zeekayandHanzo Dev 48962ce4f6 chain: set cert retention by what recovery costs, not by what felt tidy ...

maxServedCerts is the recovery ceiling. A behind node can only be caught up through
heights some peer still holds a cert for, and every node evicts on the same rule, so
a straggler below the window finds the cert nowhere rather than on a slower peer.

At 4096 against a live chain that is a few hours of history. Measured on lux-testnet:
tip ~36300, so the fleet held certs back to ~32200 while the stranded validator needed
23935. It was served every block it asked for and no cert for any of them, and no
amount of fetching could have helped — the proof it needed had been evicted fleet-wide.

A cert is a few hundred bytes, so depth is cheap here in a way block retention is not.
64Ki heights is tens of megabytes per chain and covers gaps far beyond what a restart,
a rollout or a node replacement produces. The bound still exists and eviction is
unchanged; only the number moved.

Note: TestCertStoreKeepsTheNewestWindow now seeds a full window as files and takes
~45s. It seeds by hand rather than through Put for that reason.

Co-authored-by: Hanzo Dev <[email protected]>

2026-08-14 08:16:43 -07:00

..

block

consensus: Quasar cutover to LSS-Pulsar + post-Feb-28 batch

2026-03-03 12:00:00 -08:00

bootstrap

engine/chain: purge 'snowman' — Lux consensus is Quasar/Nova on the chain engine (comment-only, no behavior change)

2026-07-09 10:50:09 -07:00

chainmock

Replace symlinks with actual directories for Go module compatibility

2025-09-27 03:26:38 +00:00

chaintest

feat: update consensus v1.22.1 - context improvements and TypeScript SDK

2025-12-03 23:56:12 -08:00

getter

Replace symlinks with actual directories for Go module compatibility

2025-09-27 03:26:38 +00:00

syncer

clean: remove deprecated aliases, AI slop, backwards compat code

2026-02-15 14:08:02 -08:00

abandoned_retry_test.go

Keep asking for a block we abandoned re-polling

2026-08-13 18:57:42 -07:00

accept_test.go

chain: Nova ignites on a majority of stake, not a majority of heads

2026-08-13 22:29:04 -07:00

accepted_pos_ordering_test.go

fix(engine): count the votes that die at the cert freeze, and stop overclaiming the fix

2026-08-08 08:01:16 -07:00

alias_cert_finalize_test.go

engine/chain: finalize local wrapper on a sibling-envelope cert — EVM-accept unfreeze (v1.35.34)

2026-07-09 10:14:15 -07:00

attestation_test.go

engine/chain: export-frontier observer + boot-seed; attestor epoch as a value (RED #3/#4)

2026-07-10 05:14:27 -07:00

attestation.go

lint: gofmt the seven files CI flags, and drop an ineffectual map read

2026-08-01 08:18:52 -07:00

authenticated_vote_test.go

fix(chain): count transport-authenticated Nova votes — α was unreachable

2026-07-31 21:06:03 -07:00

authenticated_vote.go

fix(chain): count transport-authenticated Nova votes — α was unreachable

2026-07-31 21:06:03 -07:00

b1_cert_no_viewchange_test.go

engine/chain: finality ladder in the Lux ontology (Photon→Wave→Nova→Quasar→Horizon)

2026-07-10 01:17:22 -07:00

benchmark_test.go

consensus(engine/chain): real alpha-of-K quorum-cert finality (no proposer self-finality)

2026-06-22 16:32:28 -07:00

bft_committee_test.go

consensus(chain): dynamically clamp K/α to live validator count

2026-06-25 22:58:39 -07:00

block_test.go

chore(chain): rip AI-slop filenames — avalanche-clean naming

2026-06-28 15:14:16 -07:00

bootstrap_accept.go

Revert "fix(bootstrap): the floor is what we already hold, and the VM is an authority on it"

2026-08-08 06:21:06 -07:00

bootstrap_sync_test.go

fix(chain-bootstrap): content-addressed descent + weak-subjectivity + M2/M3 — close the forged-ancestry half of C1

2026-06-26 19:37:04 -07:00

byzantine_scale_red_test.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

canonical_representative_test.go

engine/chain: canonical-equivalent siblings are aliases, not forks

2026-07-03 21:07:04 -07:00

catchup_accept.go

chain: set cert retention by what recovery costs, not by what felt tidy

2026-08-14 08:16:43 -07:00

catchup_needs_cert_test.go

chain: one verify rule for every height, and wire the VM read-back where the node builds

