Operations
Coordinator HA
Active / passive coordinator failover under 30 seconds.
Roles
Exactly one coordinator is primary at any time. Passives replicate the primary's snapshot and watch its heartbeat over the validator gossip channel.
Failover
If the heartbeat is missed beyond the configured threshold, passives run a deterministic election based on reputation and configured priority. The new primary publishes a takeover record on-chain and resumes operation. The scenario test asserts < 30 s RTO.