Under which of the following conditions must the combustion control system for a small automatic auxiliary boiler secure the burner?