@aztec/validator-client 0.0.1-commit.2448fdb → 0.0.1-commit.2606882

package/dest/proposal_handler.js

@@ -65,6 +65,7 @@ function _ts_dispose_resources(env) {
 }
 import { encodeCheckpointBlobDataFromBlocks, getBlobsPerL1Block } from '@aztec/blob-lib';
 import { INITIAL_L2_BLOCK_NUM } from '@aztec/constants';
+import { PROPOSER_PIPELINING_SLOT_OFFSET } from '@aztec/epoch-cache';
 import { validateFeeAssetPriceModifier } from '@aztec/ethereum/contracts';
 import { BlockNumber, CheckpointNumber, SlotNumber } from '@aztec/foundation/branded-types';
 import { pick } from '@aztec/foundation/collection';
@@ -73,13 +74,31 @@ import { TimeoutError } from '@aztec/foundation/error';
 import { createLogger } from '@aztec/foundation/log';
 import { retryUntil } from '@aztec/foundation/retry';
 import { DateProvider, Timer } from '@aztec/foundation/timer';
-import { validateCheckpoint } from '@aztec/stdlib/checkpoint';
-import { getEpochAtSlot, getTimestampForSlot } from '@aztec/stdlib/epoch-helpers';
+import { getPreviousCheckpointOutHashes, validateCheckpoint } from '@aztec/stdlib/checkpoint';
+import { getEpochAtSlot, getLastL1SlotTimestampForL2Slot, getTimestampForSlot } from '@aztec/stdlib/epoch-helpers';
 import { Gas } from '@aztec/stdlib/gas';
 import { accumulateCheckpointOutHashes, computeInHashFromL1ToL2Messages } from '@aztec/stdlib/messaging';
 import { MerkleTreeId } from '@aztec/stdlib/trees';
 import { ReExFailedTxsError, ReExInitialStateMismatchError, ReExStateMismatchError, ReExTimeoutError, TransactionsNotAvailableError } from '@aztec/stdlib/validators';
 import { getTelemetryClient } from '@aztec/telemetry-client';
+/**
+ * Mapping from a checkpoint-proposal validation failure reason to the tracker outcome that
+ * `handleCheckpointProposal` should record. `undefined` means do not record (signature
+ * couldn't be verified, or the checkpoint is already on L1 so the question is moot).
+ */ /* eslint-disable camelcase */ const CHECKPOINT_VALIDATION_REASON_TO_OUTCOME = {
+    invalid_signature: undefined,
+    invalid_fee_asset_price_modifier: 'invalid',
+    checkpoint_already_published: undefined,
+    last_block_not_found: 'unvalidated',
+    block_fetch_error: 'unvalidated',
+    no_blocks_for_slot: 'unvalidated',
+    last_block_archive_mismatch: 'invalid',
+    too_many_blocks_in_checkpoint: 'invalid',
+    checkpoint_header_mismatch: 'invalid',
+    archive_mismatch: 'invalid',
+    out_hash_mismatch: 'invalid',
+    checkpoint_validation_failed: 'invalid'
+};
 /** Handles block and checkpoint proposals for both validator and non-validator nodes. */ export class ProposalHandler {
     checkpointsBuilder;
     worldState;
@@ -90,11 +109,19 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
     epochCache;
     config;
     blobClient;
+    reexecutionTracker;
     metrics;
     dateProvider;
     log;
     tracer;
-    constructor(checkpointsBuilder, worldState, blockSource, l1ToL2MessageSource, txProvider, blockProposalValidator, epochCache, config, blobClient, metrics, dateProvider = new DateProvider(), telemetry = getTelemetryClient(), log = createLogger('validator:proposal-handler')){
+    /** Cached last checkpoint validation result to avoid double-validation on validator nodes.
