instar 1.3.1641 → 1.3.1642

package/dashboard/console/development-model.js

@@ -24,6 +24,7 @@ export const WATCHER_CADENCE_MS = 600000;                  // GreenPrAutoMerger
 export const VERIFY_MINUTES = 45;                           // a full local verify takes about this long
 export const ARMED_OVERDUE_MS = 24 * 3600000;               // the watcher's own armed-confirm ceiling
 export const STALL_TICKS = 6;                               // readiness ticks in a row with no usable answer (about 3 h)
+export const DEV_FOLDS = ['shipping', 'feedback', 'pace'];
 export const PACE_WINDOWS = [7, 14, 30];
 export const PACE_PEOPLE = [{ key: 'team', label: 'Everyone' }, { key: 'codey', label: 'Codey' }, { key: 'echo', label: 'Echo' }, { key: 'other', label: 'Others' }];
 export const PACE_METRICS = [
@@ -183,12 +184,34 @@ export function buildShipping({ watcher, verify, release } = {}, now = Date.now(
   }
   const armedPrs = w && Array.isArray(w.armed) ? w.armed.map((a) => a.pr) : [];
   return {
-    state: 'ok', headline, tone, tiles, rows, watcher: wl, release: releaseLine(release, now),
+    state: 'ok', headline, tone: wl && wl.stopped && tone !== 'bad' ? 'attn' : tone, tiles, rows, moving, watcher: wl, release: releaseLine(release, now),
     partial: !w || !v, armedPrs, stopped: Boolean(wl && wl.stopped), rollbackLatches: (w && w.gate && Array.isArray(w.gate.rollback)) ? w.gate.rollback : [],
-    line: !w ? 'Shipping: can’t tell' : `Shipping: ${moving === 0 ? 'nothing on the way' : `${moving} on the way`}${needs ? `, ${needs} need${needs === 1 ? 's' : ''} you` : ''}${stuck ? `, ${needs ? '' : ''}${stuck} stuck` : ''}`,
+    line: !w ? 'Shipping: can’t tell' : `Shipping: ${wl && wl.stopped ? 'auto-merge stopped, ' : ''}${moving === 0 ? 'nothing on the way' : `${moving} on the way`}${needs ? `, ${needs} need${needs === 1 ? 's' : ''} you` : ''}${stuck ? `, ${needs ? '' : ''}${stuck} stuck` : ''}`,
     repoKnown: Boolean(repo),
   };
 }
+/**
+ * The lead card while auto-merging is stopped, or null when it is not. It is the first
+ * thing on the page because the stop is invisible otherwise: nothing merges, and the
+ * Shipping fold that used to be its only sign is often closed.
+ */
+export function stoppedLead(shipping) {
+  if (!shipping || !shipping.stopped) return null;
+  const n = shipping.moving || 0;
+  return {
+    title: 'Automatic merging is stopped',
+    detail: `No pull request merges on its own until it is back on.${n ? ` ${plural(n, 'pull request is', 'pull requests are')} on the way.` : ''}`,
+    why: shipping.watcher.text,
+    button: 'Turn auto-merge back on',
+  };
+}
+
+/** The section a `?s=` link names, from the location hash; null for none or an unknown one. */
+export function foldFromHash(hash) {
+  const s = new URLSearchParams(String(hash || '').split('?')[1] || '').get('s');
+  return DEV_FOLDS.includes(s) ? s : null;
+}
+
 function ordinal(n) { return n === 1 ? '1st' : n === 2 ? '2nd' : n === 3 ? '3rd' : `${n}th`; }
 
