3.6 Fault-tolerance hierarchy