+   *  Keyed by signed-payload hash so two proposals at the same (slot, archive) but with a
+   *  different `feeAssetPriceModifier` (or any other signed field) are validated independently. */ lastCheckpointValidationResult;
+    /** Archiver reference for setting proposed checkpoints (pipelining). Set via register(). */ archiver;
+    /** Returns current validator addresses for own-proposal detection. Set via register(). */ getOwnValidatorAddresses;
+    /** P2P proposal pool access for deciding when retained proposals should block archiver processing. */ p2pClient;
+    checkpointProposalValidationFailureCallback;
+    constructor(checkpointsBuilder, worldState, blockSource, l1ToL2MessageSource, txProvider, blockProposalValidator, epochCache, config, blobClient, reexecutionTracker, metrics, dateProvider = new DateProvider(), telemetry = getTelemetryClient(), log = createLogger('validator:proposal-handler')){
         this.checkpointsBuilder = checkpointsBuilder;
         this.worldState = worldState;
         this.blockSource = blockSource;
@@ -104,6 +131,7 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
         this.epochCache = epochCache;
         this.config = config;
         this.blobClient = blobClient;
+        this.reexecutionTracker = reexecutionTracker;
         this.metrics = metrics;
         this.dateProvider = dateProvider;
         this.log = log;
@@ -112,10 +140,39 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
         }
         this.tracer = telemetry.getTracer('ProposalHandler');
     }
+    updateConfig(config) {
+        this.config = {
+            ...this.config,
+            ...config
+        };
+    }
+    setCheckpointProposalValidationFailureCallback(callback) {
+        this.checkpointProposalValidationFailureCallback = callback;
+    }
+    /**
+   * Records the proposer's own checkpoint proposal as a `valid` outcome in the re-execution
+   * tracker. Without this, the node's own checkpoint proposals never flow through
+   * `handleCheckpointProposal` (proposers don't validate their own proposals), so its sentinel
+   * sees no outcome for slots where it was the proposer and reports itself as inactive.
+   *
+   * `archive` should be the locally-computed archive (NOT the broadcast archive, which may have
+   * been deliberately corrupted in tests via `broadcastInvalidBlockProposal` /
+   * `broadcastInvalidCheckpointProposalOnly`). Recording the local archive correctly models the
+   * proposer's own view of its own work.
+   */ recordOwnCheckpointProposalAsValid(slot, archive, checkpointNumber) {
+        this.reexecutionTracker.recordOutcome(slot, archive, 'valid', checkpointNumber);
+    }
     /**
-   * Registers non-validator handlers for block and checkpoint proposals on the p2p client.
-   * Block proposals are always registered. Checkpoint proposals are registered if the blob client can upload.
-   */ register(p2pClient, shouldReexecute) {
+   * Registers handlers for block and checkpoint proposals on the p2p client.
+   * Records the p2p client so validation can inspect retained proposals.
+   * Block proposals are registered for non-validator nodes (validators register their own enhanced handler).
+   * The all-nodes checkpoint proposal handler is always registered for validation, caching, and pipelining.
+   * @param archiver - Archiver reference for setting proposed checkpoints (pipelining)
+   * @param getOwnValidatorAddresses - Returns current validator addresses for own-proposal detection
+   */ register(p2pClient, shouldReexecute, archiver, getOwnValidatorAddresses) {
+        this.p2pClient = p2pClient;
+        this.archiver = archiver;
+        this.getOwnValidatorAddresses = getOwnValidatorAddresses;
         // Non-validator handler that processes or re-executes for monitoring but does not attest.
         // Returns boolean indicating whether the proposal was valid.
         const blockHandler = async (proposal, proposalSender)=>{
@@ -146,29 +203,54 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
             }
         };
         p2pClient.registerBlockProposalHandler(blockHandler);
-        // Register checkpoint proposal handler if blob uploads are enabled and we are reexecuting
-        if (this.blobClient.canUpload() && shouldReexecute) {
-            const checkpointHandler = async (checkpoint, _sender)=>{
-                try {
-                    const proposalInfo = {
-                        proposalSlotNumber: checkpoint.slotNumber,
-                        archive: checkpoint.archive.toString(),
-                        proposer: checkpoint.getSender()?.toString()
-                    };
-                    const result = await this.handleCheckpointProposal(checkpoint, proposalInfo);
-                    if (result.isValid) {
-                        this.log.info(`Non-validator checkpoint proposal at slot ${checkpoint.slotNumber} handled`, proposalInfo);
-                    } else {
-                        this.log.warn(`Non-validator checkpoint proposal at slot ${checkpoint.slotNumber} failed: ${result.reason}`, proposalInfo);
+        // All-nodes checkpoint proposal handler: validates, caches, and sets proposed checkpoint for pipelining.
+        // Runs for all nodes (validators and non-validators). Validators get the cached result in the
+        // validator-specific callback (attestToCheckpointProposal) which runs after this one.
+        const checkpointHandler = async (proposal, _sender)=>{
+            try {
+                const pipeliningTimer = new Timer();
+                const proposalInfo = {
+                    slot: proposal.slotNumber,
+                    archive: proposal.archive.toString(),
+                    proposer: proposal.getSender()?.toString()
+                };
+                if (this.config.skipCheckpointProposalValidation) {
+                    this.log.warn(`Skipping checkpoint proposal validation for slot ${proposal.slotNumber}`, proposalInfo);
+                    return undefined;
+                }
+                if (await this.epochCache.isEscapeHatchOpenAtSlot(proposal.slotNumber)) {
+                    this.log.warn(`Escape hatch open for slot ${proposal.slotNumber}, skipping checkpoint proposal validation`, proposalInfo);
+                    return undefined;
+                }
+                // For own proposals, skip validation and return: the proposer already built and validated the
+                // checkpoint, and the sequencer's checkpoint proposal job pushed the proposed checkpoint to the
+                // archiver from local data before broadcasting. Gossipsub doesn't echo our own messages back, so
+                // this branch is normally unreachable — it remains as defense if an own proposal arrives by some
+                // other path.