2026-08-14 08:13:22 -07:00

catchup_selfheal_test.go

chain: request the cert catch-up the abandon path always promised

2026-08-01 00:58:56 -07:00

catchup_test.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

cert_canonical_aggregation_test.go

engine/chain: FIX #1 self-finality floor + FIX #3 canonical vote aggregation (v1.35.29)

2026-07-07 12:25:14 -07:00

cert_canonical_inversion_test.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

cert_codec_test.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

cert_codec.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

cert_fuzz_test.go

fix(engine/chain): QCv2 canonical-commitment finality + seed-hint semantics (incident 1082814)

2026-06-30 13:45:42 -07:00

cert_gossip_pacing_test.go

chain: end the frontier walk at the tip, and pace cert gossip

2026-08-14 07:56:43 -07:00

cert_height_test.go

chain: file a served cert under the height the cert attests

2026-08-14 04:30:07 -07:00

cert_store_test.go

feat(chain): keep finality certs on disk, so a peer catching up can still be served

2026-08-13 18:18:53 -07:00

cert_store.go

feat(chain): keep finality certs on disk, so a peer catching up can still be served

2026-08-13 18:18:53 -07:00

cert.go

chain: Nova ignites on a majority of stake, not a majority of heads

2026-08-13 22:29:04 -07:00

certified_descendant_head_test.go

fix(engine): hold the single-store invariant at every steer site, not just one

2026-07-28 08:52:38 -07:00

certified_steer_unreadable_test.go

fix(engine): no cert at a height is not proof of a conflicting one

2026-08-08 06:26:50 -07:00

committee_scaling_test.go

engine/chain: finality ladder in the Lux ontology (Photon→Wave→Nova→Quasar→Horizon)

2026-07-10 01:17:22 -07:00

committee_sizer_equivalence_test.go

engine/chain: committee-sizer drift-guard (RED #3) + -race scale cap for the convergence storm

2026-07-09 11:02:44 -07:00

comprehensive_test.go

fix(chain): α must mean α DISTINCT validators — ProcessVote takes the voter

2026-07-31 20:56:06 -07:00

conformance_test.go

fix(chain): α must mean α DISTINCT validators — ProcessVote takes the voter

2026-07-31 20:56:06 -07:00

consensus_test.go

test(engine/chain): make TestRestartPreservesState assert real state

2026-07-28 09:12:46 -07:00

consensus.go

fix(chain): let the finality walk read blocks back from the VM

2026-08-13 18:44:15 -07:00

convergence_bound_red_test.go

engine/chain: committee-sizer drift-guard (RED #3) + -race scale cap for the convergence storm

2026-07-09 11:02:44 -07:00

convergence_hardening_test.go

fix(engine/chain): RED-round convergence hardening — tunable settle (N4), K-recheck (N2), proven-loser parent filter (N1)

2026-07-01 15:02:48 -07:00

coverage_test.go

fix(chain): α must mean α DISTINCT validators — ProcessVote takes the voter

2026-07-31 20:56:06 -07:00

dedup_tally_test.go

fix(chain): α must mean α DISTINCT validators — ProcessVote takes the voter

2026-07-31 20:56:06 -07:00

doc.go

Replace symlinks with actual directories for Go module compatibility

2025-09-27 03:26:38 +00:00

dynamic_test.go

fix(chain): α must mean α DISTINCT validators — ProcessVote takes the voter

2026-07-31 20:56:06 -07:00

engine_test.go

fix(engine): union v1.36.9 (G9 reconcile) + v1.36.7 engine fixes for v1.36.10

2026-07-17 10:54:48 -07:00

engine.go

chain: one verify rule for every height, and wire the VM read-back where the node builds

2026-08-14 08:13:22 -07:00

epoch_binding_test.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

epoch_finality_test.go

fix(chain): α must mean α DISTINCT validators — ProcessVote takes the voter

2026-07-31 20:56:06 -07:00

epoch_receive_test.go

chore(chain): rip AI-slop filenames — avalanche-clean naming

2026-06-28 15:14:16 -07:00

ERROR_TESTS_SUMMARY.md

docs: snowball → Quasar/Wave terminology (no code changes)

2026-03-01 23:00:51 -08:00

errors_test.go

chore(chain): rip AI-slop filenames — avalanche-clean naming

2026-06-28 15:14:16 -07:00

fetch_attack_test.go

chore(chain): rip AI-slop filenames — avalanche-clean naming

2026-06-28 15:14:16 -07:00

fetch_test.go

chore(chain): rip AI-slop filenames — avalanche-clean naming

2026-06-28 15:14:16 -07:00

finality_seam_test.go

fix(chain): let the finality walk read blocks back from the VM

2026-08-13 18:44:15 -07:00

finality_test.go

fix(chain): α must mean α DISTINCT validators — ProcessVote takes the voter

2026-07-31 20:56:06 -07:00

finality.go

engine/chain: finality ladder in the Lux ontology (Photon→Wave→Nova→Quasar→Horizon)

