full fault tolerance