+                const proposer = proposal.getSender();
+                const ownAddresses = this.getOwnValidatorAddresses?.();
+                const isOwnProposal = proposer && ownAddresses?.some((addr)=>addr === proposer.toString());
+                if (isOwnProposal) {
+                    this.log.debug(`Skipping validation for own checkpoint proposal at slot ${proposal.slotNumber}`);
+                    return undefined;
+                }
+                const result = await this.handleCheckpointProposal(proposal, proposalInfo);
+                if (!result.isValid) {
+                    await this.checkpointProposalValidationFailureCallback?.(proposal, result, proposalInfo);
+                } else if (this.archiver) {
+                    const set = await this.setProposedCheckpointFromValidation(proposal);
+                    if (set) {
+                        this.metrics?.recordCheckpointProposalToPipelinedStateDuration(pipeliningTimer.ms());
                     }
-                } catch (error) {
-                    this.log.error('Error processing checkpoint proposal in non-validator handler', error);
                 }
-                // Non-validators don't attest
-                return undefined;
-            };
-            p2pClient.registerCheckpointProposalHandler(checkpointHandler);
-        }
+            } catch (err) {
+                this.log.warn(`Error handling checkpoint proposal for slot ${proposal.slotNumber}`, {
+                    err
+                });
+            }
+            return undefined;
+        };
+        p2pClient.registerAllNodesCheckpointProposalHandler(checkpointHandler);
         return this;
     }
     async handleBlockProposal(proposal, proposalSender, shouldReexecute) {
@@ -180,7 +262,7 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
             this.log.warn(`Received proposal with invalid signature for slot ${slotNumber}`);
             return {
                 isValid: false,
-                reason: 'invalid_proposal'
+                reason: 'invalid_signature'
             };
         }
         const proposalInfo = {
@@ -203,19 +285,22 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
                 reason: 'invalid_proposal'
             };
         }
-        // Ensure the block source is synced before checking for existing blocks,
-        // since a pending checkpoint prune may remove blocks we'd otherwise find.
-        // This affects mostly the block_number_already_exists check, since a pending
-        // checkpoint prune could remove a block that would conflict with this proposal.
-        // TODO(@Maddiaa0): This may break staggered slots.
-        const blockSourceSync = await this.waitForBlockSourceSync(slotNumber);
-        if (!blockSourceSync) {
-            this.log.warn(`Block source is not synced, skipping processing`, proposalInfo);
+        const retainedSlotValidation = await this.validateNewBlockInSlot(proposal);
+        if (!retainedSlotValidation.isValid) {
+            this.log.info(`Block proposal conflicts with retained proposals, skipping archiver processing`, {
+                ...proposalInfo,
+                indexWithinCheckpoint: proposal.indexWithinCheckpoint,
+                reason: retainedSlotValidation.reason
+            });
             return {
                 isValid: false,
-                reason: 'block_source_not_synced'
+                blockNumber: proposal.blockNumber,
+                reason: retainedSlotValidation.reason
             };
         }
+        // The proposer builds ahead of L1 submission under pipelining, so the block source won't have
+        // synced to the proposed slot yet. We deliberately do not wait for it to sync here, to avoid
+        // eating into the attestation window.
         // Check that the parent proposal is a block we know, otherwise reexecution would fail.
         // If we don't find it immediately, we keep retrying for a while; it may be we still
         // need to process other block proposals to get to it.
@@ -243,7 +328,9 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
         const blockNumber = parentBlock === 'genesis' ? BlockNumber(INITIAL_L2_BLOCK_NUM) : BlockNumber(parentBlock.header.getBlockNumber() + 1);
         proposalInfo.blockNumber = blockNumber;
         // Check that this block number does not exist already
-        const existingBlock = await this.blockSource.getBlockHeader(blockNumber);
+        const existingBlock = await this.blockSource.getBlockData({
+            number: blockNumber
+        });
         if (existingBlock) {
             this.log.warn(`Block number ${blockNumber} already exists, skipping processing`, proposalInfo);
             return {
@@ -258,6 +345,8 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
             pinnedPeer: proposalSender,
             deadline: this.getReexecutionDeadline(slotNumber, config)
         });
+        // Record the tx-collection outcome on the re-execution tracker
+        this.reexecutionTracker.recordTxsCollected(slotNumber, proposal.indexWithinCheckpoint, missingTxs.length === 0);
         // If reexecution is disabled, bail. We were just interested in triggering tx collection.
         if (!shouldReexecute) {
             this.log.info(`Received valid block ${blockNumber} proposal at index ${proposal.indexWithinCheckpoint} on slot ${slotNumber}`, proposalInfo);
@@ -305,9 +394,18 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
                 reason: 'txs_not_available'
             };
         }
-        // Collect the out hashes of all the checkpoints before this one in the same epoch
+        // Collect the out hashes of all the checkpoints before this one in the same epoch.
