fail-stop processors and redundancy to protect the integrity of the data on a
system and constrain the failure rates.
A fail-stop processor automatically halts in response to any internal failure
and before the effects of that failure become visible. [74]