Coordinated three-node cutover

Coordinated three-node cutover A workflow diagram generated by Archify. 01 / Preflight, isolation and durable checkpoint 02 / Install and prove recovery 03 / Failure boundary Preflight · Exact artifact pair · Preflight, isolation and durable checkpoint Preflight Exact artifact pair Stage all three · Binary + CuEVM library · Preflight, isolation and durable checkpoint Stage all three Binary + CuEVM library Close ingress · Suspend watchdogs · Preflight, isolation and durable checkpoint Close ingress Suspend watchdogs Stop validators · Then quiesce sequencer · Preflight, isolation and durable checkpoint Stop validators Then quiesce sequencer Check durable state · Heights + epoch + snapshot · Preflight, isolation and durable checkpoint Check durable state Heights + epoch + snapshot Protocol gate · Changed: snapshot first · Preflight, isolation and durable checkpoint Protocol gate Changed: snapshot first Reopen proxy · Acceptance checks · Install and prove recovery Reopen proxy Acceptance checks Start sequencer · Verify progress · Install and prove recovery Start sequencer Verify progress Start validators · Verify recovery · Install and prove recovery Start validators Verify recovery Install pair · Same artifacts on all three · Install and prove recovery Install pair Same artifacts on all three Emergency halt · Proxy stays closed · Failure boundary Emergency halt Proxy stays closed failure Legend Node operation Safety gate Durable state RPC ingress

One artifact, three roles

  • • Stop both validators, then quiesce the sequencer.
  • • Match durable heights, epoch and common snapshot.
  • • Changed protocol: snapshot gate. Same protocol: skip EBS.

Storage-open rollback boundary

  • • Before storage opens: restore old artifact pairs and reconverge.
  • • After opening: halt for manual recovery; keep the proxy closed.
  • • Apply this rule to every failed post-open acceptance step.

Controlled restart

  • • Recover validators, then start the sequencer and prove progress.
  • • Reopen ingress after acceptance. This supersedes rolling replacement.