Problem: halt-height behavior is not deterministic

Solution:
- make sure in state machine that we don't execute block beyond halt-height

CHANGELOG.md

@@ -41,6 +41,7 @@ Ref: https://keepachangelog.com/en/1.0.0/
 ### Bug Fixes
 
 * [#16547](https://github.com/cosmos/cosmos-sdk/pull/16547) Ensure a transaction's gas limit cannot exceed the block gas limit.
+* [#]() Make sure we don't execute blocks beyond the halt height.
 
 ### Improvements
 

baseapp/abci.go

@@ -648,6 +648,20 @@ func (app *BaseApp) VerifyVoteExtension(req *abci.RequestVerifyVoteExtension) (r
 func (app *BaseApp) FinalizeBlock(req *abci.RequestFinalizeBlock) (*abci.ResponseFinalizeBlock, error) {
 	var events []abci.Event
 
+	// don't execute blocks beyond the halt height
+	var halt bool
+	switch {
+	case app.haltHeight > 0 && uint64(req.Height) > app.haltHeight:
+		halt = true
+
+	case app.haltTime > 0 && req.Time.Unix() > int64(app.haltTime):
+		halt = true
+	}
+
+	if halt {
+		return nil, fmt.Errorf("halt per configuration height %d time %d", app.haltHeight, app.haltTime)
+	}
+
 	if err := app.validateFinalizeBlockHeight(req); err != nil {
 		return nil, err
 	}