Title: On the design of fault-tolerant computer control systems