MacBook command gate targets the Mini daemon; when the Mini sleeps, gated commands run with no button

[ThinkOffApp]

Observed 2026-09-06 on the MacBook while the Mini was asleep.

~/.claude/scripts/iak-precommand-gate.py posts every gated command (gh pr merge, deploys, force push, unknown kills) to IAK_GATE_URL, default http://192.168.50.241:8788, which is the Mini's daemon on the Helsinki LAN. From Berlin, or whenever the Mini sleeps (its known failure mode), that POST times out and the script's fail-safe prints nothing, so the command falls through to the harness. In bypass-permissions mode that means the command simply runs: the phone button never appears and nobody is asked.

Today I avoided it by raising a card through the local daemon (scripts/iak-confirm.py against 127.0.0.1:8788) and only merging after the tap, but that is a manual workaround.

Product fix

1. Default the gate to the local daemon (127.0.0.1:8788) and treat remote daemons as peers, so the button works wherever the laptop is.
2. Distinguish "daemon unreachable" from "no decision": on unreachable, block with a clear message instead of silently allowing when the harness has no gate of its own.
3. Log every fall-through to /tmp/iak-gate.log so a silent allow is at least visible afterwards.