diff --git a/dankclaw/host/grub b/dankclaw/host/grub
index 1515f69..7bf4aec 100644
--- a/dankclaw/host/grub
+++ b/dankclaw/host/grub
@@ -7,8 +7,11 @@ GRUB_DEFAULT=0
 GRUB_TIMEOUT_STYLE=hidden
 GRUB_TIMEOUT=0
 GRUB_DISTRIBUTOR=`( . /etc/os-release && echo ${NAME} )`
-GRUB_CMDLINE_LINUX_DEFAULT="quiet splash amd_iommu=off"
-GRUB_CMDLINE_LINUX=""
+# Identity (passthrough) DMA since 2026-10-18: the IOMMU stays enabled, so the
+# XDNA2 NPU (/dev/accel/accel0, PASID/SVA) is usable again, while the iGPU's DMA
+# runs untranslated. Decided in serverAppConfigs-docs/LLM/
+# dankclaw-iommu-translation-off.md; install with scripts/set-dankclaw-bootline.sh.
+GRUB_CMDLINE_LINUX_DEFAULT="quiet splash iommu=pt"
 
 # If your computer has multiple operating systems installed, then you
 # probably want to run os-prober. However, if your computer is a host