@aztec/sequencer-client 0.0.1-commit.b6e433891 → 0.0.1-commit.b9865e97

package/dest/sequencer/checkpoint_proposal_job.js

@@ -436,17 +436,18 @@ function _apply_decs_2203_r(targetClass, memberDecs, classDecs, parentClass) {
     return (_apply_decs_2203_r = applyDecs2203RFactory())(targetClass, memberDecs, classDecs, parentClass);
 }
 var _dec, _dec1, _dec2, _dec3, _dec4, _dec5, _dec6, _dec7, _initProto;
-import { BlockNumber, IndexWithinCheckpoint } from '@aztec/foundation/branded-types';
+import { BlockNumber, CheckpointNumber, IndexWithinCheckpoint } from '@aztec/foundation/branded-types';
 import { randomInt } from '@aztec/foundation/crypto/random';
 import { flipSignature, generateRecoverableSignature, generateUnrecoverableSignature } from '@aztec/foundation/crypto/secp256k1-signer';
+import { InterruptError, TimeoutError } from '@aztec/foundation/error';
 import { filter } from '@aztec/foundation/iterator';
 import { createLogger } from '@aztec/foundation/log';
-import { sleep, sleepUntil } from '@aztec/foundation/sleep';
+import { InterruptibleSleep } from '@aztec/foundation/sleep';
 import { Timer } from '@aztec/foundation/timer';
 import { isErrorClass, unfreeze } from '@aztec/foundation/types';
 import { CommitteeAttestationsAndSigners, MaliciousCommitteeAttestationsAndSigners } from '@aztec/stdlib/block';
-import { validateCheckpoint } from '@aztec/stdlib/checkpoint';
-import { getSlotStartBuildTimestamp, getTimestampForSlot } from '@aztec/stdlib/epoch-helpers';
+import { getPreviousCheckpointOutHashes, validateCheckpoint } from '@aztec/stdlib/checkpoint';
+import { computeQuorum, getSlotStartBuildTimestamp, getTimestampForSlot } from '@aztec/stdlib/epoch-helpers';
 import { Gas } from '@aztec/stdlib/gas';
 import { InsufficientValidTxsError } from '@aztec/stdlib/interfaces/server';
 import { computeInHashFromL1ToL2Messages } from '@aztec/stdlib/messaging';
@@ -454,10 +455,12 @@ import { orderAttestations, trimAttestations } from '@aztec/stdlib/p2p';
 import { AttestationTimeoutError } from '@aztec/stdlib/validators';
 import { Attributes, trackSpan } from '@aztec/telemetry-client';
 import { DutyAlreadySignedError, SlashingProtectionError } from '@aztec/validator-ha-signer/errors';
+import { buildCheckpointSimulationOverridesPlan } from './chain_state_overrides.js';
 import { CheckpointVoter } from './checkpoint_voter.js';
 import { SequencerInterruptedError } from './errors.js';
 import { SequencerState } from './utils.js';
 /** How much time to sleep while waiting for min transactions to accumulate for a block */ const TXS_POLLING_MS = 500;
+const ARCHIVER_SYNC_POLLING_MS = 200;
 _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('CheckpointProposalJob.proposeCheckpoint', function() {
     return {
         // nullish operator needed for tests
@@ -473,10 +476,10 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
  */ export class CheckpointProposalJob {
     slotNow;
     targetSlot;
-    epochNow;
     targetEpoch;
     checkpointNumber;
     syncedToBlockNumber;
+    checkpointedCheckpointNumber;
     proposer;
     publisher;
     attestorAddress;
@@ -490,15 +493,18 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
     checkpointsBuilder;
     blockSink;
     l1Constants;
+    signatureContext;
     config;
     timetable;
     slasherClient;
     epochCache;
     dateProvider;
     metrics;
+    checkpointMetrics;
     eventEmitter;
     setStateFn;
     tracer;
+    proposedCheckpointData;
     static{
         ({ e: [_initProto] } = _apply_decs_2203_r(this, [
             [
@@ -544,14 +550,27 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
         ], []));
     }
     log;
-    constructor(slotNow, targetSlot, epochNow, targetEpoch, checkpointNumber, syncedToBlockNumber, // TODO(palla/mbps): Can we remove the proposer in favor of attestorAddress? Need to check fisherman-node flows.
-    proposer, publisher, attestorAddress, invalidateCheckpoint, validatorClient, globalsBuilder, p2pClient, worldState, l1ToL2MessageSource, l2BlockSource, checkpointsBuilder, blockSink, l1Constants, config, timetable, slasherClient, epochCache, dateProvider, metrics, eventEmitter, setStateFn, tracer, bindings){
+    checkpointEventLog;
+    /** Tracks the fire-and-forget L1 submission promise so it can be awaited during shutdown. */ pendingL1Submission;
+    interruptibleSleep;
+    interrupted;
+    /**
+   * Chain state overrides built once per slot in proposeCheckpoint after the checkpoint is
+   * complete. Carries the pending parent override (archive + slot + fee header) for pipelining,
+   * or the invalidation pending override when rolling back. Consumed by
+   * publisher.validateBlockHeader before broadcast.
+   */ checkpointSimulationOverridesPlan;
+    getSignatureContext() {
+        return this.signatureContext;
+    }
+    constructor(slotNow, targetSlot, targetEpoch, checkpointNumber, syncedToBlockNumber, checkpointedCheckpointNumber, // TODO(palla/mbps): Can we remove the proposer in favor of attestorAddress? Need to check fisherman-node flows.
+    proposer, publisher, attestorAddress, invalidateCheckpoint, validatorClient, globalsBuilder, p2pClient, worldState, l1ToL2MessageSource, l2BlockSource, checkpointsBuilder, blockSink, l1Constants, signatureContext, config, timetable, slasherClient, epochCache, dateProvider, metrics, checkpointMetrics, eventEmitter, setStateFn, tracer, bindings, proposedCheckpointData){
         this.slotNow = slotNow;
         this.targetSlot = targetSlot;
-        this.epochNow = epochNow;
         this.targetEpoch = targetEpoch;
         this.checkpointNumber = checkpointNumber;
         this.syncedToBlockNumber = syncedToBlockNumber;
+        this.checkpointedCheckpointNumber = checkpointedCheckpointNumber;
         this.proposer = proposer;
         this.publisher = publisher;
         this.attestorAddress = attestorAddress;
@@ -565,82 +584,337 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
         this.checkpointsBuilder = checkpointsBuilder;
         this.blockSink = blockSink;
         this.l1Constants = l1Constants;
+        this.signatureContext = signatureContext;
         this.config = config;
         this.timetable = timetable;
         this.slasherClient = slasherClient;
         this.epochCache = epochCache;
         this.dateProvider = dateProvider;
         this.metrics = metrics;
+        this.checkpointMetrics = checkpointMetrics;
         this.eventEmitter = eventEmitter;
         this.setStateFn = setStateFn;
         this.tracer = tracer;
-        _initProto(this);
+        this.proposedCheckpointData = proposedCheckpointData;
+        this.interruptibleSleep = (_initProto(this), new InterruptibleSleep());
+        this.interrupted = false;
         this.log = createLogger('sequencer:checkpoint-proposal', {
             ...bindings,
             instanceId: `slot-${this.slotNow}`
         });
+        this.checkpointEventLog = createLogger('sequencer:checkpoint-events', {
+            ...bindings,
+            instanceId: `slot-${this.slotNow}`
+        });
+    }
+    /** Awaits the pending L1 submission if one is in progress. Call during shutdown. */ async awaitPendingSubmission() {
+        this.log.info('Awaiting pending L1 payload submission');
+        await this.pendingL1Submission;
+    }
+    /** Interrupts job-owned waits, including the publisher's send-at-slot sleep, so shutdown can finish. */ interrupt() {
+        this.interrupted = true;
+        this.interruptibleSleep.interrupt(true);
+        this.publisher.interrupt();
     }
-    /** The wall-clock slot during which the proposer builds. */ get slot() {
-        return this.slotNow;
+    async awaitInterruptibleSleep(ms) {
+        if (this.interrupted) {
+            throw new SequencerInterruptedError();
+        }
+        if (ms <= 0) {
+            return;
+        }
+        try {
+            await this.interruptibleSleep.sleep(ms);
+        } catch (err) {
+            if (err instanceof InterruptError) {
+                throw new SequencerInterruptedError();
+            }
+            throw err;
+        }
     }
-    /** The wall-clock epoch. */ get epoch() {
-        return this.epochNow;
+    logCheckpointEvent(eventName, message, fields) {
+        this.checkpointEventLog.debug(message, {
+            eventName: `sequencer-checkpoint-${eventName}`,
+            ...fields
+        });
     }
     /**
    * Executes the checkpoint proposal job.
-   * Returns the published checkpoint if successful, undefined otherwise.
+   * Builds blocks, assembles checkpoint, and broadcasts the proposal (blocking).
+   * Attestation collection, signing, and L1 submission are backgrounded so the
+   * work loop can return to IDLE immediately for consecutive slot proposals.
+   * Returns the built checkpoint if successful, undefined otherwise.
    */ async execute() {
         // Enqueue governance and slashing votes (returns promises that will be awaited later)
         // In fisherman mode, we simulate slashing but don't actually publish to L1
         // These are constant for the whole slot, so we only enqueue them once
         const votesPromises = new CheckpointVoter(this.targetSlot, this.publisher, this.attestorAddress, this.validatorClient, this.slasherClient, this.l1Constants, this.config, this.metrics, this.log).enqueueVotes();
-        // Build and propose the checkpoint. This will enqueue the request on the publisher if a checkpoint is built.
-        const checkpoint = await this.proposeCheckpoint();
-        // Wait until the voting promises have resolved, so all requests are enqueued (not sent)
-        await Promise.all(votesPromises);
-        if (checkpoint) {
-            this.metrics.recordCheckpointProposalSuccess();
+        // Build blocks, assemble checkpoint, and broadcast proposal (BLOCKING).
+        // Returns after broadcast — attestation collection is deferred.
+        const broadcast = await this.proposeCheckpoint();
+        if (!broadcast) {
+            await Promise.all(votesPromises);
+            // Still submit votes even without a checkpoint.
+            // Under proposer pipelining, vote-offenses signatures are EIP-712-bound to `targetSlot`
+            // (the pipelined slot in which the multicall is expected to mine). Submitting at the
+            // wall-clock time would let the multicall mine in a different L2 slot, causing
+            // signature verification to fail silently inside Multicall3. Delay submission to the
+            // start of `targetSlot` so the tx mines in the slot the vote was signed for.
+            if (!this.config.fishermanMode) {
+                this.pendingL1Submission = this.publisher.sendRequestsAt(this.targetSlot).then(()=>{});
+            }
+            return undefined;
         }
+        const { checkpoint } = broadcast;
+        this.metrics.recordCheckpointProposalSuccess();
         // Do not post anything to L1 if we are fishermen, but do perform L1 fee analysis
         if (this.config.fishermanMode) {
             await this.handleCheckpointEndAsFisherman(checkpoint);
-            return;
+            return checkpoint;
         }
-        // If pipelining, wait until the submission slot so L1 recognizes the pipelined proposer
-        if (this.epochCache.isProposerPipeliningEnabled()) {
-            const submissionSlotTimestamp = getTimestampForSlot(this.targetSlot, this.l1Constants) - BigInt(this.l1Constants.ethereumSlotDuration);
-            this.log.info(`Waiting until submission slot ${this.targetSlot} for L1 submission`, {
-                slot: this.slot,
-                submissionSlot: this.targetSlot,
-                submissionSlotTimestamp
+        // Background the attestation → signing → L1 pipeline so the work loop is unblocked
+        this.pendingL1Submission = this.waitForAttestationsAndEnqueueSubmissionAsync(broadcast, votesPromises);
+        // Return the built checkpoint immediately — the work loop is now unblocked
+        return checkpoint;
+    }
+    /**
+   * Background pipeline: collects attestations, signs them, enqueues the checkpoint, and submits to L1.
+   * Runs as a fire-and-forget task stored in `pendingL1Submission` so the work loop is unblocked.
+   */ async waitForAttestationsAndEnqueueSubmissionAsync(broadcast, votesPromises) {
+        const { checkpoint } = broadcast;
+        try {
+            // Wait for all votes actions, enqueued at the beginning, to resolve
+            await Promise.all(votesPromises);
+            // Try to collect attestations from the committee
+            const signedAttestations = await this.getSignedCommitteeAttestations(broadcast);
+            // Wait for the previous checkpoint to land on L1 before submitting, so we can check it
+            // matches the proposed checkpoint we used as parent, and has valid attestations.
+            if (signedAttestations && await this.waitForValidParentCheckpointOnL1()) {
+                await this.enqueueCheckpointForSubmission({
+                    checkpoint,
+                    ...signedAttestations
+                });
+            }
+            // If we failed to collect attestations, at least check if we need to issue an invalidation
+            if (!signedAttestations && await this.waitForSyncedL2SlotNumber(this.slotNow)) {
+                const validationStatus = await this.l2BlockSource.getPendingChainValidationStatus();
+                if (!validationStatus.valid) {
+                    this.log.warn(`Checkpoint ${validationStatus.checkpoint.checkpointNumber} has invalid attestations, enqueuing invalidation in spite of attestation collection failure`, {
+                        checkpoint: validationStatus.checkpoint,
+                        reason: validationStatus.reason
+                    });
+                    await this.enqueueInvalidation(validationStatus);
+                }
+            }
+            // Send whatever was enqueued: votes + (propose | invalidation | nothing).
+            const l1Response = await this.publisher.sendRequestsAt(this.targetSlot);
+            const proposedAction = l1Response?.successfulActions.find((a)=>a === 'propose');
+            if (proposedAction) {
+                this.logCheckpointEvent('published', `Checkpoint published for slot ${this.targetSlot}`, {
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    successfulActions: l1Response?.successfulActions,
+                    sentActions: l1Response?.sentActions
+                });
+                this.eventEmitter.emit('checkpoint-published', {
+                    checkpoint: this.checkpointNumber,
+                    slot: this.targetSlot
+                });
+                const coinbase = checkpoint.header.coinbase;
+                await this.metrics.incFilledSlot(this.publisher.getSenderAddress().toString(), coinbase);
+            } else {
+                this.logCheckpointEvent('publish-failed', `Checkpoint publish failed for slot ${this.targetSlot}`, {
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    successfulActions: l1Response?.successfulActions,
+                    failedActions: l1Response?.failedActions,
+                    sentActions: l1Response?.sentActions,
+                    expiredActions: l1Response?.expiredActions,
+                    reason: 'propose_action_not_successful'
+                });
+                this.log.warn(`Checkpoint publish failed for slot ${this.targetSlot}`, {
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    successfulActions: l1Response?.successfulActions,
+                    failedActions: l1Response?.failedActions,
+                    sentActions: l1Response?.sentActions,
+                    expiredActions: l1Response?.expiredActions,
+                    reason: 'propose_action_not_successful'
+                });
+                this.eventEmitter.emit('checkpoint-publish-failed', {
+                    ...l1Response,
+                    slot: this.targetSlot
+                });
+                this.metrics.recordPipelineDiscard();
+            }
+        } catch (err) {
+            if (err instanceof SequencerInterruptedError) {
+                return;
+            }
+            this.logCheckpointEvent('publish-failed', `Checkpoint publish failed for slot ${this.targetSlot}`, {
+                slot: this.targetSlot,
+                checkpointNumber: this.checkpointNumber,
+                reason: err instanceof Error ? err.message : String(err)
             });
-            await sleepUntil(new Date(Number(submissionSlotTimestamp) * 1000), this.dateProvider.nowAsDate());
-            // After waking, verify the parent checkpoint wasn't pruned during the sleep.
-            // We check L1's pending tip directly instead of canProposeAt, which also validates the proposer
-            // identity and would fail because the timestamp resolves to a different slot's proposer.
-            const l1Tips = await this.publisher.rollupContract.getTips();
-            if (l1Tips.pending < this.checkpointNumber - 1) {
-                this.log.warn(`Parent checkpoint was pruned during pipelining sleep (L1 pending=${l1Tips.pending}, expected>=${this.checkpointNumber - 1}), skipping L1 submission for checkpoint ${this.checkpointNumber}`);
-                return undefined;
+            this.log.error(`Background attestation/L1 pipeline failed for slot ${this.targetSlot}`, err, {
+                slot: this.targetSlot,
+                checkpointNumber: this.checkpointNumber,
+                reason: err instanceof Error ? err.message : String(err)
+            });
+            this.eventEmitter.emit('checkpoint-publish-failed', {
+                slot: this.targetSlot
+            });
+            this.metrics.recordPipelineDiscard();
+        }
+    }
+    /** Enqueues the checkpoint for L1 submission. Called after pipeline sleep in execute(). */ async enqueueCheckpointForSubmission(result) {
+        const { checkpoint, attestations, attestationsSignature } = result;
+        // Build-frame deadlines are measured against `slotNow`; observers still see `targetSlot`.
+        this.setStateFn(SequencerState.PUBLISHING_CHECKPOINT, this.targetSlot, this.slotNow);
+        const aztecSlotDuration = this.l1Constants.slotDuration;
+        const submissionSlotStart = Number(getTimestampForSlot(this.targetSlot, this.l1Constants));
+        const txTimeoutAt = new Date((submissionSlotStart + aztecSlotDuration) * 1000);
+        // If we have been configured to potentially skip publishing checkpoint then roll the dice here
+        if (this.config.skipPublishingCheckpointsPercent !== undefined && this.config.skipPublishingCheckpointsPercent > 0) {
+            const roll = Math.max(0, randomInt(100));
+            if (roll < this.config.skipPublishingCheckpointsPercent) {
+                this.log.warn(`Skipping publishing proposal for checkpoint ${checkpoint.number}. Configured percentage: ${this.config.skipPublishingCheckpointsPercent}, generated value: ${roll}`);
+                return;
             }
         }
-        // Then send everything to L1
-        const l1Response = await this.publisher.sendRequests();
-        const proposedAction = l1Response?.successfulActions.find((a)=>a === 'propose');
-        if (proposedAction) {
-            this.eventEmitter.emit('checkpoint-published', {
-                checkpoint: this.checkpointNumber,
-                slot: this.slot
+        await this.publisher.enqueueProposeCheckpoint(checkpoint, attestations, attestationsSignature, {
+            txTimeoutAt
+        });
+    }
+    /**
+   * Wait until the archiver syncs past the given L2 slot number.
+   * The deadline is the end of `this.targetSlot`, beyond which any pipelined work would miss its
+   * L1 submission window and is no longer useful.
+   */ async waitForSyncedL2SlotNumber(waitForSlot) {
+        const targetSlotStart = Number(getTimestampForSlot(this.targetSlot, this.l1Constants));
+        const targetSlotEndMs = (targetSlotStart + this.l1Constants.slotDuration) * 1000;
+        const syncDelayTolerance = this.l1Constants.ethereumSlotDuration * 2 * 1000;
+        const timeoutSeconds = Math.max(0.1, (targetSlotEndMs + syncDelayTolerance - this.dateProvider.now()) / 1000);
+        try {
+            const timer = new Timer();
+            while(true){
+                const syncedSlot = await this.l2BlockSource.getSyncedL2SlotNumber();
+                if (syncedSlot !== undefined && syncedSlot >= waitForSlot) {
+                    return true;
+                }
+                if (timeoutSeconds && timer.s() > timeoutSeconds) {
+                    throw new TimeoutError(`Timeout awaiting archiver sync past slot ${waitForSlot}`);
+                }
+                await this.awaitInterruptibleSleep(ARCHIVER_SYNC_POLLING_MS);
+            }
+        } catch (err) {
+            if (err instanceof SequencerInterruptedError) {
+                throw err;
+            }
+            this.log.warn(`Archiver did not sync L1 past slot ${waitForSlot} before slot ${this.targetSlot} expired, discarding pipelined work`, {
+                checkpointNumber: this.checkpointNumber
             });
-            const coinbase = checkpoint?.header.coinbase;
-            await this.metrics.incFilledSlot(this.publisher.getSenderAddress().toString(), coinbase);
-            return checkpoint;
-        } else if (checkpoint) {
-            this.eventEmitter.emit('checkpoint-publish-failed', {
-                ...l1Response,
-                slot: this.slot
+            this.emitPipelinedCheckpointDiscarded('archiver-sync-timeout');
+            return false;
+        }
+    }
+    /**
+   * Waits for the parent checkpoint to land on L1 before submitting a pipelined checkpoint.
+   * Polls until the archiver has synced L1 past the parent's slot, then verifies:
+   * - If we built on a proposed parent: it must have landed on L1 with matching hash and valid attestations.
+   * - If we built without a proposed parent: no new checkpoint must have appeared for that slot.
+   * If the parent has invalid attestations, enqueues an invalidation. Returns whether to proceed with the proposal.
+   */ async waitForValidParentCheckpointOnL1() {
+        if (this.config.skipWaitForValidParentCheckpointOnL1) {
+            this.log.warn(`Skipping waitForValidParentCheckpointOnL1 due to test configuration`, {
+                checkpointNumber: this.checkpointNumber
+            });
+            return true;
+        }
+        const parentCheckpointNumber = CheckpointNumber(this.checkpointNumber - 1);
+        // Wait until archiver has synced L1 past the parent's slot (slotNow)
+        if (!await this.waitForSyncedL2SlotNumber(this.slotNow)) {
+            return false;
+        }
+        const tips = await this.l2BlockSource.getL2Tips();
+        const checkpointedNumber = tips.checkpointed.checkpoint.number;
+        // We built on top of a proposed checkpoint. Verify it landed on L1 as expected.
+        if (this.proposedCheckpointData) {
+            // After syncing from L1 we see the chain tip has invalid attestations. This means the parent checkpoint was posted
+            // with invalid attestations, or it built on top of something with invalid attestations and didnt invalidate them.
+            // Either way, we thought our parent would be valid, so we have to throw away our work. But at least we'll try and
+            // invalidate on L1 so we clean up the chain for the next proposer. And we'll slash them, but that's handled elsewhere.
+            const validationStatus = await this.l2BlockSource.getPendingChainValidationStatus();
+            if (!validationStatus.valid) {
+                this.log.warn(`Parent checkpoint ${parentCheckpointNumber} has invalid attestations, discarding pipelined work`, {
+                    checkpointNumber: this.checkpointNumber,
+                    reason: validationStatus.reason
+                });
+                this.emitPipelinedCheckpointDiscarded('parent-invalid-attestations');
+                await this.enqueueInvalidation(validationStatus);
+                return false;
+            }
+            // The pending chain is valid. But did the parent checkpoint land on L1 at all?
+            if (checkpointedNumber < parentCheckpointNumber) {
+                this.log.warn(`Parent checkpoint ${parentCheckpointNumber} did not land on L1, discarding pipelined work`, {
+                    checkpointNumber: this.checkpointNumber,
+                    checkpointedNumber
+                });
+                this.emitPipelinedCheckpointDiscarded('parent-not-on-l1');
+                return false;
+            }
+            // It landed. But is it the one we were expecting?
+            const expectedHash = this.proposedCheckpointData.header.hash().toString();
+            if (tips.checkpointed.checkpoint.hash !== expectedHash) {
+                this.log.warn(`Parent checkpoint ${parentCheckpointNumber} hash mismatch on L1, discarding pipelined work`, {
+                    checkpointNumber: this.checkpointNumber,
+                    expectedHash,
+                    actualHash: tips.checkpointed.checkpoint.hash
+                });
+                this.emitPipelinedCheckpointDiscarded('parent-hash-mismatch');
+                return false;
+            }
+            return true;
+        } else {
+            // We didn't see a proposed checkpoint at build time, so we built on checkpointed parent from two slots ago.
+            // But if a new checkpoint for the previous slot appeared on L1 in the meantime, our checkpoint assumed the wrong parent,
+            // so we have to discard our work. This can happen if we're somehow cut off from p2p and fail to see the checkpoint
+            // proposal for the previous slot.
