Bullshark cert-pull: when the commit rule is blocked on a locally-missing leader/support cert, pull exactly the stalled rounds (leader round + R+1..R+3) so the local commit rule converges instead of wedging until the watchdog restart. Cuts how often the fleet reaches the fork-risky unilateral wave-skip (left untouched). Async, rate-limited, idempotent — liveness-only, fork-safe.
Bundled safe wins (all liveness-only/off-chain, no fork risk):
- ACX restart-safe: acx_overview now reports trie-backed jobsSettled/escrow after a restart (SetStateReader wired).
- Overflow-tx fund-loss: commit cleanup only marks the EXECUTED set, so backpressure-deferred txs survive for re-commit.
- DAG density: proposals link all certified parents (more support edges, fewer missing-cert stalls).
Bundles the tx-body dissemination fix (654d408d) so committed tx bodies travel with the DAG. Drop-in binary swap — identical shared-lib footprint to 1.7.20 (mysticeti/hpn/three_circuit). Verified: full consensus test suite + 5 new cert-pull tests green; clean boot smoke test.