Implement timeout for the deadlock of traverse & transactions.

This has proven to be intractible: various attempts to eliminate have failed, so detect at runtime and cease the traversal (and do the remaining ops outside a traverse).