+            if (checkpointedNumber > parentCheckpointNumber) {
+                this.log.warn(`Unexpected checkpoint ${checkpointedNumber} landed on L1 after we built on top of parent ${parentCheckpointNumber}, discarding pipelined work`, {
+                    checkpointNumber: this.checkpointNumber,
+                    checkpointedNumber
+                });
+                this.emitPipelinedCheckpointDiscarded('unexpected-parent-appeared');
+                return false;
+            }
+            return true;
+        }
+    }
+    /** Emits the pipelined-checkpoint-discarded event and records the metric. */ emitPipelinedCheckpointDiscarded(reason) {
+        this.metrics.recordPipelineParentCheckpointMismatch(reason);
+        this.eventEmitter.emit('pipelined-checkpoint-discarded', {
+            slot: this.targetSlot,
+            checkpointNumber: this.checkpointNumber,
+            reason
+        });
+    }
+    /** Simulates and enqueues an invalidation request for the invalid parent checkpoint. */ async enqueueInvalidation(validationStatus) {
+        if (this.config.skipInvalidateBlockAsProposer) {
+            this.log.warn(`Skipping checkpoint invalidation as proposer due to test configuration`);
+            return;
+        }
+        const invalidateRequest = await this.publisher.simulateInvalidateCheckpoint(validationStatus);
+        if (invalidateRequest) {
+            const submissionSlotStart = Number(getTimestampForSlot(this.targetSlot, this.l1Constants));
+            const txTimeoutAt = new Date((submissionSlotStart + this.l1Constants.slotDuration) * 1000);
+            this.publisher.enqueueInvalidateCheckpoint(invalidateRequest, {
+                txTimeoutAt
+            });
+        } else {
+            this.log.info(`Invalidation simulation returned undefined, checkpoint may have been removed already`, {
+                checkpointNumber: this.checkpointNumber
             });
-            return undefined;
         }
     }
     async proposeCheckpoint() {
@@ -651,16 +925,28 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                 hasError: false
             };
             try {
+                const now = this.dateProvider.now();
+                if (this.proposedCheckpointData) {
+                    // Measure against the wall-clock slot whose build window we are currently using.
+                    // In pipelining mode `targetSlot` is intentionally one slot ahead, which makes the
+                    // target-slot boundary a full slot away from the actual build start time.
+                    const slotBoundaryMs = Number(getTimestampForSlot(this.slotNow, this.l1Constants)) * 1000;
+                    this.checkpointMetrics.recordPipelinedCheckpointBuildStartOffsetFromSlotBoundary(now - slotBoundaryMs);
+                }
+                this.checkpointMetrics.startCheckpointTiming(now);
                 // Get operator configured coinbase and fee recipient for this attestor
                 const coinbase = this.validatorClient.getCoinbaseForAttestor(this.attestorAddress);
                 const feeRecipient = this.validatorClient.getFeeRecipientForAttestor(this.attestorAddress);
                 // Start the checkpoint
-                this.setStateFn(SequencerState.INITIALIZING_CHECKPOINT, this.targetSlot);
-                this.log.info(`Starting checkpoint proposal`, {
-                    buildSlot: this.slot,
+                this.setStateFn(SequencerState.INITIALIZING_CHECKPOINT, this.targetSlot, this.slotNow);
+                this.logCheckpointEvent('slot-started', `Starting checkpoint proposal for slot ${this.targetSlot}`, {
+                    buildSlot: this.slotNow,
                     submissionSlot: this.targetSlot,
-                    pipelining: this.epochCache.isProposerPipeliningEnabled(),
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
                     proposer: this.proposer?.toString(),
+                    attestorAddress: this.attestorAddress.toString(),
+                    publisherAddress: this.publisher.getSenderAddress().toString(),
                     coinbase: coinbase.toString()
                 });
                 this.metrics.incOpenSlot(this.targetSlot, this.proposer?.toString() ?? 'unknown');
@@ -668,15 +954,41 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                 if (this.invalidateCheckpoint && !this.config.skipInvalidateBlockAsProposer) {
                     this.publisher.enqueueInvalidateCheckpoint(this.invalidateCheckpoint);
                 }
-                // Create checkpoint builder for the slot
-                const checkpointGlobalVariables = await this.globalsBuilder.buildCheckpointGlobalVariables(coinbase, feeRecipient, this.targetSlot);
+                // Build the simulation plan for this slot. When pipelining, this overrides L1's view of
+                // pending/archive/fee-header to "as if the proposed parent had landed", so both the
+                // mana-min-fee simulation (in the globals builder) and the pre-broadcast
+                // validateBlockHeader see the chain tip the eventual L1 send will see.
+                this.checkpointSimulationOverridesPlan = await buildCheckpointSimulationOverridesPlan({
+                    checkpointNumber: this.checkpointNumber,
+                    proposedCheckpointData: this.proposedCheckpointData,
+                    invalidateToPendingCheckpointNumber: this.invalidateCheckpoint?.forcePendingCheckpointNumber,
+                    checkpointedCheckpointNumber: this.checkpointedCheckpointNumber,
+                    rollup: this.publisher.rollupContract,
+                    signatureContext: this.signatureContext,
+                    log: this.log
+                });
+                const checkpointGlobalVariables = await this.globalsBuilder.buildCheckpointGlobalVariables(coinbase, feeRecipient, this.targetSlot, this.checkpointSimulationOverridesPlan);
                 // Collect L1 to L2 messages for the checkpoint and compute their hash
                 const l1ToL2Messages = await this.l1ToL2MessageSource.getL1ToL2Messages(this.checkpointNumber);
                 const inHash = computeInHashFromL1ToL2Messages(l1ToL2Messages);
-                // Collect the out hashes of all the checkpoints before this one in the same epoch
-                const previousCheckpointOutHashes = (await this.l2BlockSource.getCheckpointsDataForEpoch(this.targetEpoch)).filter((c)=>c.checkpointNumber < this.checkpointNumber).map((c)=>c.checkpointOutHash);
-                // Get the fee asset price modifier from the oracle
-                const feeAssetPriceModifier = await this.publisher.getFeeAssetPriceModifier();
+                // Collect the out hashes of all the checkpoints before this one in the same epoch.
+                // Under pipelining the parent checkpoint may not be on L1 yet at build time, so the helper
+                // splices in the parent's checkpointOutHash from the locally-known proposed checkpoint so
+                // the resulting `epochOutHash` matches what validators (and L1) compute once the parent
+                // lands on L1.
+                const previousCheckpointOutHashes = await getPreviousCheckpointOutHashes({
+                    blockSource: this.l2BlockSource,
+                    epoch: this.targetEpoch,
+                    checkpointNumber: this.checkpointNumber,
+                    l1Constants: this.epochCache.getL1Constants(),
+                    pipeliningEnabled: true,
+                    proposedCheckpointData: this.proposedCheckpointData,
+                    log: this.log
+                });
+                // Anchor the modifier to the predicted parent fee header: L1 will apply it against
+                // that, not against the latest published checkpoint (which lags by one under pipelining).
+                const predictedParentEthPerFeeAssetE12 = this.checkpointSimulationOverridesPlan?.pendingCheckpointState?.feeHeader?.ethPerFeeAsset;
+                const feeAssetPriceModifier = await this.publisher.getFeeAssetPriceModifier(predictedParentEthPerFeeAssetE12);
                 const fork = _ts_add_disposable_resource(env, await this.worldState.fork(this.syncedToBlockNumber, {
                     closeDelayMs: 12_000
                 }), true);
@@ -689,7 +1001,7 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                 };
                 const checkpointProposalOptions = {
                     publishFullTxs: !!this.config.publishTxsWithProposals,
-                    broadcastInvalidCheckpointProposal: this.config.broadcastInvalidBlockProposal
+                    broadcastInvalidCheckpointProposal: this.config.broadcastInvalidCheckpointProposalOnly || this.config.broadcastInvalidBlockProposal
                 };
                 let blocksInCheckpoint = [];
                 let blockPendingBroadcast = undefined;
@@ -709,8 +1021,15 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                     throw err;
                 }
                 if (blocksInCheckpoint.length === 0) {
+                    this.logCheckpointEvent('build-failed', `Checkpoint build failed for slot ${this.targetSlot}`, {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        reason: 'no_blocks_built'
+                    });
                     this.log.warn(`No blocks were built for slot ${this.targetSlot}`, {
-                        slot: this.targetSlot
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        reason: 'no_blocks_built'
                     });
                     this.eventEmitter.emit('checkpoint-empty', {
                         slot: this.targetSlot
@@ -719,16 +1038,25 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                 }
                 const minBlocksForCheckpoint = this.config.minBlocksForCheckpoint;
                 if (minBlocksForCheckpoint !== undefined && blocksInCheckpoint.length < minBlocksForCheckpoint) {
+                    this.logCheckpointEvent('build-failed', `Checkpoint build failed for slot ${this.targetSlot}`, {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        blocksBuilt: blocksInCheckpoint.length,
+                        minBlocksForCheckpoint,
+                        reason: 'min_blocks_not_met'
+                    });
                     this.log.warn(`Checkpoint has fewer blocks than minimum (${blocksInCheckpoint.length} < ${minBlocksForCheckpoint}), skipping proposal`, {
                         slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
                         blocksBuilt: blocksInCheckpoint.length,
-                        minBlocksForCheckpoint
+                        minBlocksForCheckpoint,
+                        reason: 'min_blocks_not_met'
                     });
                     return undefined;
                 }
                 // Assemble and broadcast the checkpoint proposal, including the last block that was not
                 // broadcasted yet, and wait to collect the committee attestations.
