tolerate failure correctly