  # unused variable (src/payload_bootstrap.py:_NoRedirect.redirect_request)

agent/AGENTS.md

@@ -27,6 +27,9 @@ Root `mise run build` includes `//agent:quality` in parallel with `//cdk:build`.
 | `progress_writer.py` | `agent/tests/test_progress_writer.py` |
 | `hooks.py`, `policy.py` | `agent/tests/test_hooks.py`, `test_policy.py` |
 | `pipeline.py`, `runner.py` | `agent/tests/test_pipeline.py`, etc. |
+| `microvm_lifecycle.py`, `microvm_checkpoint.py` | `test_microvm_lifecycle.py`, `test_microvm_checkpoint.py`; checkpoint transaction tests require `ABCA_DDB_LOCAL_ENDPOINT` in CI |
+| `approval_requests.py`, `task_state.py` | `test_approval_requests.py`, `test_task_state.py`; SigV4 writer protocol and persistence outcomes |
+| `continuation_*.py` | Matching `test_continuation_*.py`: capture, storage, safe restore, SDK session and usage recovery |
 
 Use `@pytest.fixture(autouse=True)` to reset shared module state between tests when handlers use circuit breakers or caches.
 
@@ -91,4 +94,5 @@ def test_a():
 - **Cedar parity** — `cedarpy==4.8.4` (agent) and `@cedar-policy/cedar-wasm` 4.8.2 (cdk) must move together. See [cdk/AGENTS.md](../cdk/AGENTS.md) and `docs/design/CEDAR_HITL_GATES.md` §15.6.
 - **Forgotten consumer** — Progress event schema changes need `cli/src/commands/watch.ts` and `test_progress_writer.py` updates.
 - **Image bundle** — CDK deploys this tree; root `mise run build` always runs agent quality.
+- **Continuation compatibility** — the SDK pin must match `contracts/constants.json` → `microvm_continuation.verified_sdk_version`. Verify real SDK session recovery before updating both. Persisted checkpoint identities are versioned wire data; renaming a Python field can invalidate existing checkpoints.
 - **Un-attributed AWS SDK client (#319)** — build clients via `aws_session.tenant_client`/`tenant_resource` (tenant-scoped) or `aws_session.platform_client` (unscoped, still attributed); a naked `boto3.client(...)` silently drops solution attribution.

agent/Dockerfile

@@ -128,7 +128,9 @@ COPY agent/prepare-commit-msg.sh /app/
 # Claude Code managed settings (#215). The highest-precedence settings layer —
 # loaded regardless of setting_sources and unoverridable by the untrusted cloned
 # repo's project .claude/settings.json. Carries awsCredentialExport so Bedrock
-# calls use session-tagged, refreshable credentials for cost attribution.
+# calls use session-tagged credentials for cost attribution. For MicroVM workers,
+# the helper returns no exported keys: the parent's scoped container provider
+# handles renewal without Claude's stale awsCredentialExport cache.
 # Placing awsCredentialExport (an arbitrary command) anywhere the target repo
 # can influence would be RCE with the compute role, so it lives ONLY here.
 COPY agent/managed-settings.json /etc/claude-code/managed-settings.json