-                this.setStateFn(SequencerState.ASSEMBLING_CHECKPOINT, this.targetSlot);
+                this.setStateFn(SequencerState.ASSEMBLING_CHECKPOINT, this.targetSlot, this.slotNow);
                 const checkpoint = await checkpointBuilder.completeCheckpoint();
                 // Final validation: per-block limits are only checked if the operator set them explicitly.
                 // Otherwise, checkpoint-level budgets were already enforced by the redistribution logic.
@@ -741,14 +1069,36 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                         maxTxsPerCheckpoint: this.config.maxTxsPerCheckpoint
                     });
                 } catch (err) {
-                    this.log.error(`Built an invalid checkpoint at slot ${this.slot} (skipping proposal)`, err, {
+                    this.logCheckpointEvent('build-failed', `Checkpoint build failed for slot ${this.targetSlot}`, {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        blocksBuilt: blocksInCheckpoint.length,
+                        reason: 'invalid_checkpoint',
+                        checkpoint: checkpoint.header.toInspect()
+                    });
+                    this.log.error(`Built an invalid checkpoint at slot ${this.slotNow} (skipping proposal)`, err, {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        blocksBuilt: blocksInCheckpoint.length,
+                        reason: 'invalid_checkpoint',
                         checkpoint: checkpoint.header.toInspect()
                     });
                     return undefined;
                 }
                 // Record checkpoint-level build metrics
-                this.metrics.recordCheckpointBuild(checkpointBuildTimer.ms(), blocksInCheckpoint.length, checkpoint.getStats().txCount, Number(checkpoint.header.totalManaUsed.toBigInt()));
-                // Do not collect attestations nor publish to L1 in fisherman mode
+                this.checkpointMetrics.recordCheckpointBuild(checkpointBuildTimer.ms(), blocksInCheckpoint.length, checkpoint.getStats().txCount, Number(checkpoint.header.totalManaUsed.toBigInt()));
+                this.logCheckpointEvent('built', `Checkpoint built for slot ${this.targetSlot}`, {
+                    slot: this.targetSlot,
+                    buildSlot: this.slotNow,
+                    checkpointNumber: this.checkpointNumber,
+                    proposer: this.proposer?.toString(),
+                    attestorAddress: this.attestorAddress.toString(),
+                    publisherAddress: this.publisher.getSenderAddress().toString(),
+                    blocksBuilt: blocksInCheckpoint.length,
+                    txCount: checkpoint.getStats().txCount,
+                    totalMana: Number(checkpoint.header.totalManaUsed.toBigInt())
+                });
+                // In fisherman mode, return the checkpoint without broadcasting or collecting attestations
                 if (this.config.fishermanMode) {
                     this.log.info(`Built checkpoint for slot ${this.targetSlot} with ${blocksInCheckpoint.length} blocks. ` + `Skipping proposal in fisherman mode.`, {
                         slot: this.targetSlot,
@@ -756,53 +1106,58 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                         blocksBuilt: blocksInCheckpoint.length
                     });
                     this.metrics.recordCheckpointSuccess();
-                    return checkpoint;
+                    // Return a broadcast result with a dummy proposal — fisherman mode skips attestation collection
+                    return {
+                        checkpoint,
+                        proposal: undefined,
+                        blockProposedAt: this.dateProvider.now()
+                    };
                 }
-                // Include the block pending broadcast in the checkpoint proposal if any
-                const lastBlock = blockPendingBroadcast && {
-                    blockHeader: blockPendingBroadcast.block.header,
-                    indexWithinCheckpoint: blockPendingBroadcast.block.indexWithinCheckpoint,
-                    txs: blockPendingBroadcast.txs
-                };
-                // Create the checkpoint proposal and broadcast it
-                const proposal = await this.validatorClient.createCheckpointProposal(checkpoint.header, checkpoint.archive.root, feeAssetPriceModifier, lastBlock, this.proposer, checkpointProposalOptions);
-                const blockProposedAt = this.dateProvider.now();
-                await this.p2pClient.broadcastCheckpointProposal(proposal);
-                this.setStateFn(SequencerState.COLLECTING_ATTESTATIONS, this.targetSlot);
-                const attestations = await this.waitForAttestations(proposal);
-                const blockAttestedAt = this.dateProvider.now();
-                this.metrics.recordCheckpointAttestationDelay(blockAttestedAt - blockProposedAt);
-                // Proposer must sign over the attestations before pushing them to L1
-                const signer = this.proposer ?? this.publisher.getSenderAddress();
-                let attestationsSignature;
+                // Validate the header against L1 state before broadcasting.
+                // If this fails the slot is aborted before any gossip work; state drift between here
+                // and the eventual L1 send is caught by the bundle simulate at send time.
                 try {
-                    attestationsSignature = await this.validatorClient.signAttestationsAndSigners(attestations, signer, this.targetSlot, this.checkpointNumber);
+                    await this.publisher.validateBlockHeader(checkpoint.header, this.checkpointSimulationOverridesPlan);
                 } catch (err) {
-                    // We shouldn't really get here since we yield to another HA node
-                    // as soon as we see these errors when creating block or checkpoint proposals.
-                    if (this.handleHASigningError(err, 'Attestations signature')) {
-                        return undefined;
-                    }
-                    throw err;
+                    this.log.error(`Pre-broadcast header validation failed for slot ${this.targetSlot}; aborting`, err, {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber
+                    });
+                    this.metrics.recordCheckpointProposalFailed('header_validation_failed');
+                    this.eventEmitter.emit('header-validation-failed', {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        reason: err instanceof Error ? err.message : String(err)
+                    });
+                    return undefined;
                 }
-                // Enqueue publishing the checkpoint to L1
-                this.setStateFn(SequencerState.PUBLISHING_CHECKPOINT, this.targetSlot);
-                const aztecSlotDuration = this.l1Constants.slotDuration;
-                const submissionSlotStart = Number(getTimestampForSlot(this.targetSlot, this.l1Constants));
-                const txTimeoutAt = new Date((submissionSlotStart + aztecSlotDuration) * 1000);
-                // If we have been configured to potentially skip publishing checkpoint then roll the dice here
-                if (this.config.skipPublishingCheckpointsPercent !== undefined && this.config.skipPublishingCheckpointsPercent > 0) {
-                    const result = Math.max(0, randomInt(100));
-                    if (result < this.config.skipPublishingCheckpointsPercent) {
-                        this.log.warn(`Skipping publishing proposal for checkpoint ${checkpoint.number}. Configured percentage: ${this.config.skipPublishingCheckpointsPercent}, generated value: ${result}`);
-                        return checkpoint;
+                // Create the checkpoint proposal and broadcast it
+                const proposal = await this.validatorClient.createCheckpointProposal(checkpoint.header, checkpoint.archive.root, this.checkpointNumber, feeAssetPriceModifier, blockPendingBroadcast, this.proposer, checkpointProposalOptions);
+                // Advance our own optimistic proposed-checkpoint tip locally before gossiping. Gossipsub
+                // doesn't echo our own messages back, so this is how the proposer makes its own proposed
+                // checkpoint visible for pipelining the next slot. Built from local checkpoint data — never
+                // from the broadcast proposal archive, which may be deliberately corrupted under test flags.
+                // Fail closed: if this throws, the outer catch aborts the slot before gossiping.
+                await this.syncProposedCheckpointToArchiver(checkpoint, blocksInCheckpoint.length, feeAssetPriceModifier);
+                const blockProposedAt = this.dateProvider.now();
+                if (this.config.skipBroadcastCheckpointProposal) {
+                    // Test-only: suppress the CheckpointProposal so peers never see a proposed checkpoint for
+                    // this slot, but still broadcast the held last block standalone so peers' archivers ingest
+                    // it as a proposed-but-uncheckpointed tip — the exact orphan-block state that
+                    // pruneOrphanProposedBlocks / checkSync must handle.
