Label on write of SI memory fails closed in every mode — memory_record and a memory-on SI's journal line are not written when the ledger, org graph or settings cannot be read (UNAVAILABLE DISCLOSURE_UNAVAILABLE) or the SI calls outside a run (UNAVAILABLE RUN_CONTEXT_MISSING), AUDIT included, so no unlabelled PRIVATE card reaches the SI's management chain (KamoCollab CP11 final review, ruling CP11-FF-1)