RAFT Transaction Reconciliation Engine

The RAFT Transaction Reconciliation Engine is the correctness subsystem in TrustedTrucks responsible for detecting and repairing divergence between local command state, nonce reservation state, Quorum RAFT committed chain state, the transactional outbox, the projection/indexer state, and the status API.

Fixed Architectural Assumptions

• Consensus Assumption: Quorum RAFT only (Crash Fault Tolerant). RAFT provides immediate finality once a block is committed; reorg handling is not required.
• Nonce Integrity: Nonce ordering remains sequential per (chain_id, signer_address).
• Concurrency Control: The reconciler is single-writer per signer address, enforced via PostgreSQL advisory locks.

Key Responsibilities

1. Detect Stale Transaction States: Flag transactions stuck in "submitted" or "pending" states longer than the block time threshold.
2. Detect Signer Nonce Gaps: Identify missing nonces in the blockchain log and re-route/re-sign subsequent transactions.
3. Repair Outbox States: Sync finalized-but-not-indexed states through the outbox to ensure front-end visibility.
4. Pause/Resume Signers: Safely freeze transaction pipelines if state ambiguity threatens double-execution.

Genesis-Level Constraints

• Block Gas Limit: 0xE0000000 (3,758,096,384 gas per block)
• Transaction Size Limit: 512 KB
• Raft Quorum Requirement: (N/2 + 1) nodes.