 /** Words for the hold result (never a blanket "held": the server says whether an armed merge was disarmed). */
@@ -545,11 +568,14 @@ export function commitResultWords(status, data) {
 // ── The combined page ────────────────────────────────────────────────────────
 /** The page headline: the worst state first, coverage stated. */
 export function developmentHeadline({ shipping, feedback, pace } = {}) {
+  const stopped = Boolean(shipping && shipping.stopped);
+  const needs = shipping && shipping.rows ? shipping.rows.filter((r) => r.group === 'needs') : [];
   if (feedback && feedback.todos && feedback.todos.length) {
-    const n = feedback.todos.length + (shipping && shipping.rows ? shipping.rows.filter((r) => r.group === 'needs').length : 0);
-    return { text: n === 1 ? 'One thing needs you.' : `${n} things need you.`, tone: 'attn', sub: feedback.todos[0].sentence };
+    const n = feedback.todos.length + needs.length + (stopped ? 1 : 0);
+    return { text: n === 1 ? 'One thing needs you.' : `${n} things need you.`, tone: 'attn', sub: stopped ? 'Automatic merging is stopped.' : feedback.todos[0].sentence };
   }
-  const needs = shipping && shipping.rows ? shipping.rows.filter((r) => r.group === 'needs') : [];
+  // Stopped is never "Nothing here needs you": it comes before every calmer reading below.
+  if (stopped) return { text: needs.length ? `${needs.length + 1} things need you.` : 'Automatic merging is stopped.', tone: 'attn', sub: needs.length ? 'Automatic merging is stopped.' : shipping.line };
   if (needs.length) return { text: needs.length === 1 ? 'One pull request needs your approval on GitHub.' : `${needs.length} pull requests need your approval on GitHub.`, tone: 'attn', sub: shipping.line };
   if (feedback && feedback.state === 'cant-tell') return { text: 'Can’t tell whether anything needs you.', tone: 'muted', sub: feedback.headline };
   const stuck = shipping && shipping.rows ? shipping.rows.filter((r) => r.group === 'stuck').length : 0;

package/dashboard/console/development.js

@@ -10,7 +10,7 @@
 // server requires it. Every value reaches the DOM through textContent.
 
 import {
-  buildShipping, buildPace, buildFeedback, developmentHeadline, maintainerMode, authorityCard, holdWords, verifyWords, rollbackWords,
+  buildShipping, buildPace, buildFeedback, developmentHeadline, stoppedLead, foldFromHash, maintainerMode, authorityCard, holdWords, verifyWords, rollbackWords,
   readinessAuthorityRequest, triageAuthorityRequest, commitRequest, authorityResultWords, commitResultWords, newDecisionRef, PACE_METRICS, DEV_TOOLS_KEY,
 } from './development-model.js';
 import { el, setKids, pageHead, section, sheet, closeSheet, story, details, note, cantTell, askPin } from './ui.js';
@@ -19,8 +19,8 @@ import { legacyHref } from './nav-model.js';
 const EYEBROW = 'Work · Development';
 const TIMEOUT_MS = 5000;
 const PROBE_FRESH_MS = 5 * 60000;
-// The open fold, the Pace controls and any limits the operator typed, kept across refreshes (F9: a poll never rebuilds typed input).
-const view = { open: null, days: 14, person: 'team', metric: 'merges', day: null, envelope: { readiness: null, triage: null } };
+// The open fold, a link's section still to scroll to, the Pace controls and any limits the operator typed, kept across refreshes (F9: a poll never rebuilds typed input).
+const view = { open: null, scrollTo: null, days: 14, person: 'team', metric: 'merges', day: null, envelope: { readiness: null, triage: null } };
 let last = null;
 let probe = null; // { at, promise } — the maintainer-mode reads, once per page load
 
