diff --git a/NucleicRemote/NucleicRemote/Notifications.swift b/NucleicRemote/NucleicRemote/Notifications.swift
index fa8ef92..c12a4b5 100644
--- a/NucleicRemote/NucleicRemote/Notifications.swift
+++ b/NucleicRemote/NucleicRemote/Notifications.swift
@@ -62,7 +62,11 @@ final class NotificationRouter: NSObject {
         content.title = sessionTitle
         content.body = "\(approval.toolName) wants: \(approval.title)"
         content.sound = .default
-        content.categoryIdentifier = approval.risk.isHigh
+        // AskUserQuestion collects answers, it doesn't gate — a banner Allow would reply with no
+        // selection (updatedInput: nil) and the CLI reports the question went unanswered. So, like
+        // a high-risk approval, it uses the action-less category: it must open the app and be
+        // answered on the picker card.
+        content.categoryIdentifier = approval.risk.isHigh || approval.toolName == AskUserQuestion.toolName
             ? Self.approvalCategory : Self.approvalActionableCategory
         content.userInfo = [
             "sessionID": approval.sessionID.rawValue,