+        // Mirror the proposer-side fallback: under pipelining the immediately-preceding cp may not
+        // yet be on L1, in which case the helper grafts the locally-known proposed cp's outHash.
         const epoch = getEpochAtSlot(slotNumber, this.epochCache.getL1Constants());
-        const previousCheckpointOutHashes = (await this.blockSource.getCheckpointsDataForEpoch(epoch)).filter((c)=>c.checkpointNumber < checkpointNumber).map((c)=>c.checkpointOutHash);
+        const previousCheckpointOutHashes = await getPreviousCheckpointOutHashes({
+            blockSource: this.blockSource,
+            epoch,
+            checkpointNumber,
+            l1Constants: this.epochCache.getL1Constants(),
+            pipeliningEnabled: true,
+            log: this.log
+        });
         // Try re-executing the transactions in the proposal if needed
         let reexecutionResult;
         try {
@@ -325,7 +423,7 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
         }
         // If we succeeded, push this block into the archiver (unless disabled)
         if (reexecutionResult?.block && this.config.skipPushProposedBlocksToArchiver === false) {
-            await this.blockSource.addBlock(reexecutionResult?.block);
+            await this.blockSource.addBlock(reexecutionResult.block);
         }
         this.log.info(`Successfully re-executed block ${blockNumber} proposal at index ${proposal.indexWithinCheckpoint} on slot ${slotNumber}`, {
             ...proposalInfo,
@@ -337,19 +435,49 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
             reexecutionResult
         };
     }
+    async validateNewBlockInSlot(blockProposal) {
+        if (!this.p2pClient) {
+            return {
+                isValid: true
+            };
+        }
+        const { blockProposals, checkpointProposals } = await this.p2pClient.getProposalsForSlot(blockProposal.slotNumber);
+        if (checkpointProposals.length === 0) {
+            return {
+                isValid: true
+            };
+        } else if (checkpointProposals.length > 1) {
+            return {
+                isValid: false,
+                reason: 'checkpoint_proposal_equivocation'
+            };
+        } else {
+            const checkpointProposal = checkpointProposals[0];
+            const terminalBlock = blockProposals.find((block)=>block.archive.equals(checkpointProposal.archive));
+            return terminalBlock !== undefined && blockProposal.indexWithinCheckpoint > terminalBlock.indexWithinCheckpoint ? {
+                isValid: false,
+                reason: 'block_proposal_beyond_checkpoint'
+            } : {
+                isValid: true
+            };
+        }
+    }
     async getParentBlock(proposal) {
         const parentArchive = proposal.blockHeader.lastArchive.root;
-        const slot = proposal.slotNumber;
         const config = this.checkpointsBuilder.getConfig();
         const { genesisArchiveRoot } = await this.blockSource.getGenesisValues();
         if (parentArchive.equals(genesisArchiveRoot)) {
             return 'genesis';
         }
-        const deadline = this.getReexecutionDeadline(slot, config);
+        const deadline = this.getReexecutionDeadline(proposal.slotNumber, config);
         const currentTime = this.dateProvider.now();
         const timeoutDurationMs = deadline.getTime() - currentTime;
         try {
-            return await this.blockSource.getBlockDataByArchive(parentArchive) ?? (timeoutDurationMs <= 0 ? undefined : await retryUntil(()=>this.blockSource.syncImmediate().then(()=>this.blockSource.getBlockDataByArchive(parentArchive)), 'force archiver sync', timeoutDurationMs / 1000, 0.5));
+            return await this.blockSource.getBlockData({
+                archive: parentArchive
+            }) ?? (timeoutDurationMs <= 0 ? undefined : await retryUntil(()=>this.blockSource.syncImmediate().then(()=>this.blockSource.getBlockData({
+                        archive: parentArchive
+                    })), 'force archiver sync', timeoutDurationMs / 1000, 0.5));
         } catch (err) {
             if (err instanceof TimeoutError) {
                 this.log.debug(`Timed out getting parent block by archive root`, {
@@ -491,37 +619,13 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
         }
         return undefined;
     }
-    getReexecutionDeadline(slot, config) {
-        const nextSlotTimestampSeconds = Number(getTimestampForSlot(SlotNumber(slot + 1), config));
+    getReexecutionDeadline(slotNumber, config) {
+        // Under proposer pipelining, the proposal slot may be ahead of wall clock time.