@@ -90,9 +90,13 @@ export function groupExtras(g, { get }) {
 
 // ── the page ─────────────────────────────────────────────────────────────────
 export async function renderDevelopment(main, ctx) {
-  if (!main.querySelector('.dev-page')) setKids(main, el('section', { class: 'hero page-hero' }, el('div', { class: 'eyebrow', text: EYEBROW }), el('h1', { class: 'page-title skeleton', text: 'Loading development' })));
-  const want = new URLSearchParams((location.hash.split('?')[1] || '')).get('s');
-  if (want && !view.open) view.open = want;
+  // Each navigation gets a new <main>, so no page yet means someone just arrived: a `?s=` link wins over the
+  // remembered fold then. A 30-second refresh keeps the page, so it never overrides what the operator opened or closed.
+  if (!main.querySelector('.dev-page')) {
+    setKids(main, el('section', { class: 'hero page-hero' }, el('div', { class: 'eyebrow', text: EYEBROW }), el('h1', { class: 'page-title skeleton', text: 'Loading development' })));
+    const want = foldFromHash(location.hash);
+    if (want) { view.open = want; view.scrollTo = want; }
+  }
   const [watcher, verify, release, readiness, triageSummary, triageProposal, execute, queue, drain, pace] = await Promise.all([
     read('/green-pr-automerge'), read('/local-verify'), read('/release-readiness'),
     read('/feedback-factory/readiness-authorities/proposal'), read('/feedback-factory/triage/summary'), read('/feedback-factory/triage/authority/proposal'),
@@ -117,13 +121,14 @@ function paint() {
   const todos = feedback.todos;
   const first = todos[0] || null;
   const lead = first ? todoCard(first, deps, true) : null;
+  const stopped = stoppedCard(shipping, deps);
   const moreLine = todos.length > 1 ? el('button', { class: 'link-btn older-line', type: 'button', text: `${todos.length - 1} more ${todos.length === 2 ? 'thing needs' : 'things need'} you ›`, onclick: () => openMore(todos.slice(1), deps) }) : null;
 
   // First arrival opens the section with the worst news (Shipping otherwise); 'none' is the operator's own collapse.
   if (!view.open) view.open = feedback.tone === 'attn' || feedback.state === 'cant-tell' ? 'feedback' : 'shipping';
   setKids(main, el('div', { class: 'dev-page' },
     pageHead({ eyebrow: EYEBROW, headline: h.text, sub: h.sub, tone: h.tone }),
-    lead, moreLine,
+    stopped, lead, moreLine,
     el('div', { class: 'page-sections' },
       fold({ id: 'shipping', title: 'Shipping', line: shipping.line, tone: shipping.tone, body: () => shippingBody(shipping, deps) }),
       fold({ id: 'feedback', title: 'Feedback', line: feedback.line, tone: feedback.tone, body: () => feedbackBody(feedback, deps) }),
@@ -131,8 +136,12 @@ function paint() {
     ),
     el('p', { class: 'foot-note' }, el('a', { href: legacyHref('pr-pipeline'), text: 'Legacy PR pipeline' }), document.createTextNode(' · '), el('a', { href: legacyHref('feedback-drain'), text: 'feedback drain' }), document.createTextNode(' · '), el('a', { href: legacyHref('throughput'), text: 'throughput' })),
   ));
-  const sec = main.querySelector(`#sec-${view.open}`);
-  if (sec && new URLSearchParams((location.hash.split('?')[1] || '')).get('s') === view.open) sec.scrollIntoView({ block: 'start' });
+  // Once per arrival: a refresh or a fold tap must not pull the page back to the linked section.
+  if (view.scrollTo) {
+    const sec = main.querySelector(`#sec-${view.scrollTo}`);
+    view.scrollTo = null;
+    if (sec) sec.scrollIntoView({ block: 'start' });
+  }
 }
 
 /** One of the three sections: a one-line summary that opens in place; one open at a time. */
@@ -159,6 +168,17 @@ function toneLine(l, extra) {
 function block(title, ...kids) { return el('section', { class: 'sheet-block' }, el('h3', { class: 'eyebrow', text: title }), ...kids); }
 function sub(title, ...kids) { return el('div', { class: 'dev-sub' }, el('h3', { class: 'eyebrow sub-label', text: title }), ...kids); }
 
