This ROB design is exactly what ships inside real chips: Intel's Golden Cove core uses a 512-entry ROB and earlier Sunny Cove used 352, precisely to keep more independent instructions in flight around slow memory operations. Precise exceptions guaranteed by in-order retirement are also why a page fault or divide-by-zero in real hardware always reports a consistent, debuggable machine state despite instructions finishing out of order.