diff --git a/ui/src/ui/gateway.ts b/ui/src/ui/gateway.ts
index 31d4bb6b5..9ce46c326 100644
--- a/ui/src/ui/gateway.ts
+++ b/ui/src/ui/gateway.ts
@@ -134,7 +134,8 @@ export class GatewayBrowserClient {
         this.opts.onHello?.(hello);
       })
       .catch(() => {
-        this.ws?.close(1008, "connect failed");
+        // 4008 = application-defined code (browser rejects 1008 "Policy Violation")
+        this.ws?.close(4008, "connect failed");
       });
   }