Struct TempoConsensus 

pub struct TempoConsensus {
    seed: B256,
    epoch_length: NonZeroU64,
    initial: Checkpoint,
    state: Checkpoint,
    checkpoints: BTreeMap<u64, Checkpoint>,
    finalizations: BTreeMap<u64, TempoFinalization>,
    retained_height: u64,
}

A deterministic development committee with one participant and quorum one.

Fields

seed: B256

epoch_length: NonZeroU64

initial: Checkpoint

state: Checkpoint

checkpoints: BTreeMap<u64, Checkpoint>

finalizations: BTreeMap<u64, TempoFinalization>

retained_height: u64

Implementations

impl TempoConsensus

pub fn new(seed: B256, epoch_length: NonZeroU64) -> Self

Creates the development committee at genesis.

pub fn at_height(seed: B256, epoch_length: NonZeroU64, height: u64) -> Self

Starts at an unsigned checkpoint, without certifying or importing its history.

The local identity is independent of any upstream committee. Only strict successors of this height can be signed. Reset restores this anchor; unwind cannot cross it.

pub fn default_seed(mnemonic: &str) -> B256

Derives the default seed from the account mnemonic with a consensus-specific domain.

pub fn identity(&self) -> TempoConsensusIdentity

Returns the public development identity.

pub fn prepare_header( &self, header: &mut TempoHeader, hardfork: TempoHardfork, ) -> Result<(), TempoConsensusError>

Installs metadata for the next header before its hash is calculated.

Genesis stays contextless and unsigned. Only its consensus_context is cleared; all other fields, including caller-provided extra_data, are preserved.

For other heights, this owns consensus_context and extra_data: non-boundaries have no dealer logs, while boundaries announce the native next-epoch outcome. Execution fields are preserved. Errors leave the header unchanged.

pub fn finalize( &mut self, header: &TempoHeader, hardfork: TempoHardfork, ) -> Result<TempoFinalization, TempoConsensusError>

Certifies a prepared native header and checkpoints the resulting local state.

Revalidates the metadata against the current key schedule, so rotating after preparation cannot sign a stale boundary announcement. The digest is computed from the complete native header. This does not validate execution, body commitments, or canonical chain membership; callers must commit the header and consensus state atomically with those checks.

pub fn finalization(&self, height: u64) -> Option<&TempoFinalization>

Returns the certificate for a retained signed height, excluding the unsigned anchor.

pub fn latest(&self) -> Option<(u64, &TempoFinalization)>

Returns the latest signed height and its certificate.

fn identity_at(&self, epoch: u64) -> TempoConsensusIdentity

fn committee_at(&self, epoch: u64) -> (&u64, &Arc<Committee>)

fn check_next_height(&self, height: u64) -> Result<(), TempoConsensusError>

fn header_metadata( &self, height: u64, include_context: bool, ) -> Result<PreparedHeaderMetadata, TempoConsensusError>

pub fn rotate(&mut self) -> Result<TempoConsensusIdentity, TempoConsensusError>

Schedules a fresh committee after the epoch containing the next block.

Repeated calls replace the pending key for the same epoch, consuming one counter each. A key already announced by a finalized boundary cannot be replaced by this operation.

pub fn unwind(&mut self, height: u64) -> Result<(), TempoConsensusError>

Removes unwound certificates and restores the retained height’s key schedule and counter.

Pending rotations after that checkpoint are discarded. Rewinding zero blocks is a no-op; use a cloned controller to restore an exact snapshot, including pending rotations. Heights below the most recent pruning boundary cannot be restored.

pub fn reset(&mut self)

Clears certificates and rotations, restoring the original unsigned anchor and identity.

fn round(&self, height: u64) -> (u64, u64, u64)

Returns the epoch, view, and parent view for a non-genesis height.

pub fn prune(&mut self, below: u64) -> Result<(), TempoConsensusError>

Removes certificates and checkpoints strictly below below, advancing the rewind floor.

The current head and pending rotations are unchanged. Any checkpoint and certificate at below remain available, so pruning at the head retains its finalized state. Requests at or below the existing floor are no-ops; requests above the head fail without changing state. Self::reset still restores the original unsigned anchor and clears the pruning boundary.

pub(super) const fn anchor_height(&self) -> u64

Returns the unsigned initial height, independently of the pruning boundary.

Trait Implementations

impl Clone for TempoConsensus

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

Layout

Note: Most layout information is completely unstable and may even differ between compilations. The only exception is types with certain repr(...) attributes. Please see the Rust Reference's “Type Layout” chapter for details on type layout guarantees.

Size: 176 bytes