+                    if (blockPendingBroadcast && !this.config.skipBroadcastProposals) {
+                        await this.p2pClient.broadcastProposal(blockPendingBroadcast);
                     }
+                } else if (!this.config.skipBroadcastProposals) {
+                    await this.p2pClient.broadcastCheckpointProposal(proposal);
+                    this.checkpointMetrics.noteCheckpointBroadcast(this.dateProvider.now());
                 }
-                await this.publisher.enqueueProposeCheckpoint(checkpoint, attestations, attestationsSignature, {
-                    txTimeoutAt,
-                    forcePendingCheckpointNumber: this.invalidateCheckpoint?.forcePendingCheckpointNumber
-                });
-                return checkpoint;
+                // Return immediately after broadcast — attestation collection happens in the background
+                return {
+                    checkpoint,
+                    proposal,
+                    blockProposedAt
+                };
             } catch (e) {
                 env.error = e;
                 env.hasError = true;
@@ -815,7 +1170,7 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                 // swallow this error. It's already been logged by a function deeper in the stack
                 return undefined;
             }
-            this.log.error(`Error building checkpoint at slot ${this.slot}`, err);
+            this.log.error(`Error building checkpoint at slot ${this.targetSlot}`, err);
             return undefined;
         }
     }
@@ -831,6 +1186,14 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
             const blocksBuilt = blocksInCheckpoint.length;
             const indexWithinCheckpoint = IndexWithinCheckpoint(blocksBuilt);
             const blockNumber = BlockNumber(initialBlockNumber + blocksBuilt);
+            if (blocksBuilt >= this.config.maxBlocksPerCheckpoint) {
+                this.log.debug(`Reached max blocks per checkpoint`, {
+                    slot: this.targetSlot,
+                    blocksBuilt,
+                    maxBlocksPerCheckpoint: this.config.maxBlocksPerCheckpoint
+                });
+                break;
+            }
             const secondsIntoSlot = this.getSecondsIntoSlot();
             const timingInfo = this.timetable.canStartNextBlock(secondsIntoSlot);
             if (!timingInfo.canStart) {
@@ -852,17 +1215,19 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                 indexWithinCheckpoint,
                 txHashesAlreadyIncluded
             });
-            // TODO(palla/mbps): Review these conditions. We may want to keep trying in some scenarios.
-            if (!buildResult && timingInfo.isLastBlock) {
-                break;
-            } else if (!buildResult && timingInfo.deadline !== undefined) {
-                // But if there is still time for more blocks, wait until the next subslot and try again
+            // If we failed to build the block due to insufficient txs, we try again if there is still time left in the slot
+            if ('failure' in buildResult) {
+                // If this was the last subslot, or we're running with a single block per slot, we're done
+                if (timingInfo.isLastBlock || timingInfo.deadline === undefined) {
+                    break;
+                }
+                // Otherwise, if there is still time for more blocks, we wait until the next subslot and try again
                 await this.waitUntilNextSubslot(timingInfo.deadline);
                 continue;
-            } else if (!buildResult) {
-                break;
-            } else if ('error' in buildResult) {
-                // If there was an error building the block, just exit the loop and give up the rest of the slot
+            }
+            // If there was an error building the block, we just exit the loop and give up the rest of the slot.
+            // We don't want to risk building more blocks if something went wrong.
+            if ('error' in buildResult) {
                 if (!(buildResult.error instanceof SequencerInterruptedError)) {
                     this.log.warn(`Halting block building for slot ${this.targetSlot}`, {
                         slot: this.targetSlot,
@@ -873,34 +1238,36 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                 break;
             }
             const { block, usedTxs } = buildResult;
+            this.checkpointMetrics.noteCheckpointBlockBuilt(this.dateProvider.now(), {
+                isFirstBlock: blocksBuilt === 0,
+                isLastBlock: timingInfo.isLastBlock
+            });
             blocksInCheckpoint.push(block);
             usedTxs.forEach((tx)=>txHashesAlreadyIncluded.add(tx.txHash.toString()));
-            // If this is the last block, sync it to the archiver and exit the loop
-            // so we can build the checkpoint and start collecting attestations.
+            // Sign the block proposal. This will throw if HA signing fails.
+            const proposal = await this.createBlockProposal(block, inHash, usedTxs, {
+                ...blockProposalOptions,
+                broadcastInvalidBlockProposal: blockProposalOptions.broadcastInvalidBlockProposal || block.indexWithinCheckpoint === this.config.invalidBlockProposalIndexWithinCheckpoint
+            });
+            // Sync the proposed block to the archiver to make it available, only after we've managed to sign the proposal,
+            // so we avoid polluting our archive with a block that would fail.
+            // We wait for the sync to succeed, as this helps catch consistency errors, even if it means we lose some time for block-building.
+            // If this throws, we abort the entire checkpoint.
+            await this.syncProposedBlockToArchiver(block);
+            // If this is the last block, do not broadcast it, since it will be included in the checkpoint proposal.
             if (timingInfo.isLastBlock) {
-                await this.syncProposedBlockToArchiver(block);
                 this.log.verbose(`Completed final block ${blockNumber} for slot ${this.targetSlot}`, {
                     slot: this.targetSlot,
                     blockNumber,
                     blocksBuilt
                 });
-                blockPendingBroadcast = {
-                    block,
-                    txs: usedTxs
-                };
+                blockPendingBroadcast = proposal;
                 break;
             }
-            // Broadcast the block proposal (unless we're in fisherman mode) unless the block is the last one,
-            // in which case we'll broadcast it along with the checkpoint at the end of the loop.
-            // Note that we only send the block to the archiver if we manage to create the proposal, so if there's
-            // a HA error we don't pollute our archiver with a block that won't make it to the chain.
-            const proposal = await this.createBlockProposal(block, inHash, usedTxs, blockProposalOptions);
-            // Sync the proposed block to the archiver to make it available, only after we've managed to sign the proposal.
-            // We wait for the sync to succeed, as this helps catch consistency errors, even if it means we lose some time for block-building.
-            // If this throws, we abort the entire checkpoint.
-            await this.syncProposedBlockToArchiver(block);
             // Once we have a signed proposal and the archiver agreed with our proposed block, then we broadcast it.
-            proposal && await this.p2pClient.broadcastProposal(proposal);
+            if (proposal && !this.config.skipBroadcastProposals) {
+                await this.p2pClient.broadcastProposal(proposal);
+            }
             // Wait until the next block's start time
             await this.waitUntilNextSubslot(timingInfo.deadline);
         }
@@ -918,10 +1285,10 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
             this.log.info(`Skipping block proposal for block ${block.number} in fisherman mode`);
             return Promise.resolve(undefined);
         }
-        return this.validatorClient.createBlockProposal(block.header, block.indexWithinCheckpoint, inHash, block.archive.root, usedTxs, this.proposer, blockProposalOptions);
+        return this.validatorClient.createBlockProposal(block.header, this.checkpointNumber, block.indexWithinCheckpoint, inHash, block.archive.root, usedTxs, this.proposer, blockProposalOptions);
     }
     /** Sleeps until it is time to produce the next block in the slot */ async waitUntilNextSubslot(nextSubslotStart) {
-        this.setStateFn(SequencerState.WAITING_UNTIL_NEXT_BLOCK, this.targetSlot);
+        this.setStateFn(SequencerState.WAITING_UNTIL_NEXT_BLOCK, this.targetSlot, this.slotNow);
         this.log.verbose(`Waiting until time for the next block at ${nextSubslotStart}s into slot`, {
             slot: this.targetSlot
         });
@@ -937,10 +1304,23 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
             // Wait until we have enough txs to build the block
             const { availableTxs, canStartBuilding, minTxs } = await this.waitForMinTxs(opts);
             if (!canStartBuilding) {
+                this.logCheckpointEvent('block-build-failed', `Block build failed for slot ${this.targetSlot}`, {
+                    reason: 'insufficient_txs',
+                    blockNumber,
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    indexWithinCheckpoint,
+                    availableTxs,
+                    minTxs
+                });
                 this.log.warn(`Not enough txs to build block ${blockNumber} at index ${indexWithinCheckpoint} in slot ${this.targetSlot} (got ${availableTxs} txs but needs ${minTxs})`, {
+                    reason: 'insufficient_txs',
                     blockNumber,
                     slot: this.targetSlot,
-                    indexWithinCheckpoint
+                    checkpointNumber: this.checkpointNumber,
+                    indexWithinCheckpoint,
+                    availableTxs,
+                    minTxs
                 });
                 this.eventEmitter.emit('block-tx-count-check-failed', {
                     minTxs,
@@ -948,7 +1328,9 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                     slot: this.targetSlot
                 });
                 this.metrics.recordBlockProposalFailed('insufficient_txs');
-                return undefined;
+                return {
+                    failure: 'insufficient-txs'
+                };
             }
             // Create iterator to pending txs. We filter out txs already included in previous blocks in the checkpoint
             // just in case p2p failed to sync the provisional block and didn't get to remove those txs from the mempool yet.
