To prevent any rollback in the signing process, any dispatching right after signing in the worker should be best effort without any error returned. A secondary retrier/watch-dog should pick up potentially bad broadcasted raw transactions and fix them by either:
Topping up gas
Bumping gas (requires resigning and replacing the otx)
Replacing nonce (requires resigning and replacing the otx) though ideally this class of error is completely eliminated
To prevent any rollback in the signing process, any dispatching right after signing in the worker should be best effort without any error returned. A secondary retrier/watch-dog should pick up potentially bad broadcasted raw transactions and fix them by either: