Summary

• Add cannot unwind past 0 checks before sender and tx lookup stage unwind arithmetic.
• Guard state_stages one-shot and loop unwind paths before subtracting from unsigned block numbers.
• Clamp the backward-loop stop boundary at genesis to avoid uint64 underflow while preserving the existing integration command flow.