+        // Reexecution budgets should still be bounded by the current slot we are in now.
+        const wallclockSlot = slotNumber - PROPOSER_PIPELINING_SLOT_OFFSET;
+        const nextSlotTimestampSeconds = Number(getTimestampForSlot(SlotNumber(wallclockSlot + 1), config));
         return new Date(nextSlotTimestampSeconds * 1000);
     }
-    /** Waits for the block source to sync L1 data up to at least the slot before the given one. */ async waitForBlockSourceSync(slot) {
-        const deadline = this.getReexecutionDeadline(slot, this.checkpointsBuilder.getConfig());
-        const timeoutMs = deadline.getTime() - this.dateProvider.now();
-        if (slot === 0) {
-            return true;
-        }
-        // Make a quick check before triggering an archiver sync
-        const syncedSlot = await this.blockSource.getSyncedL2SlotNumber();
-        if (syncedSlot !== undefined && syncedSlot + 1 >= slot) {
-            return true;
-        }
-        try {
-            // Trigger an immediate sync of the block source, and wait until it reports being synced to the required slot
-            return await retryUntil(async ()=>{
-                await this.blockSource.syncImmediate();
-                const syncedSlot = await this.blockSource.getSyncedL2SlotNumber();
-                return syncedSlot !== undefined && syncedSlot + 1 >= slot;
-            }, 'wait for block source sync', timeoutMs / 1000, 0.5);
-        } catch (err) {
-            if (err instanceof TimeoutError) {
-                this.log.warn(`Timed out waiting for block source to sync to slot ${slot}`);
-                return false;
-            } else {
-                throw err;
-            }
-        }
-    }
     getReexecuteFailureReason(err) {
         if (err instanceof TransactionsNotAvailableError) {
             return 'txs_not_available';
@@ -548,7 +652,7 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
             // If we do not have all of the transactions, then we should fail
             if (txs.length !== txHashes.length) {
                 const foundTxHashes = txs.map((tx)=>tx.getTxHash());
-                const missingTxHashes = txHashes.filter((txHash)=>!foundTxHashes.includes(txHash));
+                const missingTxHashes = txHashes.filter((txHash)=>!foundTxHashes.some((h)=>h.equals(txHash)));
                 throw new TransactionsNotAvailableError(missingTxHashes);
             }
             const timer = new Timer();
@@ -639,25 +743,53 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
         }
     }
     /**
-   * Validates a checkpoint proposal and uploads blobs if configured.
-   * Used by both non-validator nodes (via register) and the validator client (via delegation).
+   * Validates a checkpoint proposal, caches the result, and uploads blobs if configured.
+   * Returns a cached result if the same proposal (archive + slot) was already validated.
+   * Used by both the all-nodes callback (via register) and the validator client (via delegation).
    */ async handleCheckpointProposal(proposal, proposalInfo) {
+        const slot = proposal.slotNumber;
+        const payloadHash = proposal.getPayloadHash();
+        // Check cache: same signed-payload hash means we already validated this exact proposal.
+        if (this.lastCheckpointValidationResult && this.lastCheckpointValidationResult.payloadHash === payloadHash) {
+            this.log.debug(`Returning cached validation result for checkpoint proposal at slot ${slot}`, proposalInfo);
+            return this.lastCheckpointValidationResult.result;
+        }
         const proposer = proposal.getSender();
+        let result;
         if (!proposer) {
             this.log.warn(`Received checkpoint proposal with invalid signature for slot ${proposal.slotNumber}`);
-            return {
+            result = {
                 isValid: false,
                 reason: 'invalid_signature'
             };
-        }
-        if (!validateFeeAssetPriceModifier(proposal.feeAssetPriceModifier)) {
+        } else if (!validateFeeAssetPriceModifier(proposal.feeAssetPriceModifier)) {
             this.log.warn(`Received checkpoint proposal with invalid feeAssetPriceModifier ${proposal.feeAssetPriceModifier} for slot ${proposal.slotNumber}`);
-            return {
+            result = {
                 isValid: false,
                 reason: 'invalid_fee_asset_price_modifier'
             };
+        } else {
+            result = await this.validateCheckpointProposal(proposal, proposalInfo);
+        }
+        this.lastCheckpointValidationResult = {
+            payloadHash,
+            result
+        };
+        // Record the outcome on the re-execution tracker.
