Method handle_finalized_block

finalizer/src/actor.rs:399–734

(
        &mut self,
        ack_tx: Exact,
        block: Block,
        finalization: Option<
            Finalization<bls12381_multisig::Scheme<PublicKey, V>, <Block as Digestible>::Digest>,
      

    canonical_state: ConsensusState,

    // Fork states (notarized but not yet finalized)
    fork_states: BTreeMap<u64, BTreeMap<Digest, ForkState>>,

    // Tombstones for fork states that were executed before a conflicting
    // ancestor finalized. Later NotifyAtHeight calls for these digests should
    // fail immediately instead of being stored as waiters for a block that can
    // no longer become canonical-compatible.
    dead_fork_digests: HashSet<(u64, Digest)>,

    // Orphaned notarized blocks that arrived before their parent
    orphaned_blocks: BTreeMap<u64, HashMap<Digest, Vec<Block>>>,

    // Finalized blocks deferred because the EL returned SYNCING.
    // FIFO, drained in arrival (= height) order by `drain_pending`.
    pending_finalized: VecDeque<PendingFinalized<V>>,

    // Notarized blocks deferred because the EL returned SYNCING.
    // FIFO; each entry is retried independently because forks have independent
    // parent states which are re-resolved by `handle_notarized_block` on drain.
    pending_notarized: VecDeque<PendingNotarized>,
    // Membership set for deduping `pending_notarized` by block digest.
    pending_notarized_keys: HashSet<Digest>,

    // Whether either buffer has crossed the warn threshold since the last
    // time it was empty. Edge-triggered to avoid log spam on every tick.
    pending_warn_active: bool,

    // How often `drain_pending` runs while the EL is recovering from SYNCING.
    drain_interval: Duration,

    // Soft threshold for emitting a warn log when either pending buffer grows.
    // No cap is enforced; observability only.
    buffered_blocks_warn_threshold: usize,
    // Hard cap for unique deferred notarized blocks while the EL is SYNCING.
    pending_notarized_max: usize,

    genesis_hash: [u8; 32],
    protocol_consts: ProtocolConsts,
    deposit_signature_domain: Digest,
    oracle: O,
    node_public_key: PublicKey,

    /// Chain bound domain (`chain_domain(config_digest)`) used to derive the
    /// authorized observer child keys. Must match the domain the live P2P
    /// observer signer is derived with (see node startup), or observers will
    /// not be authenticated. Distinct from the raw deposit namespace, which is
    /// already folded into `deposit_signature_domain`.
    observer_domain: Vec<u8>,
    validator_exit: bool,
    cancellation_token: CancellationToken,
    _signer_marker: PhantomData<S>,
    _variant_marker: PhantomData<V>,
    #[cfg(debug_assertions)]
    height_gauge: Gauge,
    #[cfg(debug_assertions)]
    consensus_state_stored_gauge: Gauge,
}