+/** The one way back on: the lead card and the Shipping fold both use it. */
+function backOnButton(s, deps, primary = false) {
+  return el('button', { class: primary ? 'btn-primary btn-inline' : 'btn-quiet', type: 'button', text: 'Turn auto-merge back on', onclick: () => enableAutoMerge(s, deps) });
+}
+/** Auto-merging is stopped: the first thing on the page, whichever fold is open. */
+function stoppedCard(s, deps) {
+  const c = stoppedLead(s);
+  if (!c) return null;
+  return el('div', { class: 'need-card stopped-lead' }, el('span', { class: 'need-title', text: c.title }), el('span', { class: 'need-sub', text: c.detail }), el('span', { class: 'need-sub', text: c.why }), backOnButton(s, deps, true));
+}
+
 // ── to-dos (Feedback approvals and links) ────────────────────────────────────
 function todoCard(todo, deps, lead = false) {
   if (todo.kind === 'link') {
@@ -263,11 +283,8 @@ function shippingBody(s, deps) {
   const rows = s.rows.map((r) => ({ ...r, sub: r.sub, end: r.end }));
   const list = section({ id: 'prs', title: 'Pull requests', rows, empty: s.headline, onRow: (r) => openPr(r, s, deps) });
   const foot = el('div', { class: 'sheet-actions dev-foot' });
-  if (s.stopped) {
-    const back = el('button', { class: 'btn-quiet', type: 'button', text: 'Turn auto-merge back on' });
-    back.addEventListener('click', () => enableAutoMerge(s, deps));
-    foot.append(back);
-  } else {
+  if (s.stopped) foot.append(backOnButton(s, deps));
+  else {
     const stop = el('button', { class: 'btn-quiet btn-danger-outline', type: 'button', text: 'Stop auto-merging' });
     stop.addEventListener('click', () => stopAutoMerge(s, deps));
     foot.append(stop);
@@ -279,7 +296,8 @@ function shippingBody(s, deps) {
     release, toneLine(s.watcher),
     s.partial ? note('Partial: one of Shipping’s sources did not answer; its tile says why. The others are real.') : null,
     s.repoKnown ? null : note('GitHub links are off: the repository name comes from the Pace read, which did not answer.'),
-    list, foot,
+    // While stopped the way back on sits above the list, not under a long list of pull requests.
+    s.stopped ? [foot, list] : [list, foot],
   ];
 }
 

package/dashboard/console/ui.js

@@ -14,7 +14,8 @@ export function el(tag, attrs = {}, ...kids) {
     else if (k.startsWith('on') && typeof v === 'function') n.addEventListener(k.slice(2), v);
     else n.setAttribute(k, v === true ? '' : String(v));
   }
-  for (const kid of kids.flat()) if (kid != null && kid !== false) n.append(kid);
+  // Any depth: an array left inside the kids would otherwise be stringified into the page ("[object HTMLParagraphElement]").
+  for (const kid of kids.flat(Infinity)) if (kid != null && kid !== false) n.append(kid);
   return n;
 }
 
@@ -204,7 +205,7 @@ export function actionButton({ label, kind = 'primary', confirm, reason, run, do
 }
 
 /** replaceChildren that skips null/false (a bare null would render as the text "null"). */
-export function setKids(node, ...kids) { node.replaceChildren(...kids.flat().filter((k) => k != null && k !== false)); }
+export function setKids(node, ...kids) { node.replaceChildren(...kids.flat(Infinity).filter((k) => k != null && k !== false)); }
 
 // ── PIN sheet (00-patterns.md §4: one look, per-action adapters) ───────────
 // adapter 'session': POST /dashboard/unlock → operator-session token, held in page

package/dist/data/standards-guard-index.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "generatedFrom": "source-tree",
   "registrySha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
-  "packageVersion": "1.3.1641",
+  "packageVersion": "1.3.1642",
   "guards": [
     {
       "ref": "docs/audits/phase-b/f10-triage.md",

package/dist/data/standards-guard-index.meta.json

@@ -1,5 +1,5 @@
 {
-  "sha256": "f22de89e214b043f1a22c9a27a89bd7ef4a84e510d327670b7368b5922c32b23",
+  "sha256": "4bf2279250aa96b5cd87bd921362443247a08b29fa140a68164830a0bdcb090f",
   "registrySha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
-  "packageVersion": "1.3.1641"
+  "packageVersion": "1.3.1642"
 }

package/dist/data/standards-registry.meta.json

@@ -2,5 +2,5 @@
   "sha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
   "articleCount": 93,
   "generatedFrom": "docs/STANDARDS-REGISTRY.md",
-  "packageVersion": "1.3.1641"
+  "packageVersion": "1.3.1642"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.1641",
+  "version": "1.3.1642",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-11-04T01:55:03.705Z",
-  "instarVersion": "1.3.1641",
+  "generatedAt": "2026-11-04T02:21:02.288Z",
+  "instarVersion": "1.3.1642",
   "entryCount": 206,
   "entries": {
     "hook:session-start": {