+        const outcome = result.isValid ? 'valid' : CHECKPOINT_VALIDATION_REASON_TO_OUTCOME[result.reason];
+        if (outcome !== undefined) {
+            this.reexecutionTracker.recordOutcome(slot, proposal.archive, outcome, result.checkpointNumber);
+        }
+        // Drop tracker entries for checkpoints that have reached L1 finality.
+        try {
+            const tips = await this.blockSource.getL2Tips();
+            const finalizedCheckpointNumber = tips.finalized.checkpoint.number;
+            if (finalizedCheckpointNumber > 0) {
+                this.reexecutionTracker.removeBefore(CheckpointNumber(finalizedCheckpointNumber + 1));
+            }
+        } catch (err) {
+            this.log.error(`Error pruning reexecution tracker`, err, proposalInfo);
         }
-        const result = await this.validateCheckpointProposal(proposal, proposalInfo);
         // Upload blobs to filestore if validation passed (fire and forget)
         if (result.isValid) {
             this.tryUploadBlobsForCheckpoint(proposal, proposalInfo);
@@ -668,73 +800,123 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
    * Validates a checkpoint proposal by building the full checkpoint and comparing it with the proposal.
    * @returns Validation result with isValid flag and reason if invalid.
    */ async validateCheckpointProposal(proposal, proposalInfo) {
-        const slot = proposal.slotNumber;
-        // Timeout block syncing at the start of the next slot
-        const config = this.checkpointsBuilder.getConfig();
-        const nextSlotTimestampSeconds = Number(getTimestampForSlot(SlotNumber(slot + 1), config));
-        const timeoutSeconds = Math.max(1, nextSlotTimestampSeconds - Math.floor(this.dateProvider.now() / 1000));
-        // Wait for last block to sync by archive
-        let lastBlockHeader;
+        const env = {
+            stack: [],
+            error: void 0,
+            hasError: false
+        };
         try {
-            lastBlockHeader = await retryUntil(async ()=>{
-                await this.blockSource.syncImmediate();
-                return this.blockSource.getBlockHeaderByArchive(proposal.archive);
-            }, `waiting for block with archive ${proposal.archive.toString()} for slot ${slot}`, timeoutSeconds, 0.5);
-        } catch (err) {
-            if (err instanceof TimeoutError) {
-                this.log.warn(`Timed out waiting for block with archive matching checkpoint proposal`, proposalInfo);
+            const slot = proposal.slotNumber;
+            // Block-sync deadline = the L1 publish deadline, i.e. the latest moment the proposer can submit
+            // this checkpoint and still have it land on L1 in the target slot. That is 12s (one Ethereum
+            // slot) before the last L1 block of the target slot, which is later than the target-slot start
+            // used for block re-execution. Keeping validation/attestation alive until then lets validators
+            // keep attesting right up to the proposer's real publish cutoff.
+            const l1Constants = this.epochCache.getL1Constants();
+            const publishDeadlineSeconds = Number(getLastL1SlotTimestampForL2Slot(slot, l1Constants)) - l1Constants.ethereumSlotDuration;
+            const deadline = new Date(publishDeadlineSeconds * 1000);
+            const timeoutSeconds = Math.max(1, Math.floor((deadline.getTime() - this.dateProvider.now()) / 1000));
+            // Wait for last block to sync by archive
+            let lastBlockData;
+            try {
+                lastBlockData = await retryUntil(async ()=>{
+                    await this.blockSource.syncImmediate();
+                    return await this.blockSource.getBlockData({
+                        archive: proposal.archive
+                    });
+                }, `waiting for block with archive ${proposal.archive.toString()} for slot ${slot}`, timeoutSeconds, 0.5);
+            } catch (err) {
+                if (err instanceof TimeoutError) {
+                    this.log.warn(`Timed out waiting for block with archive matching checkpoint proposal`, proposalInfo);
+                    return {
+                        isValid: false,
+                        reason: 'last_block_not_found'
+                    };
+                }
+                this.log.error(`Error fetching last block for checkpoint proposal`, err, proposalInfo);
+                return {
+                    isValid: false,
+                    reason: 'block_fetch_error'
+                };
+            }
+            if (!lastBlockData) {
+                this.log.warn(`Last block not found for checkpoint proposal`, proposalInfo);
                 return {
                     isValid: false,
                     reason: 'last_block_not_found'
                 };
             }
-            this.log.error(`Error fetching last block for checkpoint proposal`, err, proposalInfo);
-            return {
-                isValid: false,
-                reason: 'block_fetch_error'
-            };
-        }
-        if (!lastBlockHeader) {
-            this.log.warn(`Last block not found for checkpoint proposal`, proposalInfo);
