The Connect Wallet handler falls through to this block after eth_requestAccounts throws, returns no accounts, or is unavailable. It marks the wallet connected, generates an unrelated random address, changes the button to that address and logs SqueekID Wallet linked. Consequently, rejecting the wallet permission request still produces a successful connection UI, and visitors without a wallet are shown an address they do not control.

Keep the disconnected state on rejection or absence of a provider; any optional demo identity should be explicitly labeled and separate from a real wallet connection. This is an advisory connection-state defect; the reviewed code does not request asset approvals or transfers.

The SPIN WHEEL button in index.html only invokes spinImpulse on pointerdown. Native keyboard activation fires a click, which has no handler here. The separate Space shortcut at app.js:490-494 explicitly requires document.body as the event target, so it also ignores Space when the button is focused.

A keyboard visitor can focus the primary manual mining control but cannot operate it with either Enter or Space. Handle accessible button activation as well as pointer input without double-counting impulses.