2026-07-10 01:17:22 -07:00

finalize_resign_test.go

fix(engine/chain): advance the durable sign floor from Quasar only, never Nova

2026-07-30 07:03:57 -07:00

frontier_rebase_test.go

chain: end the frontier walk at the tip, and pace cert gossip

2026-08-14 07:56:43 -07:00

guard.go

chore(chain): rip AI-slop filenames — avalanche-clean naming

2026-06-28 15:14:16 -07:00

height_test.go

fix(chain): α must mean α DISTINCT validators — ProcessVote takes the voter

2026-07-31 20:56:06 -07:00

helpers_test.go

fix(chain): α must mean α DISTINCT validators — ProcessVote takes the voter

2026-07-31 20:56:06 -07:00

import_sync_test.go

consensus(engine/chain): real alpha-of-K quorum-cert finality (no proposer self-finality)

2026-06-22 16:32:28 -07:00

incident_1082814_test.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

integration.go

chain: Nova ignites on a majority of stake, not a majority of heads

2026-08-13 22:29:04 -07:00

intermediate_sibling_adversarial_test.go

engine/chain: canonicalize the intermediate-ancestor walk (close v1.36 load-livelock)

2026-07-10 15:28:01 -07:00

intermediate_sibling_livelock_test.go

engine/chain: canonicalize the intermediate-ancestor walk (close v1.36 load-livelock)

2026-07-10 15:28:01 -07:00

ledger_test.go

engine/chain: canonicalize the intermediate-ancestor walk (close v1.36 load-livelock)

2026-07-10 15:28:01 -07:00

ledger.go

chain: end the frontier walk at the tip, and pace cert gossip

2026-08-14 07:56:43 -07:00

lock_invariant_test.go

consensus: global unlock-before-call-out invariant + n=1..10 quorum matrix

2026-07-02 16:48:30 -07:00

lock_invariant.go

consensus: housekeeping — one ⅔ formula, leaf-lock doctrine (v1.35.16)

2026-07-02 17:48:59 -07:00

multinode_clone_test.go

engine/chain: vote-guard clone-artifact re-sign fallback (v4 Strategy-A)

2026-07-05 12:17:43 -07:00

multinode_harness_test.go

test(chain): deflake the partition-heal export assert — produce until export resumes

2026-08-01 02:28:27 -07:00

multinode_liveness_multiround_test.go

fix(engine/chain): durable + epoch-keyed + funnel-pruned vote-once guard (Red HIGH-1/HIGH-2/MEDIUM-1)

2026-06-30 23:18:15 -07:00

multinode_mainnet_committee_test.go

engine/chain: finality ladder in the Lux ontology (Photon→Wave→Nova→Quasar→Horizon)

2026-07-10 01:17:22 -07:00

multinode_proposer_test.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

multinode_reconverge_test.go

engine/chain: guard build-tip steer to held blocks (#2) + partition/heal re-converge harness

2026-07-05 11:59:22 -07:00

nova_quasar_matrix_test.go

chain: Nova ignites on a majority of stake, not a majority of heads

2026-08-13 22:29:04 -07:00

nova_stake_majority_test.go

chain: Nova ignites on a majority of stake, not a majority of heads

2026-08-13 22:29:04 -07:00

orphan_reconcile_test.go

fix(engine): stop steering the VM backwards, and stop calling a certified descendant a fork

2026-07-28 03:10:10 -07:00

params_test.go

fix(chain): α must mean α DISTINCT validators — ProcessVote takes the voter

2026-07-31 20:56:06 -07:00

poll_test.go

chore(chain): rip AI-slop filenames — avalanche-clean naming

2026-06-28 15:14:16 -07:00

preference_convergence_test.go

engine/chain: purge 'snowman' — Lux consensus is Quasar/Nova on the chain engine (comment-only, no behavior change)

2026-07-09 10:50:09 -07:00

probe_test.go

chain: Nova ignites on a majority of stake, not a majority of heads

2026-08-13 22:29:04 -07:00

proposal_key_test.go

engine/chain: trim proposal-identity comments (no behavior change)

2026-07-03 19:53:01 -07:00

proposer_liveness_test.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

proposer_resolicit_test.go

fix(engine/chain): re-solicit undecided own proposal on rebuild + real multi-node down/wedged/forked proposer suite

