Clone the device name before tap/take mutates the graph, and stop re-querying through unwrap for log and signature copy. Moonlight offer mail uses the same local terms instead of last().unwrap() after push. Defense: reach.md requires legible failure rather than silent impossibility; the crash-reduction fail-closed posture forbids aborting a live session on a post-mutation device re-lookup that should be unreachable. Co-authored-by: Cursor <cursoragent@cursor.com> (cherry picked from commit a57b896d79f971f717b73641b044c6135e336fa0)