package/src/data/standards-guard-index.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "generatedFrom": "source-tree",
   "registrySha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
-  "packageVersion": "1.3.1641",
+  "packageVersion": "1.3.1642",
   "guards": [
     {
       "ref": "docs/audits/phase-b/f10-triage.md",

package/src/data/standards-guard-index.meta.json

@@ -1,5 +1,5 @@
 {
-  "sha256": "f22de89e214b043f1a22c9a27a89bd7ef4a84e510d327670b7368b5922c32b23",
+  "sha256": "4bf2279250aa96b5cd87bd921362443247a08b29fa140a68164830a0bdcb090f",
   "registrySha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
-  "packageVersion": "1.3.1641"
+  "packageVersion": "1.3.1642"
 }

package/src/data/standards-registry.meta.json

@@ -2,5 +2,5 @@
   "sha256": "db01d9f92c6aa26ca903702896b41be53722982ed07d27633237bb254c214290",
   "articleCount": 93,
   "generatedFrom": "docs/STANDARDS-REGISTRY.md",
-  "packageVersion": "1.3.1641"
+  "packageVersion": "1.3.1642"
 }

package/upgrades/1.3.1642.md

@@ -0,0 +1,23 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+The console's Development page now says so at the top when automatic merging is stopped. A card sits above everything else on the page, reading "Automatic merging is stopped", with the same "Turn auto-merge back on" action as before (same PIN prompt, same server route, same rules on who may re-arm). The Shipping bar now reads "Shipping: auto-merge stopped, …" even when closed, and the headline can no longer say "Nothing here needs you" while nothing can merge. Inside the Shipping section the button moved above the pull request list.
+
+Two related fixes. A link to a section of the page (`?s=shipping`, `?s=feedback`, `?s=pace`) now works on a tab that is already open; before, the section you last had open beat the link. The stray text "[object HTMLParagraphElement]" under the Feedback tiles is gone: the shared page builder only flattened one level of nested lists, so a list of notes was turned into text instead of being shown. It is fixed in the builder, so no other console page can hit it.
+
+## What to Tell Your User
+
+If automatic merging is ever stopped, the Development page now tells you at the very top and gives you the button to turn it back on right there, so you no longer have to open the Shipping section and scroll past the pull request list. Links to a section of that page also work now if you already have it open, and the odd "[object HTMLParagraphElement]" text under Feedback is gone.
+
+## Summary of New Capabilities
+
+- A lead card on the console Development page while auto-merging is stopped.
+- `?s=<section>` links work on an already-open Development page.
+
+## Evidence
+
+The new tests in `tests/unit/console-development.test.ts` cover stopped and not stopped, the link on an open tab, and the stringify bug. Four of them fail on the old page code and pass on the new. The page was rendered at 1280 wide from the branch against this agent's live reads through a proxy that refuses every write: stopped (the card leads, the Shipping bar says stopped, the button is at about y=345 instead of y=1575 on a closed fold) and not stopped (with the watcher answer altered in the proxy only: no card, no stopped words). The live stop was not touched.

package/upgrades/side-effects/console-development-stopped-lead.eli16.md

@@ -0,0 +1,11 @@
+# The Development page says when automatic merging is stopped
+
+**What this changes, in plain words.** Automatic merging can be stopped, by the operator or by the agent. While it is stopped, pull requests that pass their checks just wait. The console's Development page barely showed this. On first load it often opens the Feedback section, so Shipping stays a closed bar, and the only notice and the only button to turn merging back on sat at the bottom of that closed section, under the whole pull request list. The operator hit this three times.
+
+Now, when merging is stopped, a card at the very top of the page says so and carries the button. The Shipping bar says it too, and the headline stops claiming nothing needs you. When merging is not stopped the page looks as it did.
+
+**What did not change.** The button does exactly what it did: it asks for the PIN and sends it once to the same server route with the same stop records. Nothing here changes who may turn merging back on, and the server still makes that decision. There is no new route.
+
+**Two small fixes in the same page.** A link to one section now opens that section even if the page is already open. It applies once per arrival, so the 30-second refresh does not undo what the operator opens or closes, or scroll the page again. And the stray text "[object HTMLParagraphElement]" under Feedback is gone. A list of notes nested inside another list was being turned into text, because the shared page builder only flattened one level. Fixing the builder removes that mistake from every console page.
+
+**If it is wrong.** Revert the commit. It only changes browser-side files, with no stored state or settings.