2026-06-30 20:36:31 -07:00

proposer_test.go

chore(chain): rip AI-slop filenames — avalanche-clean naming

2026-06-28 15:14:16 -07:00

quasar_signing_floor_test.go

fix(engine/chain): advance the durable sign floor from Quasar only, never Nova

2026-07-30 07:03:57 -07:00

quasar_test.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

quasar.go

chore(chain): rip AI-slop filenames — avalanche-clean naming

2026-06-28 15:14:16 -07:00

quorum_function_test.go

engine/chain: finality ladder in the Lux ontology (Photon→Wave→Nova→Quasar→Horizon)

2026-07-10 01:17:22 -07:00

quorum_matrix_test.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

quorum.go

chain: Nova ignites on a majority of stake, not a majority of heads

2026-08-13 22:29:04 -07:00

race_flag_norace_test.go

fix(engine/chain): fresh-net single-block finality — epoch-blind vote-once + per-height vote convergence

2026-07-01 13:13:34 -07:00

race_flag_race_test.go

fix(engine/chain): fresh-net single-block finality — epoch-blind vote-once + per-height vote convergence

2026-07-01 13:13:34 -07:00

reconcile_test.go

engine/chain: delete the Tendermint braid (Phase A — foundation for Nova sole decider)

2026-07-10 00:25:16 -07:00

reconcile.go

feat(engine/chain): expose the sign gate, and pin the invariants that keep it safe

2026-07-31 18:05:01 -07:00

recovery_test.go

fix(engine/chain): bound the build-rebuild storm + restore re-poll on the recovery test

2026-06-30 16:45:49 -07:00

red_independent_fork_test.go

fix(engine/chain): advance the durable sign floor from Quasar only, never Nova

2026-07-30 07:03:57 -07:00

red_sibling_fork_test.go

fix(engine/chain): per-height vote-once discipline — closes the cross-node fork (Red CRITICAL)

2026-06-30 22:03:12 -07:00

reorg_test.go

engine/chain: purge 'snowman' — Lux consensus is Quasar/Nova on the chain engine (comment-only, no behavior change)

2026-07-09 10:50:09 -07:00

scale_invariance_red_test.go

engine/chain: RED adversarial scale/Byzantine/convergence/winner-determinism suite

2026-07-09 10:50:09 -07:00

sign_gate_status_test.go

feat(engine/chain): expose the sign gate, and pin the invariants that keep it safe

2026-07-31 18:05:01 -07:00

sign_gate_status.go

feat(engine/chain): expose the sign gate, and pin the invariants that keep it safe

2026-07-31 18:05:01 -07:00

single_node_test.go

consensus: DECOMPLECT single-validator finalize — remove selfVoter shortcut (one path, ava-aligned)

2026-07-02 15:29:14 -07:00

singlenode_decide_test.go

consensus: DECOMPLECT single-validator finalize — remove selfVoter shortcut (one path, ava-aligned)

2026-07-02 15:29:14 -07:00

stake_test.go

chain: Nova ignites on a majority of stake, not a majority of heads

2026-08-13 22:29:04 -07:00

status_test.go

chore(chain): rip AI-slop filenames — avalanche-clean naming

2026-06-28 15:14:16 -07:00

storm_helpers_test.go

engine/chain: delete the Tendermint braid (Phase A — foundation for Nova sole decider)

2026-07-10 00:25:16 -07:00

sync_test.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

topological.go

fix(chain): let the finality walk read blocks back from the VM

2026-08-13 18:44:15 -07:00

topology.go

chain: Nova ignites on a majority of stake, not a majority of heads

2026-08-13 22:29:04 -07:00

transient_selffinality_floor_test.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

transitive_test.go

refactor: quasar protocol improvements and test updates

2026-01-03 07:01:00 -08:00

verified_cert.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

vote_guard_test.go

fix(engine/chain): advance the durable sign floor from Quasar only, never Nova

2026-07-30 07:03:57 -07:00

vote_guard.go

feat(chain): keep finality certs on disk, so a peer catching up can still be served

2026-08-13 18:18:53 -07:00

vote_safety_invariants_test.go

fix(chain): α must mean α DISTINCT validators — ProcessVote takes the voter

2026-07-31 20:56:06 -07:00

weighted_test.go

engine/chain: v1.36 two-tier accept — Nova (majority) accept vs Quasar (⅔-stake) export

2026-07-10 03:58:20 -07:00

winner_determinism_red_test.go

engine/chain: RED adversarial scale/Byzantine/convergence/winner-determinism suite

2026-07-09 10:50:09 -07:00

wrapper_bycanonical_adversarial_test.go

engine/chain: canonicalize the intermediate-ancestor walk (close v1.36 load-livelock)

2026-07-10 15:28:01 -07:00