diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1bbc368..604fae3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,7 +35,7 @@ jobs:
         run: ruff check lambda tests cdk
 
       - name: Mypy
-        run: mypy tests
+        run: mypy
 
   test:
     runs-on: ubuntu-latest
diff --git a/Makefile b/Makefile
index b1049b2..90561ad 100644
--- a/Makefile
+++ b/Makefile
@@ -17,7 +17,7 @@ lint:
 	ruff check lambda tests cdk
 
 typecheck:
-	mypy tests
+	mypy
 
 synth:
 	npx --yes aws-cdk@2 synth
diff --git a/pyproject.toml b/pyproject.toml
index edd6a26..a858423 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -26,9 +26,6 @@ ignore_missing_imports = true
 warn_return_any = false
 warn_unused_configs = true
 check_untyped_defs = false
-# `lambda/` is a reserved package name; CDK stubs are heavy — typecheck tests only for now.
-files = ["tests"]
-
-[[tool.mypy.overrides]]
-module = "lambda.*"
-ignore_errors = true
+# Typecheck tests + domain_dynamo (HTTP app.py stays out — Powertools resolver cost).
+# No ignore_errors on domain.
+files = ["tests", "lambda/domain_dynamo.py"]