@@ -958,7 +1340,7 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                 blockNumber,
                 indexWithinCheckpoint
             });
-            this.setStateFn(SequencerState.CREATING_BLOCK, this.targetSlot);
+            this.setStateFn(SequencerState.CREATING_BLOCK, this.targetSlot, this.slotNow);
             // Per-block limits are operator overrides (from SEQ_MAX_L2_BLOCK_GAS etc.) further capped
             // by remaining checkpoint-level budgets inside CheckpointBuilder before each block is built.
             // minValidTxs is passed into the builder so it can reject the block *before* updating state.
@@ -979,8 +1361,19 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
             // If any txs failed during execution, drop them from the mempool so we don't pick them up again
             await this.dropFailedTxsFromP2P(buildResult.failedTxs);
             if (buildResult.status === 'insufficient-valid-txs') {
+                this.logCheckpointEvent('block-build-failed', `Block build failed for slot ${this.targetSlot}`, {
+                    reason: 'insufficient_valid_txs',
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    blockNumber,
+                    numTxs: buildResult.processedCount,
+                    indexWithinCheckpoint,
+                    minValidTxs
+                });
                 this.log.warn(`Block ${blockNumber} at index ${indexWithinCheckpoint} on slot ${this.targetSlot} has too few valid txs to be proposed`, {
+                    reason: 'insufficient_valid_txs',
                     slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
                     blockNumber,
                     numTxs: buildResult.processedCount,
                     indexWithinCheckpoint,
@@ -991,7 +1384,9 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                     slot: this.targetSlot
                 });
                 this.metrics.recordBlockProposalFailed('insufficient_valid_txs');
-                return undefined;
+                return {
+                    failure: 'insufficient-valid-txs'
+                };
             }
             // Block creation succeeded, emit stats and metrics
             const { block, publicProcessorDuration, usedTxs, blockBuildDuration, numTxs } = buildResult;
@@ -1010,12 +1405,17 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                 manaPerSec,
                 ...blockStats
             });
+            // `slot` is the target/submission slot (may be one ahead when pipelining),
+            // `buildSlot` is the wall-clock slot during which the block was actually built.
             this.eventEmitter.emit('block-proposed', {
                 blockNumber: block.number,
+                blockHash,
+                checkpointNumber: this.checkpointNumber,
+                indexWithinCheckpoint: block.indexWithinCheckpoint,
                 slot: this.targetSlot,
                 buildSlot: this.slotNow
             });
-            this.metrics.recordBuiltBlock(blockBuildDuration, block.header.totalManaUsed.toNumberUnsafe());
+            this.metrics.recordBuiltBlock(blockBuildDuration, block.header.totalManaUsed.toNumberUnsafe(), this.targetSlot);
             return {
                 block,
                 usedTxs
@@ -1025,9 +1425,17 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                 reason: err.message,
                 slot: this.targetSlot
             });
+            this.logCheckpointEvent('block-build-failed', `Block build failed for slot ${this.targetSlot}`, {
+                reason: err instanceof Error ? err.message : String(err),
+                slot: this.targetSlot,
+                checkpointNumber: this.checkpointNumber,
+                blockNumber
+            });
             this.log.error(`Error building block`, err, {
-                blockNumber,
-                slot: this.targetSlot
+                reason: err instanceof Error ? err.message : String(err),
+                slot: this.targetSlot,
+                checkpointNumber: this.checkpointNumber,
+                blockNumber
             });
             this.metrics.recordBlockProposalFailed(err.name || 'unknown_error');
             this.metrics.recordFailedBlock();
@@ -1075,7 +1483,7 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                 };
             }
             // Wait a bit before checking again
-            this.setStateFn(SequencerState.WAITING_FOR_TXS, this.targetSlot);
+            this.setStateFn(SequencerState.WAITING_FOR_TXS, this.targetSlot, this.slotNow);
             this.log.verbose(`Waiting for enough txs to build block ${blockNumber} at index ${indexWithinCheckpoint} in slot ${this.targetSlot} (have ${availableTxs} but need ${minTxs})`, {
                 blockNumber,
                 slot: this.targetSlot,
@@ -1090,13 +1498,37 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
             minTxs
         };
     }
+    async getSignedCommitteeAttestations(broadcast) {
+        const { proposal, blockProposedAt } = broadcast;
+        this.setStateFn(SequencerState.COLLECTING_ATTESTATIONS, this.targetSlot, this.slotNow);
+        const attestations = await this.waitForAttestations(proposal);
+        if (!attestations) {
+            return undefined;
+        }
+        this.checkpointMetrics.recordCheckpointAttestationDelay(this.dateProvider.now() - blockProposedAt);
+        // Proposer must sign over the attestations before pushing them to L1
+        const signer = this.proposer ?? this.publisher.getSenderAddress();
+        try {
+            const attestationsSignature = await this.validatorClient.signAttestationsAndSigners(attestations, signer, this.targetSlot, this.checkpointNumber);
+            return {
+                attestations,
+                attestationsSignature
+            };
+        } catch (err) {
+            if (this.handleHASigningError(err, 'Attestations signature')) {
+                return;
+            }
+            this.log.error(`Error signing attestations for checkpoint proposal at slot ${proposal.slotNumber}`, err);
+            return undefined;
+        }
+    }
     /**
    * Waits for enough attestations to be collected via p2p.
    * This is run after all blocks for the checkpoint have been built.
    */ async waitForAttestations(proposal) {
         if (this.config.fishermanMode) {
             this.log.debug('Skipping attestation collection in fisherman mode');
-            return CommitteeAttestationsAndSigners.empty();
+            return CommitteeAttestationsAndSigners.empty(this.getSignatureContext());
         }
         const slotNumber = proposal.slotNumber;
         const { committee, seed, epoch } = await this.epochCache.getCommittee(slotNumber);
@@ -1104,25 +1536,28 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
             throw new Error('No committee when collecting attestations');
         } else if (committee.length === 0) {
             this.log.verbose(`Attesting committee is empty`);
-            return CommitteeAttestationsAndSigners.empty();
+            return CommitteeAttestationsAndSigners.empty(this.getSignatureContext());
         } else {
             this.log.debug(`Attesting committee length is ${committee.length}`, {
                 committee
             });
         }
-        const numberOfRequiredAttestations = Math.floor(committee.length * 2 / 3) + 1;
+        const numberOfRequiredAttestations = computeQuorum(committee.length);
         if (this.config.skipCollectingAttestations) {
             this.log.warn('Skipping attestation collection as per config (attesting with own keys only)');
-            const attestations = await this.validatorClient?.collectOwnAttestations(proposal);
-            return new CommitteeAttestationsAndSigners(orderAttestations(attestations ?? [], committee));
+            const attestations = await this.validatorClient?.collectOwnAttestations(proposal, this.checkpointNumber);
+            this.logCheckpointAttestations('collected', committee, attestations ?? [], numberOfRequiredAttestations, {
+                reason: 'collect_own_only'
+            });
+            return new CommitteeAttestationsAndSigners(orderAttestations(attestations ?? [], committee), this.getSignatureContext());
         }
-        const attestationTimeAllowed = this.config.enforceTimeTable ? this.timetable.getMaxAllowedTime(SequencerState.PUBLISHING_CHECKPOINT) : this.l1Constants.slotDuration;
+        const attestationTimeAllowed = this.config.enforceTimeTable ? this.timetable.getCheckpointAttestationDeadline() : this.l1Constants.slotDuration;
         const attestationDeadline = new Date((this.getSlotStartBuildTimestamp() + attestationTimeAllowed) * 1000);
         this.metrics.recordRequiredAttestations(numberOfRequiredAttestations, attestationTimeAllowed);
         const collectAttestationsTimer = new Timer();
         let collectedAttestationsCount = 0;
         try {
-            const attestations = await this.validatorClient.collectAttestations(proposal, numberOfRequiredAttestations, attestationDeadline);
+            const attestations = await this.validatorClient.collectAttestations(proposal, numberOfRequiredAttestations, attestationDeadline, this.checkpointNumber);
             collectedAttestationsCount = attestations.length;
             // Trim attestations to minimum required to save L1 calldata gas
             const localAddresses = this.validatorClient.getValidatorAddresses();
@@ -1132,20 +1567,55 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
             }
             // Rollup contract requires that the signatures are provided in the order of the committee
             const sorted = orderAttestations(trimmed, committee);
+            this.logCheckpointAttestations('collected', committee, attestations, numberOfRequiredAttestations, {
+                submittedCount: trimmed.length
+            });
             // Manipulate the attestations if we've been configured to do so
             if (this.config.injectFakeAttestation || this.config.injectHighSValueAttestation || this.config.injectUnrecoverableSignatureAttestation || this.config.shuffleAttestationOrdering) {
                 return this.manipulateAttestations(proposal.slotNumber, epoch, seed, committee, sorted);
             }
-            return new CommitteeAttestationsAndSigners(sorted);
+            return new CommitteeAttestationsAndSigners(sorted, this.getSignatureContext());
         } catch (err) {
             if (err && err instanceof AttestationTimeoutError) {
                 collectedAttestationsCount = err.collectedCount;
+                this.logCheckpointAttestations('failed', committee, undefined, numberOfRequiredAttestations, {
+                    collectedCount: collectedAttestationsCount,
+                    reason: 'timeout'
+                });
+                this.log.error(`Timeout while waiting for attestations for checkpoint proposal at slot ${proposal.slotNumber} (collected ${collectedAttestationsCount}/${numberOfRequiredAttestations})`, err);
+            } else {
+                this.logCheckpointAttestations('failed', committee, undefined, numberOfRequiredAttestations, {
+                    collectedCount: collectedAttestationsCount,
+                    reason: err instanceof Error ? err.message : String(err)
+                });
+                this.log.error(`Error collecting attestations for checkpoint proposal at slot ${proposal.slotNumber}`, err);
             }
-            throw err;
+            return undefined;
         } finally{
             this.metrics.recordCollectedAttestations(collectedAttestationsCount, collectAttestationsTimer.ms());
         }
     }
+    logCheckpointAttestations(status, committee, attestations, requiredAttestations, opts = {}) {
+        const signedValidators = attestations?.map((attestation)=>attestation.getSender()?.toString()).filter((address)=>address !== undefined) ?? [];
+        const collectedCount = opts.collectedCount ?? new Set(signedValidators).size;
+        const missingValidatorCount = status === 'failed' ? Math.max(0, requiredAttestations - collectedCount) : undefined;
+        this.logCheckpointEvent(`attestations-${status}`, `Checkpoint attestations ${status} for slot ${this.targetSlot}`, {
+            slot: this.targetSlot,
+            checkpointNumber: this.checkpointNumber,
+            committeeSize: committee.length,
+            requiredAttestations,
+            collectedAttestations: collectedCount,
+            ...opts.submittedCount !== undefined && {
+                submittedAttestations: opts.submittedCount
+            },
+            ...missingValidatorCount !== undefined && {
+                missingValidatorCount
+            },
+            ...opts.reason !== undefined && {
+                reason: opts.reason
+            }
+        });
+    }
     /** Breaks the attestations before publishing based on attack configs */ manipulateAttestations(slotNumber, epoch, seed, committee, attestations) {
         // Compute the proposer index in the committee, since we dont want to tweak it.
         // Otherwise, the L1 rollup contract will reject the block outright.
@@ -1171,7 +1641,7 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                     unfreeze(attestations[targetIndex]).signature = generateRecoverableSignature();
                 }
             }
-            return new CommitteeAttestationsAndSigners(attestations);
+            return new CommitteeAttestationsAndSigners(attestations, this.getSignatureContext());
         }
         if (this.config.shuffleAttestationOrdering) {
             this.log.warn(`Shuffling attestation ordering in checkpoint for slot ${slotNumber} (proposer #${proposerIndex})`);
@@ -1197,10 +1667,10 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
                     shuffled[i]
                 ];
             }
-            const signers = new CommitteeAttestationsAndSigners(attestations).getSigners();
-            return new MaliciousCommitteeAttestationsAndSigners(shuffled, signers);
+            const signers = new CommitteeAttestationsAndSigners(attestations, this.getSignatureContext()).getSigners();
+            return new MaliciousCommitteeAttestationsAndSigners(shuffled, signers, this.getSignatureContext());
         }
-        return new CommitteeAttestationsAndSigners(attestations);
+        return new CommitteeAttestationsAndSigners(attestations, this.getSignatureContext());
     }
     async dropFailedTxsFromP2P(failedTxs) {
         if (failedTxs.length === 0) {
@@ -1215,8 +1685,12 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
    * Adds the proposed block to the archiver so it's available via P2P.
    * Gossip doesn't echo messages back to the sender, so the proposer's archiver/world-state
    * would never receive its own block without this explicit sync.
+   *
+   * In fisherman mode we skip this push: the fisherman builds blocks locally for validation
+   * and fee analysis only, and pushing them to the archiver causes spurious reorg cascades
+   * whenever the real proposer's block arrives from L1.
    */ async syncProposedBlockToArchiver(block) {
-        if (this.config.skipPushProposedBlocksToArchiver !== false) {
+        if (this.config.skipPushProposedBlocksToArchiver || this.config.fishermanMode) {
             this.log.warn(`Skipping push of proposed block ${block.number} to archiver`, {
                 blockNumber: block.number,
                 slot: block.header.globalVariables.slotNumber
@@ -1229,6 +1703,35 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
         });
         await this.blockSink.addBlock(block);
     }
+    /**
+   * Adds the proposed checkpoint to the archiver so the proposer's optimistic proposed-checkpoint
+   * tip advances locally. Gossip doesn't echo our own messages back, so without this the proposer
+   * would never see its own proposed checkpoint and couldn't pipeline the next slot.
+   *
+   * Skipped whenever proposed blocks aren't pushed (`skipPushProposedBlocksToArchiver`, fisherman
+   * mode): the archiver derives the checkpoint archive from its stored blocks, so without them the
+   * push would fail. All blocks were already added (and awaited) during block building, so this
+   * needs no retry — they are guaranteed present by the time we get here.
+   */ async syncProposedCheckpointToArchiver(checkpoint, blockCount, feeAssetPriceModifier) {
+        if (this.config.skipPushProposedBlocksToArchiver || this.config.fishermanMode) {
+            return;
+        }
+        const startBlock = BlockNumber(this.syncedToBlockNumber + 1);
+        this.log.debug(`Syncing proposed checkpoint ${this.checkpointNumber} to archiver`, {
+            checkpointNumber: this.checkpointNumber,
+            slot: this.targetSlot,
+            startBlock,
+            blockCount
+        });
+        await this.blockSink.addProposedCheckpoint({
+            header: checkpoint.header,
+            checkpointNumber: this.checkpointNumber,
+            startBlock,
+            blockCount,
+            totalManaUsed: checkpoint.header.totalManaUsed.toBigInt(),
+            feeAssetPriceModifier
+        });
+    }
     /** Runs fee analysis and logs checkpoint outcome as fisherman */ async handleCheckpointEndAsFisherman(checkpoint) {
         // Perform L1 fee analysis before clearing requests
         // The callback is invoked asynchronously after the next block is mined
@@ -1271,13 +1774,14 @@ _dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('Checkpoint
     /** Waits until a specific time within the current slot */ async waitUntilTimeInSlot(targetSecondsIntoSlot) {
         const slotStartTimestamp = this.getSlotStartBuildTimestamp();
         const targetTimestamp = slotStartTimestamp + targetSecondsIntoSlot;
-        await sleepUntil(new Date(targetTimestamp * 1000), this.dateProvider.nowAsDate());
+        const delayMs = targetTimestamp * 1000 - this.dateProvider.nowAsDate().getTime();
+        await this.awaitInterruptibleSleep(delayMs);
     }
-    /** Waits the polling interval for transactions. Extracted for test overriding. */ async waitForTxsPollingInterval() {
-        await sleep(TXS_POLLING_MS);
+    /** Pause between mempool polls in waitForMinTxs. Extracted for test overriding. */ async waitForTxsPollingInterval() {
+        await this.awaitInterruptibleSleep(TXS_POLLING_MS);
     }
     getSlotStartBuildTimestamp() {
-        return getSlotStartBuildTimestamp(this.slot, this.l1Constants);
+        return getSlotStartBuildTimestamp(this.slotNow, this.l1Constants);
     }
     getSecondsIntoSlot() {
         const slotStartTimestamp = this.getSlotStartBuildTimestamp();