-            return {
-                isValid: false,
-                reason: 'last_block_not_found'
-            };
-        }
-        // Get all full blocks for the slot and checkpoint
-        const blocks = await this.blockSource.getBlocksForSlot(slot);
-        if (blocks.length === 0) {
-            this.log.warn(`No blocks found for slot ${slot}`, proposalInfo);
-            return {
-                isValid: false,
-                reason: 'no_blocks_for_slot'
-            };
-        }
-        // Ensure the last block for this slot matches the archive in the checkpoint proposal
-        if (!blocks.at(-1)?.archive.root.equals(proposal.archive)) {
-            this.log.warn(`Last block archive mismatch for checkpoint proposal`, proposalInfo);
-            return {
-                isValid: false,
-                reason: 'last_block_archive_mismatch'
-            };
-        }
-        this.log.debug(`Found ${blocks.length} blocks for slot ${slot}`, {
-            ...proposalInfo,
-            blockNumbers: blocks.map((b)=>b.number)
-        });
-        // Get checkpoint constants from first block
-        const firstBlock = blocks[0];
-        const constants = this.extractCheckpointConstants(firstBlock);
-        const checkpointNumber = firstBlock.checkpointNumber;
-        // Get L1-to-L2 messages for this checkpoint
-        const l1ToL2Messages = await this.l1ToL2MessageSource.getL1ToL2Messages(checkpointNumber);
-        // Collect the out hashes of all the checkpoints before this one in the same epoch
-        const epoch = getEpochAtSlot(slot, this.epochCache.getL1Constants());
-        const previousCheckpointOutHashes = (await this.blockSource.getCheckpointsDataForEpoch(epoch)).filter((c)=>c.checkpointNumber < checkpointNumber).map((c)=>c.checkpointOutHash);
-        // Fork world state at the block before the first block
-        const parentBlockNumber = BlockNumber(firstBlock.number - 1);
-        const fork = await this.worldState.fork(parentBlockNumber);
-        try {
+            // Refuse to attest if the block's enclosing checkpoint has already been published to L1.
+            const existingCheckpoint = await this.blockSource.getCheckpointData({
+                number: lastBlockData.checkpointNumber
+            });
+            if (existingCheckpoint) {
+                this.log.warn(`Refusing to attest to checkpoint proposal whose checkpoint is already on L1`, {
+                    ...proposalInfo,
+                    checkpointNumber: lastBlockData.checkpointNumber
+                });
+                return {
+                    isValid: false,
+                    reason: 'checkpoint_already_published',
+                    checkpointNumber: lastBlockData.checkpointNumber
+                };
+            }
+            // Get all full blocks for the slot and checkpoint
+            const blocks = await this.blockSource.getBlocksForSlot(slot);
+            if (blocks.length === 0) {
+                this.log.warn(`No blocks found for slot ${slot}`, proposalInfo);
+                return {
+                    isValid: false,
+                    reason: 'no_blocks_for_slot',
+                    checkpointNumber: lastBlockData.checkpointNumber
+                };
+            }
+            // Ensure the last block for this slot matches the archive in the checkpoint proposal
+            if (!blocks.at(-1)?.archive.root.equals(proposal.archive)) {
+                this.log.warn(`Last block archive mismatch for checkpoint proposal`, proposalInfo);
+                return {
+                    isValid: false,
+                    reason: 'last_block_archive_mismatch',
+                    checkpointNumber: lastBlockData.checkpointNumber
+                };
+            }
+            const maxBlocksPerCheckpoint = this.config.maxBlocksPerCheckpoint;
+            if (maxBlocksPerCheckpoint !== undefined && blocks.length > maxBlocksPerCheckpoint) {
+                this.log.warn(`Checkpoint proposal exceeds maxBlocksPerCheckpoint`, {
+                    ...proposalInfo,
+                    blocksInProposal: blocks.length,
+                    maxBlocksPerCheckpoint
+                });
+                return {
+                    isValid: false,
+                    reason: 'too_many_blocks_in_checkpoint',
+                    checkpointNumber: lastBlockData.checkpointNumber
+                };
+            }
+            this.log.debug(`Found ${blocks.length} blocks for slot ${slot}`, {
+                ...proposalInfo,
+                blockNumbers: blocks.map((b)=>b.number)
+            });
+            // Get checkpoint constants from first block
+            const firstBlock = blocks[0];
+            const constants = this.extractCheckpointConstants(firstBlock);
+            const checkpointNumber = firstBlock.checkpointNumber;
+            // Get L1-to-L2 messages for this checkpoint
+            const l1ToL2Messages = await this.l1ToL2MessageSource.getL1ToL2Messages(checkpointNumber);
+            // Collect the out hashes of all the checkpoints before this one in the same epoch.