package/upgrades/side-effects/console-development-stopped-lead.md

@@ -0,0 +1,55 @@
+# Side-Effects Review — Development page shows when auto-merge is stopped
+
+**Version / slug:** `console-development-stopped-lead`
+**Date:** `2026-11-03`
+**Author:** `Echo`
+**Second-pass reviewer:** `not required`
+
+## Summary of the change
+
+Tier 1: 4 source and test files, about 250 lines, most of them tests; one review round, one commit attempt expected. `dashboard/console/development-model.js` gains `stoppedLead` and `foldFromHash`, says stopped in `Shipping.line` and tone, and makes the headline lead with the stop. `dashboard/console/development.js` renders the lead card above other leads, moves the fold's button above the list, shares one `backOnButton` calling the unchanged `enableAutoMerge`, applies `?s=` once per arrival, and scrolls once per arrival. `dashboard/console/ui.js` flattens nested kids at any depth in `el` and `setKids`, the source of the "[object HTMLParagraphElement]" text.
+
+## Decision-point inventory
+
+No decision-point surface. `shipping.stopped` already existed and is only read for display. The re-arm still goes through the server's PIN gate on `/green-pr-automerge/enable`; its request body is unchanged and pinned by a test.
+
+---
+
+## 1. Over-block
+
+No block/allow surface — over-block not applicable.
+
+## 2. Under-block
+
+No block/allow surface. As a signal: if the watcher read fails the page cannot know, so there is no card; the Shipping bar and tiles say "can't tell" as before, never a calm "not stopped". An unknown `?s=` value names no section and leaves the remembered one alone (it used to leave every fold shut).
+
+## 3. Level-of-abstraction fit
+
+The decision lives in the view-model as this page's rule requires, and the card only renders it. The stringify fix is in the shared builder rather than at the one `feedbackBody` call site, because any page can nest a mapped list in the same way; the change only affects arrays that would otherwise be stringified.
+
+## 4. Signal vs authority compliance
+
+Reference: `docs/signal-vs-authority.md`. This is display only and holds no blocking authority. The server remains the only authority on re-arming.
+
+## 5. Interactions
+
+- PR 2678 (agent-stop-release) adds a wording branch inside `watcherLine` and test lines in another `describe`. The card shows `watcher.text` as its "who stopped it" line, so 2678's wording reaches the card with no further change. A trial merge of the two is clean.
+- The 30-second refresh calls `renderDevelopment` on the same `<main>`, so `.dev-page` exists and `?s=` is not reapplied. Every route change builds a new `<main>`, which is the arrival signal.
+- Scrolling on every repaint when the address held `?s=` is gone; it would have pulled the page back on refresh or fold tap.
+- `developmentHeadline` now counts the stop as one thing needing the operator, and adds Shipping's needs-you rows the same way it did before.
+
+## 6. External surfaces
+
+Maintainer-only console page text and layout. No API, message or route changes. The card's button is the same action as the existing one.
+
+## 7. Multi-machine posture
+
+Machine-local by design, as the page already was: it reads the local `/green-pr-automerge`. A standby machine shows what its own read says.
+
+## 8. Rollback cost
+
+Revert the commit and release. Browser-side files only, with no state, config or migration.
+
+## Evidence pointers
+
+`tests/unit/console-development.test.ts`: four new tests fail on the old page code and pass on the new. Browser proof at 1280 wide, stopped and not stopped, through a proxy that refused every write; the live latch was not touched and no PIN was used.