How to prevent tlogs from overcommitting

Thanks all for reviewing and @Evan for fixing the corruptions! We’ve just internally ported the changes to 3.x as well while we are (still) pending validations for the move to 5.x (the latest is the CC slamming that’s also fixed internally in 3.x).