+            // See note on the analogous block-proposal site: the helper handles pipelining lag.
+            const epoch = getEpochAtSlot(slot, this.epochCache.getL1Constants());
+            const previousCheckpointOutHashes = await getPreviousCheckpointOutHashes({
+                blockSource: this.blockSource,
+                epoch,
+                checkpointNumber,
+                l1Constants: this.epochCache.getL1Constants(),
+                pipeliningEnabled: true,
+                log: this.log
+            });
+            // Fork world state at the block before the first block
+            const parentBlockNumber = BlockNumber(firstBlock.number - 1);
+            const fork = _ts_add_disposable_resource(env, await this.checkpointsBuilder.getFork(parentBlockNumber), true);
             // Create checkpoint builder with all existing blocks
             const checkpointBuilder = await this.checkpointsBuilder.openCheckpoint(checkpointNumber, constants, proposal.feeAssetPriceModifier, l1ToL2Messages, previousCheckpointOutHashes, fork, blocks, this.log.getBindings());
             // Complete the checkpoint to get computed values
@@ -748,7 +930,8 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
                 });
                 return {
                     isValid: false,
-                    reason: 'checkpoint_header_mismatch'
+                    reason: 'checkpoint_header_mismatch',
+                    checkpointNumber
                 };
             }
             // Compare archive root with proposal
@@ -760,7 +943,8 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
                 });
                 return {
                     isValid: false,
-                    reason: 'archive_mismatch'
+                    reason: 'archive_mismatch',
+                    checkpointNumber
                 };
             }
             // Check that the accumulated epoch out hash matches the value in the proposal.
@@ -781,7 +965,8 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
                 });
                 return {
                     isValid: false,
-                    reason: 'out_hash_mismatch'
+                    reason: 'out_hash_mismatch',
+                    checkpointNumber
                 };
             }
             // Final round of validations on the checkpoint, just in case.
@@ -797,15 +982,21 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
                 this.log.warn(`Checkpoint validation failed: ${err}`, proposalInfo);
                 return {
                     isValid: false,
-                    reason: 'checkpoint_validation_failed'
+                    reason: 'checkpoint_validation_failed',
+                    checkpointNumber
                 };
             }
             this.log.verbose(`Checkpoint proposal validation successful for slot ${slot}`, proposalInfo);
             return {
-                isValid: true
+                isValid: true,
+                checkpointNumber
             };
+        } catch (e) {
+            env.error = e;
+            env.hasError = true;
         } finally{
-            await fork.close();
+            const result = _ts_dispose_resources(env);
+            if (result) await result;
         }
     }
     /** Extracts checkpoint global variables from a block. */ extractCheckpointConstants(block) {
@@ -827,7 +1018,9 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
     }
     /** Uploads blobs for a checkpoint to the filestore. */ async uploadBlobsForCheckpoint(proposal, proposalInfo) {
         try {
-            const lastBlockHeader = await this.blockSource.getBlockHeaderByArchive(proposal.archive);
+            const lastBlockHeader = (await this.blockSource.getBlockData({
+                archive: proposal.archive
+            }))?.header;
             if (!lastBlockHeader) {
                 this.log.warn(`Failed to get last block header for blob upload`, proposalInfo);
                 return;
@@ -849,4 +1042,31 @@ import { getTelemetryClient } from '@aztec/telemetry-client';
             this.log.warn(`Failed to upload blobs for checkpoint: ${err}`, proposalInfo);
         }
     }
+    /**
+   * Derives proposed checkpoint data from validated blocks and sets it on the archiver.
+   * Used after successful validation of a foreign proposal.
+   * Does not retry since we already waited for the block during validation.
+   */ async setProposedCheckpointFromValidation(proposal) {
+        if (!this.archiver) {
+            return false;
+        }
+        const blockData = await this.blockSource.getBlockData({
+            archive: proposal.archive
+        });
+        if (!blockData) {
+            this.log.debug(`Block data not found for checkpoint proposal archive, cannot set proposed checkpoint`, {
+                archive: proposal.archive.toString()
+            });
+            return false;
+        }
+        await this.archiver.addProposedCheckpoint({
+            header: proposal.checkpointHeader,
+            checkpointNumber: blockData.checkpointNumber,
+            startBlock: BlockNumber(blockData.header.getBlockNumber() - blockData.indexWithinCheckpoint),
+            blockCount: blockData.indexWithinCheckpoint + 1,
+            totalManaUsed: proposal.checkpointHeader.totalManaUsed.toBigInt(),
+            feeAssetPriceModifier: proposal.feeAssetPriceModifier
+        });
+        return true;
+    }
 }